T&Cs & GDPR Statement

Terms & Conditions

Data Protection Statement: The above information you provide will be stored until 2033. The Data Controller of this information is the Ministry of Housing, Communities and Local Government and the data will be held for the purposes of processing this contract and to facilitate the services we provide to you or your business, and to assist with record keeping, statistical and research purposes, statutory purposes and to facilitate ongoing communication.  Information will be shared with our funders and organisations delivering services on their behalf where it is necessary in the interests of increasing your businesses enterprise prospects and to measure the impact and success of the project.

A full list of these funders and organisations is included below.

As Lead Authority, Leeds City Council’s corporate privacy notice, which includes details of the authority’s Data Protection Officer and your Information Rights is available at: https://www.leeds.gov.uk/privacy-statement/privacy-notice

Bradford Council
Business Enterprise Fund
Calderdale Council
Craven Council
Harrogate Borough Council
Kirklees Council
Leeds Beckett University
Leeds City Council
Leeds Trinity University
York Council
Make It York
Mid-Yorkshire Chamber of Commerce
Prince’s Trust
Selby District Council
Wakefield Council
University of Bradford
University of Huddersfield
West and North Yorkshire Chamber of Commerce
West Yorkshire Combined Authority (as the accountable body for Leeds City Region Enterprise Partnership)

Ministry of Housing, Communities and Local Government (Data Controller)

As Data Controller, Please see below statement for the Ministry of Housing, Communities and Local Government

Privacy Notice for the Purpose of Data Collection for ERDF

The UK is updating its data protection legislation and it will come into force on 25 May 2018. The new laws aim to update current data protection legislation including the Data Protection Act 1998, increase the privacy protection of all UK and EU citizens and reduce the risk of data breaches. It will apply to all public and private organisations processing personal data.

The EU Common Provisions Regulations (CPR), and Article 6 of the European Regional Development Fund (ERDF) Regulation require the Ministry for Housing Communities and Local Government (MHCLG), as the managing authority for the programme, to monitor and evaluate ERDF-funded activities. In order to conduct monitoring and evaluation (including the summative assessment) and to ensure compliance, the collection of personal data is required.

Who is the data controller for ERDF personal data?

The MHCLG ERDF Managing Authority is the controller for all personal data required to help deliver the ERDF programme under the terms of its ERDF Funding Agreement.

The MHCLG ERDF Managing Authority will be processing personal data in the ERDF programme according to the following lawful basis:

Article 6(1)(e) of the EU General Data Protection Regulation (GDPR)

‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller’.

The lawful basis for controlling or processing `special category’ data under ERDF is:

Article 9(2)(g) GDPR

“processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide suitable and specific measures to safeguard the fundamental rights and the interests of the data subject;”

What personal data will be collected?

Depending on the nature of activities of the ERDF-funded project and the indicators listed under each activity, the following information for each direct or indirect beneficiary where these are individuals may be collected:

• Name of contact point within a business (in some cases property owner) engaged with or individual engaged with;

• Address

• Postcode

• Phone number

• Ethnicity

• Disability

• Email address

• Labour market status prior to receiving support and 6 months after receiving support

• Duration of support

• Intensity of support

• Pay details

MHCLG may collect special category data on ethnicity and disability.

Who will my personal data be shared with and how will it be used?

Your details will be stored securely and retained in compliance with GDPR and the new Data Protection Act. This information will be used to evaluate this project and to report to the European Regional Development Fund for monitoring and evaluation purposes.

Your details will be used to support the ERDF programme research and evaluation activities. MHCLG will need to share all or some of your personal data with the national evaluator of the ERDF programme. In some cases, the national evaluator, i.e. independent external contractors commissioned by DCLG, may use the contact details to contact a sample of direct or indirect beneficiaries for the purpose of the National Evaluation of the programme. It is likely that the survey methodology will need to incorporate a variety of approaches in order to maximise the survey response rate (for example, telephone survey, written survey, and e-mail survey) – hence the need for a variety of contact details required for each participant. MHCLG may also need to share with other government departments and the European Commission where this is necessary to test the robustness of the data gathered or to inform the National Evaluation.

MHCLG will not give any personal data to any other organisation unless needed for the purpose of the evaluation and will instruct them not to use it to contact individuals for any reasons not connected with the purpose of the National Evaluation of the ERDF programme 2014-2020 or other matters directly relating to the evaluation. If MHCLG has to pass on the data, it will only provide what is needed, and if possible will remove the details that might identify individuals personally. MCHLG will not transfer personal data outside the European Union, to third countries or international organisations.

MHCLG will not keep your personal data for longer than it needs but as a minimum, will retain data for two years after the closure of the 2014-2020 ERDF programme in line with the European Regional Development Fund document retention guidance to ensure MHCLG meets reporting obligations and to demonstrate compliance with EU

Requirements.

Individual’s rights

ERDF participants cannot claim the following rights in terms of ERDF personal data:

• right to erasure (“right to be forgotten”)

• right to portability of their data

The data collected is your personal data, and you have the right, subject to lawful data requirements:

• to see what data we have about you;

• to ask us to stop using your data;

• to ask us to delete your data, or to correct your data if there is no longer a justification to process it;

• to lodge a complaint with the independent Information Commissioner (ICO) if you think we are not handling your data fairly or in accordance with the law.

Automated decision making

Your personal data will not be subjected to automated decision making

Contact Details

You can contact the ICO at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Tel: 0303 123 1113

Email: casework@ico.org.uk 

If you would like further information about the programme and your personal information please contact the ERDF Programme at: esif@communities.gsi.gov.uk