Notice

Privacy notice relating to the HALEU deconversion competition

Published 1 July 2024

© Crown copyright 2024

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/haleu-deconversion-competition-privacy-notice/privacy-notice-relating-to-the-haleu-deconversion-competition

This notice sets out how we will process your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).

We are processing your personal data for the purpose of assessing your Green Industries Growth Accelerator (GIGA) HALEU commercial deconversion application and for the ongoing delivery, monitoring and reporting of progress of the project in line with the Grant Funding Agreement (GFA) issued to you.

Your data

We will process the following personal data:

  • names and contact details of employees involved in preparing and submitting the application
  • names and contact details of employees proposed to be involved in delivery of the project
  • names, contact details, qualifications, and experience of employees whose CVs are submitted as part of the bid
  • names, contact details, salary detail, qualifications and experience of employees who are working on the project for the sampling of staff costs, employment verification and project expenditure purposes

We may also process special category data or data about criminal convictions if you volunteer such information.

Purpose

The purpose(s) for which we are processing your personal data is:

  • to verify information included in your application
  • to monitor the progress and operational delivery of the project
  • for evaluation of the project to understand its impact and to inform future government policy
  • for the prevention, investigation, and detection of fraud

The legal basis for processing your personal data under Article 6 of the UK GDPR is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. In this case, that is being accountable and transparent about the functions and policies for which the department is responsible. The processing of personal data is required for the delivery of the GIGA HALEU Commercial Deconversion Competition where it will be used as part of the assessment of applications and in ongoing monitoring of projects in receipt of grant funding. This includes:

  • the exercise of a function conferred on a person by an enactment
  • the exercise of a function of either House of Parliament
  • the administration of justice

Where special category data or data about criminal convictions is volunteered by a correspondent, our legal basis for processing it is:

The processing is necessary for reasons of substantial public interest for the exercise of a function of the Crown, a minister of the Crown, or a government department. The substantial public interest is being accountable and transparent about the functions and policies for which the department is responsible.

Recipients

Your personal data will be shared by us with:

  • His Majesty’s Treasury (HMT)
  • Cabinet Office (CO)
  • National Audit Office (NAO)
  • Jeremy Benn Associates Limited (t/a JBA Consulting) (“JBA”)
  • external experts involved in the assessment of applications
  • external parties contracted to undertake evaluation of the award or the wider Green Industries Growth Accelerator fund

Data will be shared with other governmental bodies (His Majesty’s Governmental departments and agencies) if they are involved in assessment, the issuing of grant funding or to improve the government’s ability to support acceleration of advanced manufacturing capacity in key net zero sectors including Nuclear. When your data is shared with other government bodies, it will be classified as commercially sensitive, and the recipient will be bound by the same terms of confidentiality as all civil servants.

JBA are contracted by UK government and are operating the online platform. They will not be assessing bids.

Data will be shared with external experts involved in the assessment of applications, whose expertise which falls within the requirements of the public task.

Your data will be processed for the purposes of the prevention, investigation, detection, or prosecution of criminal offences including fraud.

Your information may be shared with other public bodies, or the devolved administrations, where it is necessary in order to provide a full answer to you, or where it is necessary to transfer correspondence to a more appropriate body for answer.

Your information may be shared with your MP where they are writing on your behalf.

As your personal data will be stored on our IT infrastructure it will also be shared with our data processors JBA, Microsoft and Amazon Web Services.

Retention

Your personal data will be kept by us for the duration of the investment programme period. After the investment programme has closed your personal data will be deleted within 30 days, except that which is necessary to retain in order to ensure continued monitoring and evaluation of any successful applications. This will be managed by the processor on a regular basis and regularly reviewed as part of the process. This data will then be deleted within 30 days after the contract has ended.

Personal information in correspondence will usually be deleted 3 calendar years after the correspondence or case is closed or concluded.

Public correspondence may however be kept if it is sufficiently significant that it should be retained for the historical record.

Automated decision making

Your personal data will not be subject to automated decision making.

International transfers

Your personal data will be processed in the UK. However, your personal data is stored on our IT infrastructure and shared with our data processors, Microsoft, and Amazon Web Services. As such, it may be transferred and stored securely outside the UK & European Economic Area (EEA). Where that is the case, it will be subject to equivalent legal protection through the use of Model Contract Clauses.

Your rights

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.

You have the right to request that any inaccuracies in your personal data are rectified without delay.

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.

You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.

You have the right to object to processing in certain circumstances.

To exercise your rights please contact the Data Protection Officer using the contact details below.

Contact details

The data controller for your personal data is the Department for Energy Security and Net Zero (DESNZ).

Contact the DESNZ DPO:

DESNZ Data Protection Officer
Department for Energy Security and Net Zero
3-8 Whitehall Place
London
SW1A 2EG

If you are unhappy with the way we have handled your personal data, please write to the department’s Data Protection Officer in the first instance using the contact details above.

Data processor

The data processor of your personal data is Jeremy Benn Associates Limited (“JBA”). You can contact the JBA Group Data Privacy Manager at:

Jeremy Benn Associates Limited
1 Broughton Park, Old Lane North
Broughton
Skipton
North Yorkshire
BD23 3FD

Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an UK independent regulator.  The Information Commissioner can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

https://ico.org.uk/make-a-complaint/

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Updates to this notice

If this privacy notice changes in any way, we will provide you with an updated version. Regularly reviewing this ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. When an updated version is provided, the ‘last updated’ date at the bottom of this page will also change.

If these changes affect how your personal data is processed, we will take reasonable steps to let you know.

Last updated: 04/04/2024

Back to top