advertisement

Lancashire Economic Development Authorities

In order to comply with the UK General Data Protection Regulation (UK GDPR), where personal data relating to a data subject is collected, Lancashire County Council would like to provide you with the following details.

Identity and contact details of the data controller

  • Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ

Contact details of the data protection officer

  • Our Data Protection Officer is Paul Bond. You can contact him at dpo@lancashire.gov.uk or Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ

Purposes for processing

This information is required to assess the impact of business support initiatives on the economy of Lancashire and the companies supported. The information is also required to monitor the effectiveness of external funding such as the European Regional Development Fund and other funding allocated to the Lancashire Enterprise Partnership. It helps us to:

  • Advise businesses of the range business support available within Lancashire
  • Provide improved services to businesses though better coordination across support organisations
  • Provide more joined up, comprehensive performance management information to help us attract additional funding to Lancashire to support local businesses.

Data relating to the client journey and the value of public sector support is also required to comply with the State Aid De Minimis regulations specifically to monitor total support to individual businesses against the ceiling of 200,000 Euros in any three year period. This legislation is enforced across all UK Government and European funded business support projects.

Growth Lancashire

Growth Lancashire’s role is to serve both new and existing businesses to grow job opportunities and skills across the County.  Growth Lancashire is owned by several Lancashire local authorities and operates across the County. They work on behalf of publicly funded business support organisations in Lancashire in coordinating and signposting businesses to the most appropriate source of support.  A team of business advisors offer impartial advice to help businesses realise their potential.

Category of personal data being processed

  1. Personal data (information relating to a living, identifiable individual)
  2. Special category personal data (racial, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation)

Legal basis for processing personal data

The legal basis for processing your personal data, in accordance with the UK GDPR is:

(a) Consent: the individual has given clear consent for you to process their personal data for a specific purpose.

Where a client wishes to sign up to receive specific information from the stakeholders, such as a newsletter, consent must be gained, verbal or written. This consent must adhere to UK GDPR rules around consent management.

(f) Legitimate Interests: pursued by the controller or by a third party.

Legitimate Interests would apply where the data subject directly engages with one or more partner for the purposes of delivering a support service to them.

Each stakeholder understands that any further sharing of personal data is their responsibility as a data controller, and they must identify a clear lawful basis for any onward sharing of personal data.

Legal basis for processing special categories of personal data

The legal basis for processing your special categories of personal data, in accordance with the UK GDPR is:

  • The data subject has given explicit consent to the processing of this personal data.

Where one of more participating organisations requests the ethnicity or disability status of a business owner, explicit consent will be sought.

It will be the responsibility for each stakeholder who seeks explicit consent to ensure that an appropriate consent form is in place.

The stakeholder will explain to the data subject the reason they are seeking to capture this information and request consent.

Recipients of the data

Evolutive

Evolutive is a database that stores information regarding the support and funding that business across Lancashire have received. The system is administered by Lancashire County Council with Local Administraor rights and direct access granted to the following organisations.

Lancashire County Council, Blackburn with Darwen Council, Burnley Borough Council, Blackpool Borough Council, Chorley Council, Fylde Borough Council, Hyndburn Borough Council, Lancaster City Council, Pendle Borough Council, Preston City Council, Ribble Valley Borough Council, Rossendale Borough Council, South Ribble Borough Council, West Lancashire Borough Council and Wyre Council.

Wider organisations and processors may have access to Evolutive but their access will be restricted and limited. Wider partners and processors may include any number of the following organisations - East Lancashire Chambers of Commerce, University of Central Lancashire, Lancaster University, Edge Hill University, University of Sheffield, The Growth Company Ltd, Innovation Agency, North West Aerospace Alliance, Northern Automotive Alliance, People Plus, Selnet Ltd, Lancs Forum.

Statistical and research data will also be shared with government departments such as the Department for Business, Energy and Industrial Strategy (BEIS) and Department for Levelling Up, Housing and Communities as well as other funding organisations.

Information we share

Each Lancashire Enterprise Partnership organisation will only share the necessary and relevant information required to provide your business with help, advice and relevant funding opportunities.

  • Company Name
  • Company Address
  • Company contact details
  • Company Personnel Contact details
  • Nature of business
  • Individual Client Name
  • Individual Client Contact details
  • Details of the client journey/hours spent
  • Ethnicity of business owner (Special Category)
  • Disability of business owner(Special Category)
  • Age of business owner
  • D.O.B
  • Gender
  • Employment status
  • Nature of business enquiry
  • Notes relating to business enquiry
  • Outcome of any grant fund awarded including amount
  • Outcome of any job creation including details of the job (ethnicity, gender)
  • Turnover
  • Gross Value Added (GVA)

Any transfers to another country

  • No

Retention periods

The Lancashire Economic Development Authorities will only store information received from their involvement with you for as long as is legally required or in situations where there is no legal retention period they will follow established best practice. At the end of the retention period electronic data will be deleted and any physical files will be confidentially disposed of.

Your rights

You have certain rights under the UK General Data Protection Regulation (UK GDPR), these are the right:

  • to be informed via Privacy Notices such as this.
  • to withdraw your consent. If we are relying on your consent to process your data then you can remove this at any point.
  • of access to any personal information the council holds about yourself. To request a copy of this information you must make a subject access request in writing. You are entitled to receive a copy of your personal data within 1 calendar month of our receipt of your subject access request. If your request is complex then we can extend this period by a further two months, if we need to do this we will contact you. You can request a subject access request, either via a letter or via an email to Information Governance Team, address below.
  • of rectification, we must correct inaccurate or incomplete data within one month.
  • to erasure. You have the right to have your personal data erased and to prevent processing unless we have a legal obligation to process your personal information.
  • to restrict processing. You have the right to suppress processing. We can retain just enough information about you to ensure that the restriction is respected in future.
  • to data portability. We can provide you with your personal data in a structured, commonly used, machine readable form when asked.
  • to object. You can object to your personal data being used for profiling, direct marketing or research purposes.
  • in relation to automated decision making and profiling, to reduce the risk that a potentially damaging decision is taken without human intervention.

If you want to exercise any of these rights then you can do so by contacting:

Information Governance Team
Lancashire County Council
PO Box 78
County Hall
Preston
PR1 8XJ

Email: dpo@lancashire.gov.uk

To ensure that we can deal with your request as efficiently as possible you will need to include your current name and address, proof of identity (a copy of your driving licence, passport or two different utility bills that display your name and address), as much detail as possible regarding your request so that we can identify any information we may hold about you, this may include your previous name and address, date of birth and what council service you were involved with.

Further information

If you would like more information about this specific project then please contact boost@lancashire.gov.uk.

For more information about how we use personal information see Lancashire County Council's full privacy notice.

If you wish to raise a complaint on how we have handled your personal data, you can contact the Information Governance team who will investigate the matter.

Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ or email: dataprotection@lancashire.gov.uk

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).