The UK Catalysis Hub respects your privacy and is committed to protecting your personal information.
- Who we are
UCL, a company incorporated by Royal Charter (number RC 000631), is the entity that determines how and why your personal data is processed. This means that UCL is the ‘controller’ of your personal data for the purposes of data protection law.
For the purposes of applicable data protection laws (including the EU General Data Protection Regulation, “GDPR”) UK Catalysis Hub is part of the Chemistry Department at University College London (UCL).
- What personal data we collect and why we collect it
“Personal information” means information that enables you to be identified, either directly or indirectly.
We may collect, use, store or transfer some or all the following kinds of personal information about you:
- Behavioural information on your visit to the website: As you interact with our website, we automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data using cookies.
- Email address, where you have requested receipt of a regular email communication.
- Contact information, including your full name, company name, telephone number and email address, where you have submitted an enquiry via our website contact forms.
- The names and other details about third parties who are involved in the issues we are helping you with
We do not collect any sensitive information about you (such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health or genetic and biometric data) or any information regarding criminal convictions or offences.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
- How we use your personal data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- To register you as a client and to manage our relationship with you.
- To help you with your enquiry. Depending on the circumstances, this may include special category personal data. Here, the processing of your information is carried out on the basis of your explicit consent; or
Where the processing is based on your consent, you have the right to withdraw your consent at any time by contacting us using the details set out below. Please note that this will not affect the lawfulness of processing based on consent before its withdrawal.
We may also use anonymised data, meaning data from which you cannot be identified, for the purposes of:
- Service evaluation;
- Education and research; or
- Fundraising and promotional purposes.
Anonymised data may also be used in published reports or journals and at conferences.
- Who we share your data with
We may share your personal information with the following parties where it is necessary to fulfil the purposes we collected it for:
- Associated entities within the UK Catalysis Hub
External third parties, including:
- Service providers (acting as data processors) who provide IT and system administration services
- Law enforcement or other authorities where required to do so to comply with a legal or regulatory obligation.
We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.
- Associated entities within the UK Catalysis Hub
- Lawful basis for processing
Data Protection Legislation requires that we meet certain conditions before we are allowed to use your data in the manner described in this notice, including having a "lawful basis" for the processing. The basis for processing will be as follows:
- Consent. You have given us your consent for processing your personal data.
- Contract. The processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract
- Public task. The processing of your personal data may be necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us [Note: read UCL’s Statement on Public Tasks to ensure that your processing falls within scope of this condition]
- Legitimate interests. The processing of your personal data may be necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or by fundamental rights and freedoms which require protection of personal data [Note: read UCL’s guidance on legitimate interests]
For special category personal data, the following lawful bases for processing will be used:
[Check with the Data Protection Office (email@example.com) for advice on which lawful basis should be relied on]
- International transfers
We do not transfer your personal data outside the European Economic Area (EEA)
- Information security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We have established procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
- How long we retain your data
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
We will keep your personal data according to the Records Retention Schedule.
- What rights you have over your data
Under certain circumstances, you may have the following rights under data protection legislation in relation to your personal data:
- Right to request access to your personal data;
- Right to request correction of your personal data;
- Right to request erasure of your personal data;
- Right to object to processing of your personal data;
- Right to request restriction of the processing your personal data;
- Right to request the transfer of your personal data; and
- Right to withdraw consent.
If you wish to exercise any of these rights, please contact the Data Protection Officer.
- Contacting us
You can contact the UK Catalysis Hub by telephoning 01235 567822 or by writing to: UK Catalysis Hub, Research Complex at Harwell, Rutherford Appleton Laboratory, R92 Harwell Oxford Oxfordshire OX11 0FA. Email: firstname.lastname@example.org
Please note that UCL has appointed a Data Protection Officer. If you have any questions about this Privacy Notice, including any requests to exercise your legal rights, please contact our Data Protection Officer using the details set out below:
Data Protection & Freedom of Information Officer
If you wish to complain about our use of personal data, please send an email with the details of your complaint to the Data Protection Officer so that we can look into the issue and respond to you.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) (the UK data protection regulator). For further information on your rights and how to complain to the ICO, please refer to the ICO website.