Privacy Notice

The Department of Environment, Food & Agriculture (DEFA) is registered with the Information Commissioner as a Controller.

The Department takes its responsibilities in relation to your personal information very seriously and makes every effort to ensure it is secure and not used for any purpose incompatible with that for which it was originally collected.

If you have any concerns or questions about how the Department deals with your personal information please contact our Data Protection Officer on 686781 or by email at DPO_DEFA@gov.im

• 'personal data' means any information relating to an identified or identifiable natural person ('data subject'). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  
  
• 'processing' means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
  
  
• 'Controller' means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
  
  
• 'Processor' means a natural or legal person (other than an employee of the Department), public authority, agency or other body which processes personal data on behalf of the controller.

We collect and process information, including your Personal Information in order to carry out our statutory functions such as to administer planning applications, to protect the environment, to protect individuals in places of work, etc.

Your Personal Information may be collected:

• Application forms
• Permit request made via letter or email
• Over the telephone or via email when you make a report or request a service
• Quotes or invoices for grants, services or goods
• Electronic or paper logbooks and catch returns
• Vessel Monitoring System (VMS)
• Responses to public or stakeholder consultations

We also may be in receipt of your data from third parties for the purposes of fisheries management, enforcement, licensing, catch data, fish health monitoring, including from:

• UK fisheries administrations
• Manx Fish Producers Organisation
• Applied Satellite Technology Ltd (vessel location/activity)
• THEMIS (vessel monitoring system)
• Nest Design Ltd (fisheries reporting software)
• CEFAS (e.g. fish health and vessel licensing)
• Sunset Lakes Ltd (coarse fish licensing)
• Isle of Man Post Office & Welcome Centre (angling licence sales)

Your Personal Information may be shared with the bodies listed below in the public interest on the basis of the legislation listed below.
We may share your data with third parties to carry out our division's functions which may include:

• Bangor University (govt. fisheries science)
• Isle of Man Ship Registry
• Marine Management Organisation
• law enforcement agencies
• fraud prevention agencies
• UK Coastguard
• Manx Telecom (fishing industry text messages)

We may collect and hold the following Personal Information, dependent on the purpose:

• Name, address, date of birth, phone number, email address.
• Payment details (sort code and bank account no.).
• Your stated views and opinions.
• Commercial fishing vessel licence details (category of licence, and entitlements permitted to be fished in UK and IOM waters).
• Commercial vessel fishing activity (position and times via VMS).
• Vessel owners' name, address, phone numbers and email addresses.
• Research institute name and contact person, as well as the research scientist and research vessel master name.

Further, please note that we collect third party information via the Isle of Man sea fishing licence application, including:

• Nominee contact details (name, address, email address), which is the person/company to whom the licence or any amendment or variations are sent at the request of a vessel owner or authorised company director of the company that owns the vessel;
• Master mobile number.

Your Personal Information is processed where this is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Department. The basis for this processing may be found in:

Fisheries Act 2012
Wildlife Act 1990

Your Personal Information will be kept in accordance with retention periods.
General correspondence is retained for five years

• Fisheries infringements and enforcement cases for seven years.
• Serious fisheries infringements and enforcement cases for 25 years, as selected by PRO*.
• Commercial Isle of Man licence holders' specific fisheries authorisations and related correspondence is retained for seven years.
• History of changes with specific fisheries authorisations is retained for 25 years, but the associated personal information redacted after seven years.
• UK commercial vessel licensing for IOM registered vessels is retained, and kept for up to seven years beyond the licence becoming in-active.
• Commercial fisheries catch data (logsheets/catch returns) is retained indefinitely, but the associated personal information is redacted after seven years.
• Grant applications and claims are retained for the period of grant plus six years.
• Minutes of meetings are retained for 25 years, as selected by PRO*.

*Please note the Public Record Office (PRO) selects records placing a duty upon DEFA to retain those records for 25 years before transfer to their office.

Scientific research surveys permitted are notified of on the website at surveysinIOMwaters Notification states the research institute name, research vessel name and the co-ordinates/location of the survey, and notice remains online for up to one post-survey.

The security and confidentiality of your information is very important to us.

We will ensure that:

• Safeguards are in place to make sure personal data is kept securely.
• Only authorised staff are able to view your data.
• Whenever any processing of personal information is considered that has not been carried out before we will risk assess the entire process and consult the Information Commissioner's Office if we determine there is any high risk to your information cannot be mitigated.
• Staff training in data protection is a continuous process and all new staff must undertake online training.

The Department does not carry out any automated processing.

You have a right to access your personal data to ensure that it is accurate, and to request that it is rectified, blocked, erased or destroyed if it is inaccurate.

To make any request relating to your data held by us, please contact our Data Protection Officer using the details below.

Guidance on making a Data Subject Access Request, when you can request copies of all the Personal Data held about you.

If you are not satisfied with the response you receive, you may also complain to the Information Commissioner, whose details can be found on www.inforights.im, or the relevant supervisory authority. You may have a right to other remedies.

Department of Environment, Food and Agriculture
Thie Slieau Whallian
Foxdale Road
St John's
Isle of Man
IM4 3AS
Phone: 01624 686781
Fax: 01624 685851
E-mail: DPO-DEFA@gov.im