Guidance

UK Business Data Survey 2024 Privacy Notice

Published 29 September 2023

Who is collecting my data?

The Department for Science, Innovation and Technology (DSIT) drives innovation that will deliver improved public services, create new better-paid jobs and grow the economy.

DSIT is responsible for:

• positioning the UK at the forefront of global scientific and technological advancement
• driving innovations that change lives and sustain economic growth
• delivering talent programmes, physical and digital infrastructure and regulation to support our economy, security and public services
• R&D funding

Data Controller

DSIT is responsible for conducting the UK Business Data Survey 2024, which is a telephone and online-based study of UK businesses. It seeks to understand the role and importance of personal and non-personal data in UK businesses, domestic and international transfers of data, and the awareness of, and attitudes toward, data protection legislation and policy. DSIT is the Data Controller for this Survey.

In order to conduct this survey, DSIT has commissioned a third party, Ipsos, an independent research company, to collect personal data on its behalf. Ipsos UK is a specialist research agency, commonly known as ‘Ipsos’. Ipsos is acting as a Data Processor.

Purpose of this Privacy Notice

This Privacy Notice is provided to meet the obligations as set out in Articles 13 and 14 of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA).

What personal data do we collect?

Ipsos will collect personal data related to individuals (as detailed below) who have been contacted to take part in the survey, on behalf of DSIT. This personal data has been collected by Ipsos via a sample provider, Datascope, or provided directly from you during the survey interview. Datascope, hold records of organisations based on public information and commercially available lists.

The following personal data is collected by Ipsos and is not provided to, or made available to DSIT:

• personal identifiers such as your name and personal or business contact details if you choose to take part in the survey
• personal information relating to sole traders

We are also provided with non-personal data by Ipsos, which includes:

• information about the business you are responding on behalf of, such as business size, sector and the region the business is based in
• your anonymised survey responses

The following information is collected by DSIT:

• information on how you use this website.  This includes IP address and analytical cookies. For further information on the cookies used, please view this Cookie Notice

How will we use your data?

Ipsos will use your personal data and answers solely for the purpose of conducting this survey on behalf of DSIT. Once the survey is complete, your personal data will be removed to produce anonymous, aggregated statistical research findings for DSIT. These anonymized findings may be shared with Other Government Departments partner organisations or researchers for statistical research purposes only, and it will not be possible to identify you from the information shared.

Your personal data (including any contact information) will not be included, as we will not receive this from Ipsos. Ipsos will keep your personal data in confidence, in accordance with their Privacy Notice.

DSIT will publish aggregated results from this survey, and you or your business will not be identifiable in any published results.

What is the legal basis for processing my data?

Where we use your personal data to conduct this survey, our lawful basis is:

Article 6 (1) (e) Public Task: “Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.”

This processing is necessary for the exercise of the functions of a government department (DPA Schedule 9, paragraph 5(d). This survey provides ministers and government officials with information about businesses in order to inform future policy development.

DSIT may also rely on your consent to contact you in relation to future surveys, where you have indicated you are happy to be contacted. Where we do so, our lawful basis is:

Article 6 (1) (a) Consent: “The data subject has given consent to the processing of his or her personal data for one or more specific purposes.”

What will happen if I do not provide this data?

Participation in the UK Business Data Survey 2024 is voluntary. The data for businesses is held in the Market Location Database, which is a list of UK businesses maintained by Market Location for commercial purposes. This information is provided to us by Market Location, so please see their privacy notice for details.

Who will your data be shared with?

Your personal data will not be shared with any third parties. Only Ipsos will have access to the personal data you provide and this will not be shared with us.

How long will my data be held for?

For this project, Ipsos will securely remove your personal data from their systems by no later than December 2024.

Will my data be used for automated decision making or profiling?

We will not use your data for any automated decision making.

Will my data be transferred outside the UK and if it is how will it be protected?

All of your personal data used and collected for this survey will be stored by Ipsos in data centres and servers within the United Kingdom and European Economic Area (EEA).

What are your data protection rights?

You have rights over your personal data under the UK GDPR and the Data Protection Act 2018 (DPA 2018). The Information Commissioner’s Office (ICO) is the supervisory authority for data protection legislation, and maintains a full explanation of these rights on their website.

DSIT will ensure that we uphold your rights when processing your personal data.

Privacy policies of other websites

The Department for Science, Innovation and Technology’s personal information charter (opens in a new tab) explains how we deal with your information. It also explains how you can ask to view, change or remove your information from our records.

For further information on how Ipsos process your personal data, please view their Privacy Notice here:

www.ipsos.com/en/ipsos-privacy-notice

How do I complain?

If you wish to exercise your data protection rights or wish to make a complaint, the contact details for the data controller’s Data Protection Officer (DPO) are:

DSIT Data Protection Officer

Department for Science, Innovation and Technology
22-26 Whitehall
London
SW1A 2EG

Email dataprotection@dsit.gov.uk

If you’re unhappy with the way we have handled your personal data and want to make a complaint, please write to the department’s Data Protection Officer or the Data Protection Manager at the relevant agency. You can contact the department’s Data Protection Officer using the details above.

How to contact the Information Commissioner’s Office

If you believe that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. You may also contact them to seek independent advice about data protection, privacy and data sharing.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: www.ico.org.uk

Telephone: 0303 123 1113

Email: icocasework@ico.org.uk

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Changes to our privacy notice

We may make changes to this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

If these changes affect how your personal data is processed, DSIT will take reasonable steps to let you know.

This notice was last updated on 29 September 2023.