NCC Building Exterior

Privacy Notice

National Composites Centre Privacy Notices (PN) available below:

 


Communications & Marketing 

National Composites Centre (NCC) Privacy Notice for Communications and Marketing

The NCC complies with the Data Protection Act 2018 and UKGDPR. We are registered with the Information Commissioner's Office (ICO) as a Data Controller.

This Privacy Notice is for Communications and Marketing and explains what personal data is collected, how it is processed and who it will be shared with. 

Why we collect personal data about you

We collect and hold personal data relating to your contact with our department.

Dependent on your reason for communicating with the department we use this information to:

  • Contact you, following your enquiry.
  • Respond to your enquiry.
  • Make available our products and services to you.
  • Process your orders.
  • Processing payment from you or give you a refund if you hire our facilities.
  • For statistical analysis.
  • Get feedback from you about our products, websites, mobile apps, and other services and activities.
  • Contact you about products and services you consume (with your consent).
  • Provide you with online advertising and promotions (with your consent).

Our Lawful Basis for Processing

Depending on your reason for visiting or making use of our services, our lawful basis may differ:

  • Receiving news & events updates – our lawful basis is Consent. The data subject has given consent to the processing of their personal data for one or more specific purposes.
  • Onsite and offsite visits and *events: our lawful basis is Legal Obligation. We need certain information under Health & Safety for visiting our facility, or external locations where we hold events. 

*'Events' are defined as onsite and offsite courses, workshops, exhibitions, conferences & events.

What personal information we collect

  • Your name and your contact details.
  • Nationality (Visits and Events).
  • Survey responses.
  • Records of conversations regarding your enquiry.
  • Dietary requirements (Visits and Events).
  • Access requirements (Visits and Events).

Who we share your information with

Depending on the nature of our engagement with you, we may share data with:

  • High Value Manufacturing Catapult, of which we are part of – when we undertake joint events, press releases and for support on enquiries.
  • University of Bristol, who we are a subsidiary of – when we undertake joint events, press releases and for support on enquiries.
  • Aerospace Technology Institute (ATI), when we undertake joint events, press releases and for support on enquiries.
  • UK Space Agency, when we undertake joint events, press releases and for support on enquiries.
  • Company Caterers – event organisers contact details are shared when catering is booked through us for an event.

We all use the following sub-processors:

  • Mailchimp – for processing your data to receive news & events updates.
  • Mentor Digital – who provide a platform that we use to process news & events information.

How long we keep your information for

We will only keep your information for as long as we need to unless we need to keep it for legal reasons. For the purposes of this processing, we will keep your data for:

  • With your consent, to be contacted about offers, news, products – 3 years (before confirming with you that we can retain your information for future contact).
  • For events – 12 months after the event has completed.
  • For records of correspondence – for 12 months after the purpose of the correspondence is completed.

Your rights

You have the right to:

  • Ask to see the information we hold about you.
  • Ask us to change information we hold about you if it is wrong.
  • Ask us to delete the information we hold about you.
  • Ask us to limit the way we use your information.
  • Withdraw your consent (see below).
  • Ask for human intervention regarding decisions made about you by a computer.
  • Complain to the Information Commissioner’s Office.

Withdrawal of consent

Where personal data is processed on the lawful basis of consent, you will have the right to withdraw that consent. However, dependent on the purposes that we are processing your data, withdrawal of consent may affect our ability to provide certain services to you.

Data Protection Officer Contact Details

Under the GDPR, the NCC is required to appoint a Data Protection Officer (DPO). The Data Protection Officer is required to monitor compliance with the GDPR and Data Protection Act 2018, to advise and inform the NCC on its data protection obligations and how to meet them, and to be a point of contact for data subjects and the ICO. The NCC's Data Protection Officer is Sharon Lock, Information Governance Manager & Data Protection Officer – email [email protected]

Complaints

If you are unhappy with the way your request was handled or you disagree with a decision made by the NCC regarding your data, you have the right to submit a complaint by contacting the Data Protection Officer (DPO) who will review your complaint via email: [email protected]

If you are not happy with the outcome from the DPO you may wish to contact the Information Commissioner’s Office (ICO) at:

The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF.

 


Training Courses

National Composites Centre (NCC) Privacy Notice for provision of training courses

The NCC complies with the Data Protection Act 2018 and the General Data Protection Regulation as it applies in the United Kingdom (UKGDPR). We are registered with the Information Commissioner's Office (ICO) as a Data Controller.

This Privacy Notice explains what personal data is collected, how it is processed and who it will be shared with.

Why we collect personal data about you

We collect and hold personal data to enable the provision by us of training events and/or courses, whether available online or delivered in person, and provided to a business or an individual.

We use this information to:

  • Enable you to book or register for a training event or course;
  • Allow you to make payment for a booking;
  • Provide you with information about your training course booking;
  • Record anonymised statistics on training attendance;
  • Grant access to the NCC site for individuals attending training on site; and
  • Ensure our trainers are aware of any medical conditions or accessibility requirements that may affect you whilst attending training.

Our Lawful Basis for processing is:

  • Contract: Processing is necessary for the performance of a contract to which the data subject (you) is party or in order to take steps at the request of the data subject prior to any contract.

What personal information we collect?

  • Name;
  • Email address;
  • Dietary requirements;
  • Nationality;
  • Payment information including cardholder name, billing address and payment card details; and
  • Any medical conditions and/or accessibility requirements you choose to share with us.

Who we share your information with

We may share your personal data with:

  • Eventbrite - Eventbrite UK Limited (UK Company number 07644044), which provides an event booking platform through which you can register for our courses and events. Eventbrite’s privacy information can be viewed here;
  • Stripe - Stripe Payments UK, Ltd, (UK Company number 08480771) and Stripe Payments Europe, Limited (Irish Company number 513174), which provide online payment services enabling you to pay for a course or event you have booked. Stripe’s privacy information can be viewed here;
  • Staff at our parent company, the University of Bristol, who have a need to process your personal data (for example professional services staff who may be involved in processing or responding to any request by you to exercise your rights in respect of your personal data).

How long we keep your information for

We will only keep your information for as long as we need to unless we need to keep it for legal reasons. For the purposes of this processing we will keep your data for the following time periods:

  • We keep details on medical conditions, accessibility requirements dietary requirements and nationality for no more than 2 months after you attend a course or event;
  • If you have signed up to our mailing list, we will hold your name and contact details until you opt out of receiving these communications (which you can do by clicking the ‘unsubscribe’ link at the bottom of any marketing email from us);
  • In all other cases, your personal data will be held for three years from the date it is submitted to us.

Your rights

You have the right to:

  • Ask to see the information we hold about you
  • Ask us to change information we hold about you if it is wrong
  • Ask us to delete the information we hold about you
  • Ask us to limit the way we use your information
  • Ask for human intervention regarding decisions made about you by a computer
  • Complain to the Information Commissioner’s Office

Complaints

If you are unhappy with the way your request was handled or you disagree with a decision made by the NCC regarding your data, you have the right to submit a complaint by contacting the Data Protection Officer (DPO) who will review your complaint. [email protected]

If you are not happy with the outcome from the DPO you may wish to contact the Information Commissioner’s Office (ICO) at:

The Information Commissioner’s Office

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

 

Keep up to date

Sign up to receive the latest updates, news and events from
the National Composites Centre