Knowledge Assets Grant Fund: privacy notice
Published 6 October 2021
This notice sets out how we will use your personal data, and your rights, if you’re applying to the Knowledge Assets Grant Fund. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).
Your data
We will process the following personal data:
- names and contact details of applicants applying to the Knowledge Assets Grant Fund
- names of the approvers within the organisation of those applications
- unnamed self-declared diversity data on applicants
Purpose
The purpose for which we are processing your personal data is:
- to process applications to the Knowledge Assets Grant Fund and monitor and evaluate the equalities impact of the programme
Legal basis of processing
The legal basis for processing your personal data is:
- Public task: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, such as the exercise of a function of the Crown, a Minister of the Crown, or a government department; the exercise of a function conferred on a person by an enactment; the exercise of a function of either House of Parliament; or the administration of justice. Collecting the data will allow us to process the applications to the Knowledge Assets Grant Fund and enable monitoring and evaluation of impacts of the grant awards.
The legal basis for processing your Special Category Data [footnote 1] is:
processing is of a specific category of personal data and it is necessary for the purposes of identifying or keeping under review the existence or absence of equality of opportunity or treatment between groups of people specified (in paragraph 8(2) of Part 2 of Schedule 1 to the Data Protection Act 2018) in relation to that category with a view to enabling such equality to be promoted or maintained; and it is not carried out for the purposes of measures or decisions with respect to a particular data subject; and you have not declined consent; and you have not given notice that you do not wish your data to be processed for these purposes; and the processing is not likely to cause substantial damage or substantial distress to an individual; and an appropriate policy document is in place. Self-declared data on the characteristics of racial or ethnic origin of the innovation teams making applications to the grant fund will be collected via a voluntary questionnaire.
Recipients
Your personal data will not be shared outside the Knowledge Assets Grant Fund secretariat. We may share your data if we are required to do so by law, for example by court order or to prevent fraud or other crime.
As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Microsoft and Amazon Web Services.
Retention
Both successful and unsuccessful applications will be kept for a period of 4 years following the date of panel assessment to allow for monitoring and evaluation of the Grant Fund, including to inform future design. Aggregated data on the innovation projects will be retained indefinitely to allow for ongoing monitoring and evaluation.
Your rights
You have the right to:
- request information about how your personal data are processed, and to request a copy of that personal data
- request that any inaccuracies in your personal data are rectified without delay
- request that any incomplete personal data are completed, including by means of a supplementary statement
- request that your personal data are erased if there is no longer a justification for them to be processed
- in certain circumstances (for example, where accuracy is contested), request that the processing of your personal data is restricted
- object to the processing of your personal data where it is processed for direct marketing purposes
- object to the processing of your personal data
International Transfers
As your personal data is stored on our IT infrastructure and shared with our data processors Microsoft and Amazon Web Services, it may be transferred and stored securely in the UK and European Economic Area. Where your personal data is stored outside the UK and EEA it will be subject to equivalent legal protection through the use of Model Contract Clauses.
Complaints
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an UK independent regulator. The Information Commissioner can be contacted at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Email casework@ico.org.uk
Telephone 0303 123 1113
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
Contact details
The data controller for your personal data is the Department for Science, Innovation and Technology (DSIT).
You can contact the DSIT Data Protection Officer at:
DSIT Data Protection Officer
Department for Science, Innovation and Technology
22-26 Whitehall
London
SW1A 2EG
-
Special Category Data (often known as Sensitive Personal data) is personal data is personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation. ↩