UK Shared Prosperity Fund: Northern Ireland privacy notice
Privacy notice for the UK Shared Prosperity Fund Northern Ireland.
Applies to Northern Ireland
The following notice explains your rights and gives you the information you are entitled to under UK data protection legislation.
Note that this section only refers to your personal data (your name, address and anything that could be used to identify you personally, not the other contents of your UK Shared Prosperity Fund documentation).
1. The identity of the data controller and contact details of our Data Protection Officer
The Department for Levelling Up, Housing and Communities (DLUHC) is a data controller for all UK Shared Prosperity Fund (UKSPF) related personal data collected with the relevant forms submitted to DLUHC, and the control and processing of Personal Data.
The Data Protection Officer can be contacted at dataprotection@levellingup.gov.uk.
2. Why we are collecting your personal data
We will collect data for the monitoring and assurance of approved projects.
To fulfil our legal obligations, and for project monitoring purposes, DLUHC will be collecting the following data:
- Names and contact details of staff preparing progress reports (personal data)
- Organograms and further high level information about staff and teams who will be managing the delivery of UK Shared Prosperity Fund programmes (personal data)
- Aggregated and anonymised data about beneficiaries of UKSPF projects, to monitor impacts of the funding provided.
Your personal data is being collected as an essential part of the UK Shared Prosperity Fund, so that we can contact you regarding your project progress and for monitoring purposes. We may also use it to contact you about matters specific to the Fund.
3. Legal basis for processing your personal data
The Department for Levelling Up, Housing and Communities will process all data according to the provisions of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR) and all applicable laws and regulations relating to processing of Personal Data and privacy, including, where necessary, the guidance and codes of practice issued by the Information Commissioner and any other relevant data protection regulations (together “the Data Protection Legislation (as amended from time to time)”).
The Data Protection Legislation sets out when we are lawfully allowed to process your data.
The lawful basis that applies to this processing is Article 6 (1) (e) of the UK GDPR; that processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
DLUHC will also collect anonymised special category information under Article 9 (2) (g) of the UK GDPR; that processing is necessary for reasons of substantial public interest.
4. The type of personal information we collect
We collect and process the following information from grant recipients of projects delivered with the support of UKSPF Northern Ireland funding:
- Names, email addresses, addresses and postcodes of staff involved in project delivery.
- Information about the services provided and the outcomes of that service.
- Information relating to the impacts on the nine categories in section 75 of the Northern Ireland Act and protected characteristics under the Equality Act 2010.
We will only obtain summary information on the characteristics of people and businesses that have been supported, at an aggregated, anonymised level for the purposes of monitoring project delivery and impacts on target beneficiary groups.
5. With whom we will be sharing the data
DLUHC does not intend to share and personally identifiable data outside the Department.
Grant recipients will be independent data controllers of UKSPF personal data that they collect for the purposes of managing delivery of their projects.
6. How long we will keep the personal data, or criteria used to determine the retention period
DLUHC will hold personal data for up to 7 years from the point projects are concluded. This is currently estimated to be summer 2032. As part of the monitoring process, we may contact you to ensure our records are up to date.
7. Your rights, e.g., access, rectification, erasure
The data we are collecting is your personal data, and you have considerable say over what happens to it.
You have the right to:
a. know that we are using your personal data
b. see what data we have about you
c. ask to have your data corrected, and to ask how we check the information we hold is accurate
d. object to the use of your personal data in certain circumstances and to have your personal data deleted when the processing is no longer necessary
e. complain to the ICO (see below)
8. Sending data overseas
Your personal data will not be sent overseas.
9. Automated decision making
We will not use your data for any automated decision making.
10. Storage, security and data management
Personal data will be transferred to and retained within our secure government IT system, and it will be stored there for up to 7 years before it is deleted, unless we identify that its continued retention is unnecessary before that point.
Where data is shared with third parties, as set out in section 5 above, we require third parties to respect the security of your data and to treat it in accordance with the law. All third parties are required to take appropriate security measures to protect your personal information in line with our policies.
11. Complaints and more information
If you are unhappy with the way the department is using your personal data, you can make a complaint.
You have a right to lodge a complaint with the independent Information Commissioner’s Office (ICO) if you think we are not handling your data fairly or in accordance with the law. You can also contact the ICO for independent advice about data protection, privacy and data sharing. The ICO’s contact details are provided below.
If you are not happy with how we are using your personal data, you should first contact dataprotection@levellingup.gov.uk