Tender for Growth Programme – Privacy Notice
Purpose:
This Privacy Notice applies to the processing of your information for the Tender for Growth Programme (“the Programme”) on behalf of Newry, Mourne and Down District Council (“NMDDC”) as data controller and Full Circle Management Solutions Limited (“FCMS”) as data processor for the Programme. We take your privacy and our responsibility to protect your information seriously and will take care in the use and handling of your personal data.
This Privacy Notice explains how we use information about you, how we protect your privacy in compliance with the Data Protection Act (2018) and the General Data Protection Regulations (2018).
Legal basis for processing:
The lawful basis we are relying on is Article 6(1)(e) of the General Data Protection Regulation (GDPR), which allows us to process personal data as we are providing a business support service for the performance of a public task undertaken by the council.
What we need
We need your first name and last name, email address, business name, address, contact number(s), website(s) and social media site(s) and brief details about your business.
Why we need it
We need your personal data to confirm eligibility to participate and register you with the Programme.
We need a brief summary of the nature of your business and areas of support required to identify if the project will be of benefit to you.
If a business is not eligible for inclusion in the programme, their data will be anonymized and aggregated by NMDDC for monitoring purposes to report on progress against the outputs and targets of the programme. The enquiry form and other recorded information relating to their Enquiry will be disposed of securely as soon as it has been processed for this purpose.
What we do with it:
Once registered on the Programme your personal data will be stored on a secure cloud-based electronic management system. The data controller and data processor has authorised users who will access the data via a password protected portal.
The data will be used to support the delivery of the programme, inform on its progress and provide reports on the impact on individual businesses.
Any specific requests from a third party for us to share your personal data with them will be dealt with in accordance with the provisions of data protection laws.
How long we keep it:
The information provided by participating businesses will be retained until 30 January 2030 at which time it will be disposed of in accordance with the European Regional Development Fund’s Growth and Jobs Programme retention and disposal schedule.
What are your rights:
- You have the right to request access to the personal data that we hold about you.
- You have the right to ask for your personal data to be rectified, or to restrict the way in which we process it.
- You have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it.
- You have the right to ask us to erase your personal information in certain circumstances.
- You have the right to complain to the Information Commissioners Officer if you are unhappy with the way in which we have processed your personal data.
If you wish to make a Subject Access Request or if you have queries about access to your information please contact the Data Protection Officer for NMDDC via info@nmandd.org or T: 0330 137 4009.
Do we use any data processor:
Yes, FCMS will act as the data processor on behalf of NMDDC.