This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the General Data Protection Regulation (GDPR).
Please read the Council’s general Privacy Notice as well as this Notice; it is available here www.bcpcouncil.gov.uk/About-BCP-Council/Privacy/Privacy.aspx
What We Do
Bournemouth, Christchurch & Poole Council; BCP Council – Data Processor.
BCP Council; Economic Development Department helps our local economy thrive by giving as much support to Bournemouth, Christchurch and Poole’s businesses as possible. We make sure that all trading in BCP is safe and legal. We can assist in new business start ups and help you become established. We also offer an opportunity for you to advertise with us to promote your business.
Department of Business, Economic and Industrial strategy (BEIS) – Data Controller.
BEIS, the department of Business, Economic Industrial Strategy is a ministerial department focused on building an economy that works for everyone, so that there are great places in every part of the UK for people to work and for businesses to invest, innovate and grow.
The purposes we use your personal information for
The Department of Business, Energy and Industrial Strategy (BEIS) has awarded BCP Council with a Grant to conduct a Cyber Security and Data Management project. The project is being used to enhance the productivity of Dorset Small and Medium Enterprises (SMEs) through encouraging the adaption of better data management and cyber securities practices.
We are processing your personal data for the purpose of participation and analysis of the project named CYBERWeLL.
Unique business identifiers such as companies’ house registration numbers, VAT/PAYE number, Unique Tax Reference number, business name, address, SIC code may be linked with other administrative data sources (e.g. HMRC data) for long term economic impact analysis, and further evaluation activity, to inform future policy making. BEIS will also have access to contact information, in the event of re-contacting participants for further research (e.g. follow up surveys). In limited circumstances the continuum of data will potentially transcend to sole traders.
We collect and process your personal information to provide these services to you
The project is being used to enhance the productivity of Dorset Small and Medium sized Enterprises (SMEs) through encouraging the adaption of better data management and cyber securities practices.
The personal information we collect and use
We only obtain and use the information we need to provide our services to you. We do not obtain and use special category information.
The Personal information we will collect will include name, email, job role and experience, age range and gender of participants from Small and Medium Enterprises (SMEs) who voluntarily signed up to participate within the Scalable Cyber Interventions CYBERWeLL project.
The law and Statutory Legislation we use to process your personal information
Participation in the Cyber Security and Data Management CYBERWeLL project is on a voluntary basis.
The GDPR/DPA conditions we meet
The legal basis for processing your personal data is that you consent us to do so. Participation in the CYBERWeLL project is on a voluntary basis. It is necessary for your personal data to be processed for archiving purposes, scientific, historical research and statistical purposes. The CYBERWeLL project is of public interest.
How to withdraw your consent
Where you have been asked to provide your consent to processing you can withdraw it at any time. If you wish to withdraw your consent, please contact or talk to the officer in the Council who has been providing the service or services to you. If you do not have an officer that you have regular contact with, please make your request to withdraw consent to our Customer Services team:
Remember to tell us which service or services your request applies to, so that we know who to send it to within the Council.
Who we may share your information with
Your personal data will be shared by us with those companies listed below who are involved in delivering the CYBERWeLL project.
As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Microsoft.
The companies involved in the CYBERWeLL project and subsequently access to your data are as follows:
Department of Business, Energy and Industrial Strategy (BEIS)
Innovation Growth Lab (IGL) by NESTA
Dorset Cyber Alliance
Dorset Police Cyber Unit
You have the right to request information about how your personal data are processed, and to request a copy of that personal data.
You have the right to request that any inaccuracies in your personal data are rectified without delay.
You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.
You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.
You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.
You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.
You have the right to withdraw consent to the processing of your personal data at any time.
How long we keep information about you
After the Grant and Project has finished it may be necessary to access and use your data for analysis and evaluation in academic studies to further understand outcomes and/or impacts of the project. This may include but not limited to the publishing of the project inclusive of its results. For this purpose we will retain your information for six years.
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:
Information Commissioner's Office
0303 123 1113
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
The data controller for your personal data is BEIS, Department for Business, Energy and Industrial Strategy.
You can contact the BEIS Data Protection Officer at email@example.com
The Data Processors for your personal data is BCP Council, Bournemouth Christchurch and Poole local authority.
You can contact the BCP Data Protection Officer at firstname.lastname@example.org
Or write to us at:-
Economic Development Department