Beta Technology Limited (“Beta”) is committed to ensuring that your privacy is protected in line with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). This Privacy Notice sets out how Beta will use and protect any information that you give us when you interact with us or use the LongITools website. This notice also informs you of your rights and how to exercise these.
This Privacy Notice will be reviewed regularly to make sure we meet the highest standards and to protect your information. We reserve the right to update this policy at any time and therefore advise you to check this Privacy Notice regularly. Any major changes will be notified on our website. This version of the Privacy Notice was modified on 26 March 2021.
You can be assured that should we ask you to provide certain information by which you can be identified, when interacting with us or using our website, it will only be used in accordance with this Privacy Notice.
2. Data Controller
Beta, a consortium partner in the LongITools project, is responsible for leading the work package relating to the communication, dissemination, and exploitation of the LongITools project’s results, and includes managing the LongITools website. Beta is the Data Controller of the personal data processed in association with this work package. Our address is Barclay Court, Heavens Walk, Doncaster Carr, Doncaster, South Yorkshire, DN4 5HZ, UK.
Please note that any scientific research, and any other data processing activities related to the LongITools project are controlled by the designated consortium partner.
3. Explaining the legal basis we rely on
We will only collect and process your personal information where we have a legal basis to do so, which includes:
- Consent – In specific situations, we can collect and process your data with your consent, e.g. you ask us directly (via written or verbal communications) to keep you informed or to attend an event. We will clarify the data required to undertake the action.
- Legal compliance – If the law requires us to, we may need to collect and process your data.
- Legitimate interest – In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of delivering this project and which does not materially impact your rights, freedom, or interests. e.g. to fulfill the project requirements and to communicate and disseminate project information and outcomes including key findings from papers published.
4. When do we collect your personal data?
We may collect your data, verbally or electronically, when:
- You visit the LongITools website;
- You contact/engage with us by any means with queries, information etc;
- You book to attend a LongITools event;
- You attend a meeting with us;
- You fill in any forms e.g. at LongITools events;
- You give a consortium partner or a third-party permission to share with us the information they hold about you;
- You participate in the LongITools Policy Forum;
- Your data is within publicly available sources and you have consented to sharing your data (e.g. on your website, within marketing material) or where information is made public as a matter of law.
5. What sort of personal data do we collect?
We may collect a variety of personal information which includes, but is not limited to, the following:
- Job Title;
- Company Name;
- Email Address;
- Phone Number;
- Area of Expertise/Qualifications/CV;
- Enquiry/Correspondence/Feedback Details;
- Meeting/Event Details (including associated documents and dietary/access requirements);
- Photographs (e.g. taken at meetings/events for use on social media/the LongITools website);
We take reasonable steps to ensure the accuracy of personal data we obtain and ensure that the source of any personal data is clear. We will consider when it is necessary to update the information and you can help us by informing us when these changes occur.
6. How and why do we use your personal data?
Your personal data may be used to:
- Respond to your queries;
- Fulfil the LongITools project requirements;
- Keep you informed by email about the project, including events;
- Improve our website;
- Maintain internal records, including those required by law.
Data relating to event/meeting catering or access, e.g. proof of identity, dietary requirements, food allergies, and disabled parking, will only be used for event planning and will not retained by us after the event(s)/meeting(s) takes place.
7. How do we store and protect your information?
Data may be stored in both electronic and hard copy. We are committed to ensuring that your data is secure and to prevent unauthorised access or disclosure we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect.
8. How long do we keep your information?
Whenever we collect or process your personal data, we will only keep it for as long as is necessary for the purpose for which it was collected. All personal data will be destroyed no later than five years after the final project payment by the EC.
9. Who will we share your information with?
Your data may be shared with a range of project recipients (which include partners in the LongITools Consortium, the European Commission (funder), the LongITools External Advisory Board, the Ethics Advisor, and organisations in the European Human Exposome Network) and automated mail platforms. We may also sometimes share personal data with third parties in order to perform what is required of us as part of any contract. When sharing your information with third parties mentioned above we will only do so once we are satisfied that they process your data in line the requirements of the GDPR.
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy notice applicable to the website in question. Links to other websites do not constitute any endorsement by the LongITools Consortium of the information or products presented on that website.
10. Where may we process your personal data?
When we are required to transfer data outside of the United Kingdom and there are no adequacy regulations, we will make sure that the receiver agrees to provide the same or similar protection as we do and that they only use your personal data in accordance with our restrictions.
