United Kingdom National Nuclear Laboratory Limited (“UKNNL”) is committed to protecting and respecting your privacy.
UKNNL (also referred to as ‘we’, ‘us’ and ‘our’) is the controller and responsible for your personal data[1].
This privacy notice describes how we may collect personal data about academic researchers who interact with us in connection with research activities and access to our facilities, equipment, software or materials.
This privacy notice supplements any other notices (including on our website) and is not intended to override them.
Your duty to inform us of changes
It is important that the personal data we hold about you is accurate and current. Please keep us informed if any of your personal data you have provided to us changes during your relationship with us.
What personal data do we process about you?
We will process the following categories of personal data about you:
- Your name.
- Your contact details (such as your email address, postal address and telephone number).
- Information relating to your research (such as applications, descriptions, reports, theses, publications, presentations and associated abstracts) which may contain data which identifies you.
- Your interaction with us including any visits[2] to our facilities, and/or any equipment, software and materials used.
- Your UK right to work (where applicable), residency status and nationality (if accessing our facilities2).
- Details of awards received, attendance at industrial events (such as seminars and symposia) and limited details of your enrolment or employment with your institution and subsequent employment (where relevant) which may contain information which identifies you.
This data may be provided by your institution[3] or we may collect it directly from you through our interaction with you in connection with research activities and access to our facilities, equipment, software or materials.
How do we process your personal data?
We will store your personal data on our IT system including our intranet and it will be accessible by our staff.
Our IT system is certified to ISO27001 and Cyber Essentials. Our IT systems are monitored for any malicious activity.
Your personal data will be processed for the following purposes:
Administer the contractual arrangements we have in place with your institution for your research.
Arrange access to our facilities, equipment and materials (as appropriate).
Monitor and report on the progress of research activities in line with contractual requirements[4].
Send you notifications of opportunities relating to nuclear research and development that we believe may be of interest to you for example this might be to inform you about funding opportunities, seminars, conferences and events, etc. (“Notifications”) and storing your communication preferences (where applicable).
Maintain our records of academic collaboration including:
Research activities.
Use of our facilities, equipment and materials.
Your nationality.
Your subsequent employment (where relevant) to understand if you stay within the nuclear field.
Which we use to measure how successful our interaction has been in achieving our Science and Technology agenda for academic collaboration (including measuring our UK and international reach and diversity) as described on our website and for reporting purposes.
We may publish material (such as articles, case studies, technical highlights and other publications) based on your research (as provided by contractual arrangements we have in place with your institution for your research). We will only publish your personal data (such as your name and affiliation) to the extent necessary for the purpose of crediting your scientific contribution in accordance with acknowledgement and publication requirements (see ‘Who do we share your personal data with?’). If we wish to publish images or video which identifies you, we will contact you to discuss this.
Should you have any questions about how we use your personal data please contact your UKNNL contact.
How long do we process your personal data?
Whenever we collect or process your personal data, we will only keep it for as long as is necessary for the purposes for which it was collected. At the end of that retention period, your personal data will either be deleted or anonymised. If you have any questions about how long we keep your personal data for, please contact our Data Protection Officer (“DPO”) in writing (see below).
Who do we share your personal data with?
We will not share your personal data with anyone who does not have a clear need to know.
Where we have been tasked by our customer4 to provide support (financial and/or in-kind) for research activities pursuant to a contract, we will share your personal data with our customer in order to fulfil our contract with them.
We may share your personal data with publishers if we publish articles based on your research. We will only share your personal data (such as your name and affiliation) to the extent necessary for the purposes of crediting your scientific contribution and to comply with any publication requirements. Should you have any questions about this please contact your UKNNL contact.
We may sometimes share your personal data, insofar as we are permitted by law to do so, with trusted third parties such as IT companies who support our website and other business systems and delivery partners.
Your rights in connection with your personal data
In certain circumstances and subject to limitations, by law, you have the right to:
- Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Request correction of the personal data held about you. This enables you to request that any incomplete or inaccurate information we hold about you is corrected.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for continuing to process it.
- Object to processing of your personal data where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
- Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example, if you want us to establish its accuracy or the reason for processing it.
- Request the transfer of certain personal data to another party.
If you want to exercise any of the above rights in relation to your personal data, please contact our DPO in writing (see below). You will not normally need to pay a fee to exercise any of these rights. However, we may charge a reasonable fee if your request is clearly unfounded or excessive. We may refuse to comply with the request in certain circumstances.
Data Protection Officer
We have appointed a DPO to oversee compliance with data protection legislation. If you have any questions about this privacy notice, or how we handle your personal data, please contact the DPO via our webform.
You have the right to make a complaint at any time to the Information Commissioner’s Office (“ICO”) or judicial levels. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
[Notes]
1. Information which relates to and identifies you.
2. If you visit our facilities, you will be referred to our Visitor Privacy Notice (available on our website) which describes how we collect and use your personal data during and after your visit to us.
3. Please refer to your institution’s privacy notices to understand how it shares your personal data with us.
4. We may enter into contractual arrangements with industrial partners to provide financial and/or in-kind support for your research. Such arrangements may require us to provide our partners with updates on your research which contains information which identifies you.