This privacy notice is for registered members of the Biomass Biorefinery Network (BBNet), which has been set up by the University of York and the BBRSC (Biotechnology and Biological Sciences Research Council). It sets out the ways in which your data is gathered, used, stored and shared. It also sets out how long we retain your data and what rights you have in relation to your data under the General Data Protection Regulation (GDPR).
What is BBNet?
BBNet is a Network in Industrial Biotechnology and Bioenergy funded by a research grant awarded to Professor Simon McQueen-Mason of the University of York by the BBSRC (grant code BB/S009779/1).
Where do we get your data from?
When you register as a member of BBNet, the University of York will ask you to provide certain personal data.
What data do we ask for?
The personal data we will ask you to provide is: full name, email address, the organisation you work for and your position within that organisation, your regional location, your gender (optional), your area of expertise and your expected contribution to the Network.
We will also maintain records of any Network activities you choose to take part in and any Network funding you are allocated. If you register to attend a Network event, we may ask for a contact telephone number and will give you the option of providing us with information relating to any dietary and accessibility requirements you may have.
What is our legal basis for processing your data?
The University of York and theBBSRC (which is part of UK Research and Innovation (UKRI), an independent organisation which brings together the UK’s seven research councils including BBSRC), will jointly act as Controllers of the personal data you provide.
We will process the data you provide to fulfil our contract with you, to provide you with access to the benefits of membership of the BBNet Network. We will also process your data where it is necessary for the performance of a task carried out in the public interest, for example to reinforce open scientific enquiry and stimulate new investigations and analyses, and to fulfil the terms of grant code BB/S009779/1.
How do we use your data?
Your data will be processed for the following purposes:
- To create a database of registered members which is stored on the Network website’s secure UK-based web server in a manner which makes it accessible to other Network members, some of whom may live outside of the European Economic Area (EEA), but not to non-members. You will be able to search other members’ profiles, based on the registration form, with a view to exchanging research ideas and establishing research consortia.
- To allow the BBNet Network Manager to keep you up to date by email with relevant Network activities and funding opportunities and maintain a record of your involvement with BBNet. This will include regular newsletters sent by email every 4-6 weeks to all registered members and occasional emails containing details of Network activities and opportunities where this is considered relevant to your interests.
- To provide BBSRC with a record of registered BBNet members, as a required output of grant BB/S009779/1. BBSRC may use the information provided on the BBSRC NIBB Extranet for research related activities, including but not limited to, statistical analysis in relation to evaluation of the BBSRC NIBB, study of trends and policy and strategy studies. Retained statistical data will be anonymised. The BBSRC will have access to all your registration details except your email address and contact telephone number, and will not contact you directly.
Who do we share your data with?
Your personal data is provided via and stored on the BBNet website which was developed by Catlegate IT Ltd, and is supported, maintained and hosted by Castlegate IT Ltd. Castlegate IT Ltd acts as a Data Processor on behalf of the University of York in accordance with an Agreement which complies with the GDPR. The personal data you provide to the University of York when you register as a member of BBNet (with the exception of your email address) will be subsequently uploaded to an area of the secure BBSRC NIBB extranet which is only accessible by authorised representatives of the BBNet Network and BBSRC. Your registration details, apart from gender, will be available in the members only area of the BBNet website. This area is accessible only to members via a user name and password.
How do we keep your data secure?
The University of York takes information security extremely seriously and has implemented appropriate technical and organisational measures to protect personal data and special category data. For further information see, https://www.york.ac.uk/it-services/security/. For information on how BBSRC keep data secure, please see https://bbsrc.ukri.org/documents/ukri-data-protection-policy-pdf/.
How do we transfer your data safely internationally?
In certain circumstances, it is necessary to transfer your Personal Data (including Special Category Data) outside the European Economic Area. In respect of such transfers, the University will comply with our obligations under Data Protection Law and ensure an adequate level of protection for all transferred data.
How long will we keep your data?
The University will retain your data in line with legal requirements or where there is a business need. Your data will be processed only during the period of time that the grant is active. After the end of the grant, records required for audit purposes will be retained by the University of York for a period of 10 years in accordance with the BBSRC Statement on Safeguarding Good Scientific Practice https://bbsrc.ukri.org/documents/safeguarding-good-scientific-practice/ and any records of personal data which are no longer required will be deleted within six months.
What rights do you have in relation to your data?
Under GDPR, you have a right of access to your data, a right to rectification, erasure (in certain circumstances), restriction, objection or portability (in certain circumstances). See https://www.york.ac.uk/records-management/generaldataprotectionregulation/individualsrights/ for further information.
You can make changes to the personal data in your membership profile at any time by logging in to your account on our website. If at any point you believe the personal data we process is incorrect you can request to see this information and have it corrected or deleted. You can terminate your membership of the BBNet Network at any time by sending an email to the Network Manager.
Questions or concerns
If you have any questions about this privacy notice or concerns about how your data is being processed, please contact the BBNet Network Manager by email in the first instance. You can also contact the University’s Data Protection Officer at firstname.lastname@example.org.
Right to complain
If you are unhappy with the way in which the University of York has handled your personal data, you have a right to complain to the Information Commissioner’s Office. For information on reporting a concern to the Information Commissioner’s Office, see https://www.ico.org.uk/concerns/.