Privacy notice for the medicines and diagnostics manufacturing transformation fund scheme
Updated 21 May 2021
This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and 14 of the UK General Data Protection Regulation (UK GDPR).
This notice was last updated on 21 May 2021.
Your data
Purpose
The purpose for which we are processing your personal data is to support our assessment of bids in the Medicines and Diagnostics Manufacturing Transformation Fund (MDMTF).
The data we collect
We will process the following personal data:
- name, job title and contact details (email addresses and telephone numbers) of lead contacts at applicant organisations
- names, job titles and contact details (email addresses and telephone numbers) of key project personnel
Legal basis for processing your personal data
The legal basis for processing your personal data is processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. This includes:
- the exercise of a function of the Crown, a minister of the Crown, or a government department
- the exercise of a function conferred on a person by an enactment
- the exercise of a function of either House of Parliament
- the administration of justice
What we do with your data
Your personal data will be shared where necessary with colleagues at:
- Department for International Trade (DIT)
- Her Majesty’s Treasury (HMT)
- Cabinet Office (CO)
- National Audit Office (NAO)
- UK Research and Innovation (UKRI)
- Jeremy Benn Associates Limited (JBA)
Data may be shared with the Medicines and Healthcare Products Regulatory Agency (MHRA) where necessary if they are involved in the assessment of applications.
Data will be shared with other governmental departments where necessary if they are involved in assessment or the issuing of grant funding.
JBA are contracted by UK government and are operating the online platform. They are under all the same date retention requirements of UK government and will not be assessing bids.
Data will also be shared with external experts involved in the assessment of applications, whose expertise which falls within the requirements of the public task.
As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Microsoft and Amazon Web Service.
How long we keep your data
Your personal data will be kept by us for the duration of the investment programme period. After the investment programme has closed your personal data will be deleted within 30 days, except that which is necessary to retain in order to ensure continued monitoring and evaluation of any successful applications. This will be managed by the processor on a regular basis and regularly reviewed as part of the process. This data will then be deleted within 30 days after the contract has ended.
Automated decision making
Your personal data will not be subject to automated decision making.
International transfers
Your personal data will be processed in the UK.
As your personal data is stored on our IT infrastructure and shared with our data processors Microsoft and Amazon Web Services, it may be transferred and stored securely outside the UK. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.
Your rights
The data we are collecting is your personal data, and you have considerable say over what happens to it. You have the right to request:
- information about how your personal data is processed
- a copy of the personal data you submitted
- that anything inaccurate in your personal data is corrected immediately
- that any incomplete personal data are completed, including by means of a supplementary statement
- that your personal data are erased if there is no longer a justification for them to be processed
- in certain circumstances (for example, where accuracy is contested) that the processing of your personal data is restricted
You can also:
- object to the processing of your personal data where it is processed for direct marketing purposes
- lodge a complaint with the independent Information Commissioner (ICO) if you think we are not handling your data fairly or in accordance with the law
Contact us
The data controller for your personal data is the Department for Business, Energy and Industrial Strategy (BEIS).
You can contact the BEIS Data Protection Officer at:
Contact the DPO:
BEIS Data Protection Officer
Department for Business, Energy and Industrial Strategy
1 Victoria Street
London
SW1H 0ET
The data processor of your personal data is Jeremy Benn Associates Limited (JBA).
You can contact the JBA Data Protection Officer at:
Jeremy Benn Associates Limited
1 Broughton Park
Old Lane North
Broughton
Skipton
North Yorkshire
BD23 3FD
Make a complaint
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.
The Information Commissioner can be contacted at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Email casework@ico.org.uk
Telephone 0303 123 1113
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.