Privacy notice

How and why information about you will be used by Innovate Oxfordshire.

This privacy notice explains how and why information about you will be used by Innovate Oxfordshire (“us” or “we”).

We may update this privacy notice at any time and may also notify you in other ways from time to time about the ways we use your information.

We collect personal information to perform the services that we provide. For any other services, we may seek your consent to process your personal information.

• generally, we will not use your information without your permission for purposes not directly related to the services we provide
• if your information is to be used for purposes such as training, planning and improving services, or research your information will be anonymised

• details about you such as full name, date of birth or age, and contact details such as phone number, address, and email address where appropriate
• information about contact with you

We use your information in compliance with the data legislation, principally:

• the Data Protection Act 2018 (DPA2018)
• the UK General Data Protection Regulations (UK GDPR)
• the Privacy and Electronic Communications Regulations 2003 (PECR2003)

When we use your information, we will do so with the lawful basis and appropriate safeguards of one or more of the following:

• to comply with our legal obligations
• it is in the public interest or to perform a public task
• to fulfil a contract
• it is in someone’s vital interest
• we have a legitimate interest clearly defined
• you have freely given your informed consent

To ensure that your information is used appropriately and that your privacy is respected, your personal information will be held and used in compliance with the requirements of all applicable legislation. This means that:

• we will use or require adequate technical and organisational measures
• we will take steps to ensure that your information is kept as safe as possible, and that it is always accurate and up to date
• only those staff who need to do so will access your personal information
• your record will be retained in accordance with the council’s retention schedule

To provide the most suitable services we often work closely with other organisations. It may, therefore, be in your best interests for your information to be made available to these organisations. In addition, we may be required by law to share your information with some of these organisations.

Where we do share your information, we will still be responsible for it and will take steps to ensure that those it is shared with keep your information secure, and that they also comply with the relevant legislation.

In addition to your right to be informed about how we use your information, you also have the right (free of charge) to request the following:

• access to personal information we hold about you
• to have your information corrected if there are inaccuracies or if the information is incomplete
• to restrict the processing of your information in certain circumstances in accordance with applicable law
• in some instances, to object to your personal information being used at all due to special grounds relating to your particular situation - however, there may be compelling reasons why we may need to continue using your information even in these circumstances
• to be told if your personal information is lost and if, as a result, your privacy and rights may be at risk

In addition to the above, if we have no legal basis to process your information other than the fact that you gave us your consent, then you have the following additional rights:

• to withdraw your consent to process your information
• in some instances, to ask for your personal information to be sent to another organisation in a suitable format. For example, we can provide you with your information in a structured, commonly used, machine readable form when asked;
• to withhold permission for your information to be shared

Innovate Oxfordshire is the Data Controller for data it collects about you as an individual.

View our Data Protection Policy on the Oxfordshire County Council website.