Project Support Unit Privacy Notice

When a project, either led by Lancaster University or in which Lancaster University is a partner, engages the services of the university’s Project Support Unit (PSU) we are required to collect limited personal data on individuals in order to facilitate the support we provide. This information is collected for the purpose of providing verifiable evidence of the support offered, and the work completed, to our funders. This enables Lancaster University to recoup the costs of providing support through the Project Support Unit. All data collected is required for this purpose and PSU does not collect any additional data other than what is required by our funding bodies.

European Regional Development Fund (ERDF)

Should your project be funded by the ERDF, the Ministry for Housing Communities and Local Government (MHCLG) will be the data controller for any personal and/or special category data collected. The PSU (Lancaster University) act as data processors for the information collected. You can view the ERDF Privacy Notice.

European Social Fund (ESF)

Should your project be funded by the ESF, the Department for Work and Pensions ESF Managing Authority will be the data controller for any personal and/or special category data collected. The PSU (Lancaster University) will act as data processors for the information collected. You can view the Department for Work and Pensions Privacy Notice (via the ‘Personal Information Charter’)

Interreg Atlantic Area

Should your project be funded by Interreg Atlantic Area, the North Regional Coordination and Development Commission (CCDR-N) Managing Authority will be the data controller for any personal and/or special category data collected. The PSU (Lancaster University) will act as data processors for the information collected. You can view the North Regional Coordination and Development Commission (CCDR-N) Privacy Notice here (https://atlanticarea.eu/page/31).

European Institute of Innovation and Technology (EIT)

Should your project be funded by European Institute of Innovation and Technology (EIT), the EIT Food branch will be the data controller for any personal and/or special category data collected. The PSU (Lancaster University) will act as data processors for the information collected. You can view the EIT Food branch Privacy Notice here (https://www.eitfood.eu/pages/privacy-policy).

UK Government Community Renewal Fund (Lancashire)

Should your project be funded by UK Government Community Renewal Fund, Lancashire County Council will be the data controller for any personal and/or special category data collected. The PSU (Lancaster University) will act as data processors for the information collected. You can view the Lancashire County Council Privacy Notice here (https://www.lancashire.gov.uk/council/transparency/access-to-information/privacy-notice/).

UK Government Community Renewal Fund (Blackpool)

Should your project be funded by UK Government Community Renewal Fund, Blackpool Council will be the data controller for any personal and/or special category data collected. The PSU (Lancaster University) will act as data processors for the information collected. You can view the Blackpool Council Privacy Notice here (https://www.blackpool.gov.uk/Your-Council/Transparency-and-open-data/Data-protection/Privacy-notices/Privacy-notices.aspx).

What information is collected?

The following personal information will be collected by PSU when you engage the services of Lancaster University for the purpose of securing funding from the ERDF, ESF of the Interreg Atlantic Area. The evidence is used to record and evidence assistance and attendance by the people and companies engaging with the funded projects:

• Name of contact point within a business (in some cases property owner) engaged with or individual engaged with
• Address
• Postcode
• Phone number
• Email address
• Labour market status prior to receiving support and up to 12 months after receiving support
• Duration of support provided
• Intensity of support provided
• Signed (wet ink and/or electronic) confirmations and/or declarations from before, during and after support
• Photo and recording of offline support such as workshops and events to evidence the event took place
• Screenshots and recordings of online support such as workshops, events and delivery of support to evidence the event took place and participants attended
• Pay details (e.g. salary, not bank details)

Special category data may also be collected in the form of data on ethnicity and disability to measure the efficacy of the funding in reaching various groups. Applicants supply this information at their own discretion and not providing this information will have no impact on the support you receive from PSU or funding bodies.

Security of data

All data collected will be stored securely at Lancaster University. The University has robust Information Security policies in place to protect your information. All staff at the University have a responsibility to make sure that your data is handled securely.

For further information, please refer to the University’s Information Security Policy and Processes.

Retention of data

Lancaster University’s PSU are required to retain data collected for 10 years after the close of the programme. This is to allow our funding partners to audit the records of support provided. The Lancaster University PSU will also conduct periodic internal audits on this data in order to monitor and improve the support provided. Once data has reached its retention period, it will be securely destroyed.

Sharing of data

Unless there is a statutory obligation to do so the PSU will never share data with any third parties, other than:

• Our funding bodies
• Our project partners
• Auditors appointed by any of the following: Lancaster University, Project Partners, The Funding Body, UK Government, European Union
• Third parties employed to undertake an evaluation of the effectiveness of the assistance and the funding, either during the period of assistance or after it has completed, by any of the following: European Union, UK Government, The Funding Body, Lancaster University, Project Lead Partners, and regional stakeholders (for example, Local Enterprise Partnerships, Growth Hubs, Chambers of Commerce)

If you have consented to us keeping you informed of new projects and opportunities across Lancaster University which may be of interest to you, we will share your data internally.

When required to share information Lancaster University’s PSU will only ever do so in an appropriate and secure manner.

For more information on who our funding bodies may share personal data with, please refer to their Privacy Notices.

Data Subjects Rights

Individuals wishing to exercise their rights under the General Data Protection Regulation (GDPR) or the Data Protection Act 2018 should contact the relevant funding bodies for further information.