High Value Chemicals from Plants Network Members Privacy Notice
This privacy notice is for registered members of the High Value Chemicals from Plants Network (HVCfP). It sets out the ways in which your data is gathered, used, stored and shared. It also sets out how long we keep your data and what rights you have in relation to your data under the General Data Protection Regulation (GDPR).
What is HVCfP?
HVCfP is a Network in Industrial Biotechnology and Bioenergy funded by a research grant awarded to Professor Ian Graham of the University of York by the Biotechnology and Biological Sciences Research Council (BBSRC) (grant code BB/L013665/1).
Where do we get your data from?
If you choose to register as a member of HVCfP, the University of York will ask you to provide certain personal data at the time of registration.
What data do we have?
The personal data we require you to provide are: full name, email address, the organisation you work for and your position within that organisation, your regional location, your gender, your expertise and your expected contribution to the Network. We will also maintain records of any Network activities you choose to take part in and any Network funding you are allocated.
What is our legal basis for processing your data?
The University of York and BBSRC, which is part of UK Research and Innovation (UKRI), an independent organisation which brings together the UK’s seven research councils including BBSRC, will jointly act as Controllers of the personal data you provide. We will process the data you provide to fulfil our contract with you, to provide you with access to the benefits of membership of the HVCfP Network. We will also process your data where it is necessary for the performance of a task carried out in the public interest and for our legitimate interests to fulfil the terms of grant code BB/L013665/1.
How do we use your data?
Your data will be processed for the following purposes:
- To create a searchable database of registered members which is stored on the Network website’s secure UK-based web server in a manner which makes it accessible to other Network members, some of whom may live outside of the European Economic Area (EEA), but not to non-members. You will be able to search other member’s profiles with a view to exchanging research ideas and establishing research consortia.
- To allow the HVCfP Network managers to keep you up to date by email with relevant Network activities and funding opportunities and maintain a record of your involvement with HVCfP. This will include regular newsletters sent by email every 4-6 weeks to all registered members and occasional emails containing details of Network activities and opportunities where this is considered relevant to your interests.
- To provide BBSRC with a record of registered HVCfP members, as a required output of grant BB/L013665/1. BBSRC may use the information provided on the BBSRC NIBB Extranet for research related activities, including but not limited to, statistical analysis in relation to evaluation of the BBSRC NIBB, study of trends and policy and strategy studies. Retained statistical data will be anonymised. BBSRC will not have access to your email address and will not contact you directly.
Who do we share your data with?
Your personal data is provided via and stored on the HVCfP website which is developed, supported, maintained and hosted by Castlegate IT, York, UK. Castlegate IT acts as a Data Processor on behalf of the University of York in accordance with a Data Processing Agreement and Website Hosting Agreement. The personal data you provide to the University of York when you register as a member of HVCfP (with the exception of your email address) will be subsequently uploaded to an area of the secure BBSRC NIBB extranet which is only accessible by authorised representatives of the HVCfP Network and BBSRC.
How do we keep your data secure?
The University of York takes information security extremely seriously and has implemented appropriate technical and organisational measures to protect personal data and special category data. For further information see, https://www.york.ac.uk/it-services/security/. BBSRC’s data protection policy is available at https://bbsrc.ukri.org/documents/ukri-data-protection-policy-pdf/
How do we transfer your data safely internationally?
In certain circumstances, it is necessary to transfer your Personal Data (including Special Category Data) outside the European Economic Area. In respect of such transfers, the University will comply with our obligations under Data Protection Law and ensure an adequate level of protection for all transferred data.
How long will we keep your data?
The University will retain your data in line with legal requirements or where there is a business need. Your data will only be processed only during the period of time that the grant is active (1st January 2014 – 31st December 2018). After 31st December 2018, records required for audit purposes will be retained by the University of York for a period of 10 years in accordance with the BBSRC Statement on Safeguarding Good Scientific Practice https://bbsrc.ukri.org/documents/safeguarding-good-scientific-practice/ and any records of personal data which are no longer required will be deleted within one calendar month.
What rights do you have in relation to your data?
Under GDPR, you have a right of access to your data, a right to rectification, erasure (in certain circumstances), restriction, objection or portability (in certain circumstances). See https://www.york.ac.uk/records-management/generaldataprotectionregulation/individualsrights/ for further information.
You can make changes to the personal data in your membership profile at any time by logging in to your account on our website. If at any point you believe the personal data we process is incorrect you can request to see this information and have it corrected or deleted. You can terminate your membership of the HVCfP Network at any time.
Questions or concerns
If you have any questions about this privacy notice or concerns about how your data is being processed, please contact the HVCfP Network Manager by email in the first instance (firstname.lastname@example.org). You can also contact the University’s Acting Data Protection Officer at email@example.com.
Right to complain
If you are unhappy with the way in which the University of York has handled your personal data, you have a right to complain to the Information Commissioner’s Office. For information on reporting a concern to the Information Commissioner’s Office, see www.ico.org.uk/concerns