Notice

MRIP: privacy notice

Updated 18 October 2023

© Crown copyright 2023

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/medical-radionuclide-innovation-programme/annex-6-medical-radionuclide-innovation-programme-mrip-privacy-notice

This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).

Your data

We will process the following personal data:

  • names and contact details of contacts at the applicant organisation, or consortium, if applicable

Purpose

The purpose(s) for which we are processing your personal data is to support:

  • our assessment of applications for the Medical Radionuclide Innovation Programme (MRIP)
  • the monitoring of projects that are successful in the MRIP process
  • communications about the MRIP
  • longer term evaluation related to the MRIP
  • in the event of a legal challenge to such MRIP application exercise

Should you contact the MRIP enquiries service, we will process your personal data so that we can continue to liaise with you and your company about your proposal.

The legal basis for processing your personal data is that processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller under Article 6(1) of the UK GDPR, such as:

  • the exercise of a function of the Crown, a Minister of the Crown, or a government department
  • the exercise of a function conferred on a person by an enactment
  • the exercise of a function of either House of Parliament
  • the administration of justice for the assessment of potential awarding of grant funding

In this case, for the purposes of assessment, monitoring, communication, research and/or evaluation relating to the MRIP.

Recipients

Your personal data will be shared by us with our third-party contractors appointed by the Department for Energy Security and Net Zero (DESNZ) for the purposes of assessment, monitoring, communication, research and / or evaluation relating to the MRIP.

Data may be shared with other governmental departments and the devolved administrations for communication, research and/or monitoring and evaluation relating to the MRIP.

As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Microsoft and Amazon Web Services.

DESNZ may share applicant data if DESNZ are required to do so by law, for example by court order or to prevent fraud or other crime. This could also include monitoring and reporting on Public Sector Equality Duty (PSED) data.

Retention

Your personal data will be kept by us as part of the contract documentation for the duration of the MRIP and also for the evaluation and monitoring of the programme delivery. Any documents/data submitted to the MRIP will be used for the evaluation and monitoring of the project and complies with the Data Protection Act 2018 which is the UK’s implementation of the General Data Protection Regulation (GDPR). We will hold your data for the period necessary for evaluation, monitoring and reviewing the Medical Radionuclide Innovation Programme against the objectives and benefits it is aiming to achieve into the future decades.

Automated decision making

Your personal data will not be subject to automated decision making.

Your rights

You have the right to:

  • request information about how your personal data are processed, and to request a copy of that personal data
  • request that any inaccuracies in your personal data are rectified without delay
  • request that any incomplete personal data are completed, including by means of a supplementary statement
  • request that your personal data are erased if there is no longer a justification for them to be processed
  • in certain circumstances (for example, where accuracy is contested) request that the processing of your personal data is restricted
  • object to the processing of your personal data
  • object to the processing of your personal data where it is processed for direct marketing purposes
  • withdraw consent to the processing of your personal data at any time. If you wish to exercise that right, you should email mrip@energysecurity.gov.uk.

International transfers

As your personal data is stored on our IT infrastructure and shared with our data processors Microsoft and Amazon Web Services it may be transferred and stored securely outside the UK and European Economic Area. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.

Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an UK independent regulator. The Information Commissioner can be contacted at:

Information Commissioner’s Office
Email: icocasework@ico.org.uk
Contact form: Make a complaint
Telephone: 0303 123 1113
Textphone: 01625 545 860

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Contact details

The data controller for your personal data is the Department for Energy Security and Net Zero (DESNZ).

Contact the DESNZ DPO:

DESNZ Data Protection Officer
Department for Energy Security and Net Zero
3-8 Whitehall Place
London
SW1A 2EG

Back to top