firsttime

Connected Places Catapult
Community Platform Privacy Notice

About Connected Places Catapult

Connected Places Catapult is the trading name of Connected Places Catapult. We focus on growing businesses with innovations in mobility services and the built environment that enables new levels of physical, digital, and social connectedness. Our company registration number is 11837978 and our registered office is 170 Midsummer Boulevard, Milton Keynes, United Kingdom, MK9 1BP. Connected Places Catapult is registered with the Information Commissioner Office, registration number ZA773397. This privacy notice applies to anyone who asks about or is involved in any way, in the Connected Places Catapult programmes or projects listed on this site. We take privacy seriously and we want you as our service user, to understand the information we collect about you, how we process and protect the personal information which we collect about you, from you and from third parties, so that you can be confident that the information is being used safely and in ways that are reasonably expected, and what rights you have in respect of your personal information. References to ‘we’, ‘us’ and ‘our’, means Connected Places Catapult.


What information do we collect and use?

We will collect personal information which can include:

When creating an account on the community platform

  • Full name
  • Gender
  • Sexual orientation
  • Religion
  • Ethnicity
  • Company name
  • Job title
  • Company contact details (inc. address, number, email)

What information do we collect and use?

When completing the applications for  our programmes and projects:

  • Company number
  • Whether you are trading
  • How long you have been operating
  • Current sector
  • What challenge your product/service/solution addresses
  • Explanation of your business solution/product/service
  • Your TRL
  • Who your competitors are and how you differentiate from them
  • Who your customers are and what your transaction is to date
  • Pitch deck
  • What roles, skills, and experience with you have within the team
  • Recruitment plan for the next 12 months
  • Revenue for last financial year
  • Whether your business has received any investment / grant funding to date
  • Use case for your solution on the programmes and projects
  • Data/input you would need to pilot your solution
  • How is the programmes and projects are going to benefit your business
  • Any business support programme (inc. programme name and end date)
  • Commitment to being able to work on-site when requested
  • Whether your day to day activities are limited due to health problems or disability which have lasted longer than 12 months
  • How you heard about the programme
  • Whether you would like to hear from CPC on any other relevant programmes/initiatives or opportunities.
  • IP Address
  • Cookie preferences

Your personal information collected will be used to allow us to deliver services on behalf of our partners to promote and manage our programmes effectively.

Your IP address will be used to allow Connected Places Catapult to set appropriate access permissions on the website.

Access to and use of information concerning yourself and your company is strictly controlled to ensure compliance with applicable data protection law.

In many cases we pseudonymise or anonymise your information before we share it with others, or when we no longer require the information in identifiable form.

Anonymisation is the process of turning data into a form which does not identify individuals and where identification is not likely to take place.

Pseudonymisation is the processing of information in such a way that it can no longer be attributed to you without the use of additional information and where that additional information is kept separately. This allows for a much wider use of the information for statistical or other purposes.

Who do we collect information from?

Information may be collected directly from you to support your applications; this information can be collected when:

  • You log onto the Connected Places Catapult Community Platform
  • When you register for an account
  • When you complete an application form for our programmes and projects
  • When you apply for any future opportunities listed on the platform

What is your information used for?

We use your information for a number of purposes. Whenever we use your information, we must have a legal justification under data protection law for its use. The legal justification will depend on the purpose for which we intend using your information.

Our legal justification for processing your personal information generally falls into the below categories below within Article 6 of the General Data Protection Regulation:

  • Article 6(1)(a) Consent – You have consented for us to process your personal data for the purpose of the programme
  • Article 6(1)(f) Legitimate Interests – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests of fundamental rights and freedoms of the data subject which require protection of personal data.

Who do we share information with?

It is important that you understand that we may share your information with others. We may share your personal information within our group of companies and with third parties.

  • Sharing within the Connected Places Catapult group - We may share your personal information within the Connected Places Catapult group of companies.
  • Sharing with third parties - We may share your personal information with third parties listed below for the purposes identified within this privacy notice:
    • Companies, Governments, Local Authorities looking for innovative thinking companies within the programme
    • IT support companies to maintain, and support the Connected Places Catapult website and platform

How long do we keep your personal information for?

We retain information in accordance with our legal obligations and national best practice. We ensure compliance through regular auditing and ensure information is securely disposed of when it has reached the end of its retention period. We implement data retention periods for different categories of personal data and/or different processing purposes, including where appropriate, archiving periods. We will only keep your personal information for as long as reasonably necessary to support service users, to support our legitimate business interests and to comply with our legal and regulatory requirements.

International transfers of your personal information

Connected Places Catapult takes part in global projects. We (or third parties acting on our behalf) may store or process information that we collect about you in countries outside the UK. Information may be transferred, processed and stored outside of the country where your information is collected, including countries where the level of data protection may not be deemed adequate by the local legal or regulatory authority in the country of origin of the data.

Where we make a transfer of your personal information outside of the UK, we will take the required steps to ensure that your personal information is protected.

We also process personal information within the Connected Places Catapult group of companies for administrative and management purposes. This processing is based on our own or a third party’s legitimate business interests and the transfer is compliant with applicable data protection law.

If you would like further information regarding the steps, we take to safeguard your personal information when making international transfers, please contact the Data Protection Manager using the details at the bottom of this privacy notice.

Your rights and your personal information

Under data protection law you have a number of specific rights in relation to the personal information that we hold about you. These include rights to know what information we hold about you and how it is used. You may also exercise these rights at any time by contacting us using the details set out at the top of this privacy notice and without adversely affecting your service.

We will not usually charge for handling a request to exercise your rights. If we cannot comply with your request to exercise your rights, we will usually tell you why.

If you make a large number of requests or it is clear that it is not reasonable for us to comply with a request, then we do not have to respond. Alternatively, we can charge for responding.

Under data protection legislation you have the right to:

  • be informed
  • access your personal information
  • rectification
  • erasure
  • restriction of processing
  • data portability
  • object
  • not be subjected to automated decisions
  • withdraw consent

You also have the right to complain to the Information Commissioners Office (ICO) if you are unhappy with they way that we have dealt with a request from you to exercise any of these rights, or if you think we have note complied with our legal obligations. Whilst you are not obliged to do so, we would appreciate you making us aware of any issue prior to notifying the ICO and giving us the opportunity to respond. You can contact either the Risk and Compliance Manager or Data Protection Manager using the postal address at the top of the privacy notice. More information can be obtained either on the ICO website (https://ico.org.uk/) or by calling 0303 123 1113.

Making a complaint will not affect any other legal rights or remedies that you have.

Securing your data

We have implemented appropriate technical and organisational security to protect your personal information, this includes:

  • Ensuring our staff complete annal training
  • Ensuring personal information is only accessible and shared with individuals that have a need to access it
  • Where personal information is transferred outside of the UK, we will ensure there are appropriate security measures in place to protect the data in accordance with UK data protection laws.

Please contact us if you require further information about how we secure your data.

Queries

If you have any queries or would like to exercise your rights or to establish whether any rights apply to you, please speak with the Connected Places Catapult project managers as listed on the website.

You can also contact our Data Protection Manager:

Email: dataprotection@cp.catapult.org.uk

or by writing to the address at the top of this privacy notice, marking your communication “Private and Confidential – FAO Connected Places Catapult Data Protection Manager”

Telephone: +44 (0)1908 359 999

Updates to this Privacy Notice

We may update this Privacy Notice from time to time to ensure that it remains accurate. In the event that these changes result in any material difference to the manner in which we process your personal data then we will provide you with an updated copy of the Policy and signpost you to specific changes.