This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the General Data Protection Regulation (GDPR).
We will process the following personal data:
- Name, contact details, educational background, work experience of the CEO/director of your business
- Basic information about the business (e.g. number of employees, annual turnover, specific sector, years since business was founded, company registration number)
- Survey responses related to technology awareness and adoption
The purpose for which we are processing your personal data is to analyse the effectiveness of different types of SME support for adopting cutting edge technologies.
Legal basis of processing
The legal basis for processing your personal data is:
Public task: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, such as the exercise of a function of the Crown, a Minister of the Crown, or a government department; and the exercise of a function as set out by the Memorandum and Articles of Association of the London School of Economics and Political Science.
Your personal survey data will be collected in the first instance by the GLA on behalf of the Department for Business, Energy and Industrial Strategy via the London Growth Hub web portal. Any data collected during the programme (e.g. attendance at events/number of case worker meetings) will be collected by our project partners. Data will be transferred securely to the LSE for evaluation, and stored/analysed according to LSE Research Laboratory Security Standards.
Your name and contact details will be passed to our project partners Capital Enterprise and CognitionX Ltd. for the purpose of contacting you, should you be allocated a treatment as part of the project.
Your personal data will be shared by us with BEIS. BEIS will have access to the data collected as part of this project, e.g. survey data, unique identifiers, and contact details of participants. Unique business identifiers may include; companies house registration numbers, VAT/PAYE number, Unique Tax Reference number, business name, address, SIC code etc. Data may be linked with other administrative data sources (e.g. the Interdepartmental Business Register or HMRC data) for long term economic impact analysis, and further evaluation activity, to inform future policy making. This data may also be shared with an external contractor to conduct this analysis on BEIS’s behalf. BEIS will also have access to contact information, in the event of re-contacting participants for further research (e.g. follow up surveys). In limited circumstances the continuum of data will potentially transcend to sole traders.
The LSE research team may want to do further analysis to evaluate long term economic impacts after the project finishes. Such work will be outside of the Business Basics project, and would not be done on BEIS’s behalf. The LSE would be considered data controller for this additional analysis, not BEIS.
As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Microsoft and Amazon Web Services.
Your personal data will be kept by us for the duration of our analysis, which will include both a short term evaluation report, and later analysis on the longer term effects of our programme.
The information you provide will be retained by the department in line with best practice guidance and standards provided by the National Archives. http://www.nationalarchives.gov.uk/information-management/browse-guidance-standards/
You have the right to request information about how your personal data are processed, and to request a copy of that personal data.
You have the right to request that any inaccuracies in your personal data are rectified without delay.
You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.
You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.
You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.
You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.
You have the right to object to the processing of your personal data.
Your personal data will not be processed outside the UK and European Economic Area (EEA), or by an international organisation.
As your personal data is stored on our IT infrastructure, and shared with our data processors Microsoft and Amazon Web Services it may be transferred and stored securely outside the European Economic Area. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:
Information Commissioner’s Office
0303 123 1113
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts
The data controller for your personal data is the Department for Business, Energy & Industrial Strategy (BEIS). You can contact the BEIS Data Protection Officer at:
BEIS Data Protection Officer
Department for Business, Energy and Industrial Strategy
1 Victoria Street
You can also contact the LSE Data Protection Officer at R.E.Maguire@lse.ac.uk.