Privacy Policy

LSBU Privacy Policy

South Bank Innovation is part of London South Bank University (LSBU) and abides by the Data Protection Policy which can be found here.

European Regional Development Fund Privacy Notice

New data protection legislation came into force in the UK on 25 May 2018. The new laws update current data protection legislation including the Data Protection Act 1998, increase the privacy protection of all UK and EU citizens and reduce the risk of data breaches. It applies to all public and private organisations processing personal data.

The EU Common Provisions Regulations (CPR), and Article 6 of the European Regional Development Fund (ERDF) Regulation require the Ministry for Housing Communities and Local Government (MHCLG), as the managing authority for the programme, to monitor and evaluate ERDF-funded activities. In order to conduct monitoring and evaluation (including the summative assessment) and to ensure compliance, the collection of personal data is required.

1. Who is the data controller for ERDF personal data?

The MHCLG ERDF Managing Authority is the controller for all personal data required to help deliver the ERDF programme under the terms of its ERDF Funding Agreement.

The MHCLG ERDF Managing Authority will be processing personal data in the ERDF programme according to the following lawful basis:

Article 6(1)(e) of the EU General Data Protection Regulation (GDPR):

‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller’.

The lawful basis for controlling or processing `special category’ data under ERDF is:

Article 9(2)(g) GDPR

“Processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide suitable and specific measures to safeguard the fundamental rights and the interests of the data subject;”

2. What personal data will be collected?

Depending on the nature of activities of the ERDF-funded project and the indicators listed under each activity, the following information for each direct or indirect beneficiary where these are individuals may be collected:

• name of contact point within a business (in some cases property owner) engaged with or individual engaged with
• address
• postcode
• phone number
• ethnicity
• disability
• email address
• labour market status prior to receiving support and 6 months after receiving support
• duration of support
• intensity of support
• pay details

MHCLG may collect special category data on ethnicity and disability.

3. Who will my personal data be shared with and how will it be used?

Your details will be stored securely and retained in compliance with GDPR and the new Data Protection Act. This information will be used to evaluate this project and to report to the European Regional Development Fund for monitoring and evaluation purposes.

Your details will be used to support the ERDF programme research and evaluation activities. MHCLG will need to share all or some of your personal data with the national evaluator of the ERDF programme. In some cases, the national evaluator, i.e. independent external contractors commissioned by MHCLG, may use the contact details to contact a sample of direct or indirect beneficiaries for the purpose of the National Evaluation of the programme. It is likely that the survey methodology will need to incorporate a variety of approaches in order to maximise the survey response rate (for example, telephone survey, written survey, and e-mail survey) – hence the need for a variety of contact details required for each participant. MHCLG may also need to share with other government departments and the European Commission where this is necessary to test the robustness of the data gathered or to inform the National Evaluation.

MHCLG will not give any personal data to any other organisation unless needed for the purpose of the evaluation and will instruct them not to use it to contact individuals for any reasons not connected with the purpose of the National Evaluation of the ERDF programme 2014-2020 or other matters directly relating to the evaluation. If MHCLG has to pass on the data, it will only provide what is needed, and if possible will remove the details that might identify individuals personally. MHCLG will not transfer personal data outside the European Union, to third countries or international organisations.

MHCLG will not keep your personal data for longer than it needs but as a minimum, will retain data for two years after the closure of the 2014-2020 ERDF programme in line with the European Regional Development Fund document retention guidance to ensure MHCLG meets reporting obligations and to demonstrate compliance with EU Requirements.

3B. If you are on the ACE IT programme or attending an ACE IT event, please read this information about your personal data:

London South Bank University (LSBU) collects your personal and business information on this form to register you and your business on the ACE IT programme, as necessary for GDPR legal basis 6(1)(b) 'contract' (i.e. the agreement you enter into with us), except for special category data as mentioned below. Personal data will also be created about you as part of the programme, e.g. records of attendance.

ACE IT is delivered in partnership with University of the Arts London (UAL) therefore all data shared on this form, and throughout the ACE IT programme will be shared with UAL.

Your details will be shared with the Greater London Authority (GLA), European Regional Development Fund (ERDF) or European Commission as part of regular programme monitoring or as part of an audit, as required through the ERDF funding arrangement. Your company details will be shared with other participants of the programme, but not your personal information unless you provide consent for this. Your data will be retained for five years from the end of the programme in 2022 and then deleted.

Special Category Data (for example information about your disability and ethnicity) will be shared with the GLA and used for reporting purposes. If you provide a response, you thereby give consent for this processing under GDPR Art 9(2)(a) Explicit Consent. You can withdraw your consent at any time by contacting hello@immersivetech.co.uk, in which case this data will be deleted within 30 days.

4. What are individual’s rights?

ERDF participants cannot claim the following rights in terms of ERDF personal data:

• right to erasure (“right to be forgotten”)
• right to portability of their data

The data collected is your personal data, and you have the right, subject to lawful data requirements:

• to see what data we have about you
• to ask us to stop using your data
• to ask us to delete your data, or to correct your data if there is no longer a justification to process it
• to lodge a complaint with the Independent Information Commissioner (ICO) if you think we are not handling your data fairly or in accordance with the law

5. Automated decision making

Your personal data will not be subjected to automated decision making.

6. Contact details

The Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Email: casework@ico.org.uk

If you would like further information about the programme and your personal information please contact the ERDF Programme at: esif@communities.gsi.gov.uk