Privacy notice

For Connected Innovation (Norfolk County Council)

Connected Innovation has contracts with Government Departments to deliver a range of business support programmes and grant schemes, several of which are delivered in partnership with other organisations and Local Authorities.

What this document is for

This privacy notice provides details on how we, Norfolk County Council, use your personal information for the purposes of Connected Innovation (a project managed by Norfolk County Council).

By ‘use’ we mean the various ways your personal information may be processed including storing and sharing the information.

Further details

We also provide the following details in our general privacy notice on our website:

• Who we are
• How long we use your information for
• Your rights under the UK General Data Protection Regulation (the GDPR) and
• How to exercise them

You can also ask us for a copy of this information.

What we use your information for

We may use the information about you to:

• Carry out our regulatory, licensing and enforcement roles
• Make payments, grants and benefits
• Listen to your ideas about the County Council’s services
• Deal with complaints
• Comply with our legal obligation
• Tell you about the County Councils Services The account data may be processed for the purposes of providing County Council services and communicating with you
• We also use this information to assess the quality of our services and evaluate and improve our policies and procedures and to meet our contractual requirements with our funding bodies through the submission of anonymised reporting.

We may also use information in other ways compatible with the above.

What personal data we collect and use about you

We will collect and use:

• contact details (name and email address)
• information about the business (including name, job role, financial status, sector, staff numbers, size, date of incorporation, Companies House registration number, VAT, PAYE details etc)
• locational data (address/relevant local authority)
• reason for contact and outcome data
• correspondence that may contain personal data (business support services and employment related to learning/training programmes).

We may also collect and use information about:

• personal data revealing racial or ethnic origin;
• personal data revealing religious or philosophical beliefs;
• data concerning health;

This information is classed as “special category data” under the GDPR. We may only collect these data when it is relevant and for the purposes described above.

Who provides this information

We receive most of this information from you, but we may also obtain some of this data from:

• You or your employer
• New Anglia Growth Hub
• YTKO Limited
• Innovate UK
• UK Research and Innovation (UKRI)
• Innovate UK Business Growth
• Innovate UK Business Connect
• The Catapult Network
• Barclays Eagle Labs
• Tech Nation
• Hethel Innovation
• University of East Anglia
• University of Suffolk
• Norwich University of the Arts
• Norwich Research Park
• The Innovation Labs Group
• Innovation Martlesham
• British Telecom (BT)
• OrbisEnergy
• The EpiCentre
• Kings Lynn Innovation Centre
• Cefas
• John Innes Centre
• Earlham Institute
• Quadram Institute
• Sainsbury Laboratory
• Menta
• Akcela
• Freeport East
• Framlingham Technology Centre
• Tech East
• New Anglia Advanced Manufacturing and Engineering (NAAME)
• Space East
• Game Anglia
• Norfolk and Suffolk Unlimited (NSU)
• Department of Business and Trade (DBT)
• Department of Science Innovation and Technology (DSIT)
• Department of Culture Media and Sport (DCMS)
• Suffolk County Council
• Broadland and South Norfolk District Council
• North Norfolk District Council
• Borough Council of Kings Lynn and West Norfolk
• Great Yarmouth Borough Council
• Breckland District Council
• Norwich City Council
• West Suffolk District Council
• East Suffolk District Council
• Babergh & Mid Suffolk District Council
• Ipswich Borough Council

Who we share your information with

We may need to share your information with:

• our insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining and maintaining insurance coverage, managing risks, obtaining professional advice and managing legal disputes.
• We may also disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject. Reporting to other councils (limited to business name, including sole trader name). DotDigital an email marketing application, in order to send you and email/ communication outlined elsewhere in this notice.
• The New Anglia LEP CRM

As part of the operation of Connected Innovation’s business support programmes and grant schemes, a shared CRM System (New Anglia LEP CRM) has been developed and managed by Norfolk County Council to enable business support and delivery partners across Norfolk and Suffolk to: Any information which is shared will only be shared on a need-to-know basis, with appropriate individuals. Only the minimum information for the purpose will be shared.

Your personal information will also be given to third parties contracted by the County Council to provide a service to the County Council. These service providers are known as data processors and have a legal obligation under GDPR and to the County Council to look after your personal information and only use it for providing that service. In particular, the County Council has entered into a contract with:

How the law protects you and the legal basis for processing your information

We have legal grounds under the GDPR to process this information because it is necessary:

• For the performance of a task carried out in the public interest and the task or function has a clear basis in law
  These statutory powers and duties are:
• • Necessary for the performance of a contract we may have with you
  • Necessary for the performance of a legal obligation in line with the delivery of UKSPF programmes
• You consent/agree to the processing of your data in line with our reporting requirements from the UKSPF programme
• You consent to received marketing and you will only receive messages that are relevant to the service that you have subscribed to. You have the option to subscribe to additional County Council newsletters or you can unsubscribe at any time by following the links in each email we send.

We have legal grounds to process (including share) special category data because it is necessary:

• Where it is necessary for reasons of substantial public interest including:
  • Equality of opportunity or treatment

• or disability status, to equality of opportunity across the programmes we administer

The tasks we carry out are under the:

• The Equality Act 2010

How long will we keep your personal information for

When the information is no longer needed for the above purposes, it will be securely deleted.

Under State Subsidy rules any data relating to state subsidy support has to be kept for seven years, which applies to all UKSPF programmes.

How we keep your information

The information is stored electronically, on the County Council’s network including records management systems and via Dotdigital.

We do not process your information outside of the UK and European Economic Area.

Automated decision making

We do not make automated decisions (including profiling) about you.

Changes to this notice

We may amend this privacy notice at any time so please review it frequently. The date below will be amended each time this notice is updated.

This notice was updated on 27^th August 2024