Updated November 2022

This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the General Data Protection Regulation (GDPR). 

1. YOUR DATA 
We will process the following personal data: 
Names and contact details of individuals registering to use the Digital Readiness diagnostic tool.
1.1 Purpose
We are processing your personal data for the purposes of sharing relevant information with you including to provide access to the Digital Readiness diagnostic tool, report, events, services and programmes; and to manage your account. 
1.2 Legal basis of processing
The legal basis for processing your personal data is your consent and / or legitimate interest.
1.3 Recipients
We may share your data with organisations working on our behalf to deliver services to you and to manage your account. Any use of this data would be subject to confidentiality agreements.  We may share your data if we are required to do so by law, for example by court order or to prevent fraud or other crime. As your personal data will be stored on our IT infrastructure it will also be shared with our data processors.
1.4 Retention 
We review all data we hold on a regular basis and will only retain data where we believe there is consent or legitimate interest. Where we have entered into a formal contract, we will retain your data for a period of 6 years from the end of our engagement.
1.5 Automated decision making
Your personal data will not be subject to automated decision making.
1.6 We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. ​
2. YOUR RIGHTS 
You have the right to request information about how your personal data are processed, and to request a copy of any personal data you have provided, and for this to be provided in a structured, commonly used and machine-readable format.
You have the right to request that any inaccuracies in your personal data are rectified without delay. You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement. 
You have the right to request that your personal data are erased if there is no longer a justification for them to be processed. You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.
  You have the right to object to the processing of your personal data. 
You have the right to withdraw consent to the processing of your personal data at any time.
​
3. INTERNATIONAL TRANSFERS
Some data (e.g. accessing the helpdesk) is stored on our IT infrastructure and shared with our data processors, so may be transferred and stored securely outside the European Economic Area. Where this is the case it will be subject to equivalent legal protection through the use of Model Contract Clause and / or certification under the Privacy Shield Scheme by a US-based company. ​

4. COMPLAINTS
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.  The Information Commissioner can be contacted at:  ​

Information Commissioner's Office 
Wycliffe House 
Water Lane 
Wilmslow 
Cheshire
SK9 5AF
0303 123 1113
casework@ico.org.uk

Data Protection Officer, 
EDGE Digital Manufacturing, 
Amelia House, 
Crescent Road, 
Worthing, 
West Sussex, 
BN11 1QR; 
info@edge-digital.co.uk