Receiving data from the European Economic Area following the United Kingdom’s withdrawal from the European Union
The United Kingdom (UK) left the European Union (EU) on the 31/1/20 and the transition period ended on 31/12/20. As part of the new trade deal, the EU agreed to delay data transfer restrictions for at least four months, which can be extended to six months (known as the bridge).
On the 19/2/21 the European Commission (EC) published its draft decisions on the UK’s adequacy. These will now be considered and if approved, the EC can then formally adopt them as legal Adequacy Decisions. If they are not adopted at the end of the bridge, transfers from the European Economic Area to the UK will need to comply with EU GDPR transfer restrictions.
11. Your rights
GDPR grants you the right to access particular personal data that we hold about you. This is referred to as a subject access request. We shall respond promptly and certainly within one month from the point of receiving the request and all necessary information from you. Our formal response shall include details of the personal data we hold about you, including the following:
- Sources from which we acquired the information;
- The purposes for processing the information;
- Persons or entities with whom we are sharing the information.
Right to withdraw your consent: You have the right to withdraw your consent at any time if the processing is based on consent.
Right to rectification: You have the right, without undue delay, to have any personal information about you which is not accurate, corrected. You also have the right to any incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure: You have a right to obtain from us the erasure of personal data concerning you without delay. This refers only to data that we are not legally required or entitled to keep for a specified length of time in order to comply with any legal, statutory and regulatory obligations.
Right to the restriction of processing: Subject to exemptions, you have the right to restrict the processing of your personal data when:
- You are contesting the accuracy of the data, and restrict the processing until the accuracy of the data has been verified;
- The processing is unlawful and you oppose the erasure of the personal data but instead request the restriction in its use;
- We no longer need the personal data for processing, but it is required by you for the establishment, exercise or defence of claims;
- You object to processing of your personal data pending the verification of whether there are legitimate grounds for us to override these objections.
We shall communicate any rectification or erasure of personal data as described above to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. We shall provide you with information about those recipients if you request it.
Right to data portability: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format, and have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent or contract, and that other conditions of article 20 of the GDPR are met.
Right to object: You have the right to object on grounds relating to your particular situation, at any time to the processing of personal data concerning you, including any personal profiling; unless this relates to necessary processing for the performance of a task carried out in public interest or an exercise of official authority vested in us. We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of you, or in the establishment, exercise and defence of legal claims.
Right to not be subject to decisions based solely on automated processing: We do not carry out any automated processing, which may lead to an automated decision based on your personal data.
Invoking your rights: If you would like to invoke any of the above data subject rights or please contact us at:
Beta Technology Limited, Barclay Court, Heavens Walk, Doncaster Carr, Doncaster, South Yorkshire, DN4 5HZ, UK.
Email: firstname.lastname@example.org, Tel: 01302 322633
A withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal.
In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation. We must then do so unless we believe we have a legitimate overriding reason to continue processing your personal data.
To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Notice. If you have authorised a third party to submit a request on your behalf, we will ask them to prove they have your permission to act.
Queries/Complaints: If you have queries which are not answered by this Privacy Notice, have any concerns about how we use the personal data we hold, or complaints please write to us at the above address.
If your complaint is not resolved to your satisfaction and you wish to make a formal complaint to the Information Commissioner’s Office (ICO), you can contact them on 0303 123 1113. You also have the right to judicial remedy against a legally binding decision of the ICO where you consider that your rights under this regulation have been infringed as a result of the processing of your personal data. You have the right to appoint a third party to lodge the complaint on your behalf and exercise your right to seek compensation.
Strictly Necessary Cookies: Cookies that are categorised as ‘necessary’ are stored on your browser as they are essential for the working of basic functionalities of the website. These cookies cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
Non-Necessary Cookies: Any cookies that may not be particularly necessary for the website to function are termed ‘non-necessary’ cookies. It is mandatory to procure user consent prior to running these cookies on a website. You have the option to opt-in to these cookies, though not opting into some of these cookies may have an effect on your browsing experience. Please go to the ‘Cookie Settings’ link in the footer of the website to amend your cookie settings.
We have a Twitter feed and LongITools YouTube videos embedded within the website to showcase activity. These third-party widgets may set cookies.
In no circumstances do we collect any data that is not directly related to the use of the LongITools website (for example, we do not record other sites that you have visited). The log files or any information they contain about your use of the site will not be made available to any third parties other than as anonymous usage statistics.