Guidance

ESERO-UK Grant Call Privacy Policy

Published 14 October 2026

In the course of engaging with the ESERO-UK Space Education and Engagement Programme Grant Scheme, you may provide information about yourself (‘personal data’). We (the Department for Science Innovation and Technology (DSIT)) are the ‘data controller’ for this information, which means we decide how to use it and are responsible for looking after it. This notice sets out how we will process your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR). 

Your data 

The type of personal information we collect   

• lead contact full name 

• lead contact organisation and role 

• lead contact email address 

• lead contact telephone number 

The lead contact is the individual who is making an application to the fund on behalf of an organisation. 

How we  will  use your data  

We will use your data to ensure that the ESERO-UK Space Education and Engagement Programme Grant Scheme is able to:  

• contacting all organisation applicants using their provided contact details with notification of the result of their application 

• contacting successful organisations using their provided contact details in order to make arrangements for payment of funding 

• contacting successful organisations throughout the funding period, including to ask them to complete monitoring and evaluation forms 

• for the prevention, investigation and detection of fraud 

• for evaluation of the scheme to understand its impact and to inform future government policy. 

• if we need to use it for another related reason and that reason is compatible with the original purpose. If we need to use your data for an unrelated purpose, we will seek your consent separately to use it for that new purpose.  

Legal basis of processing 

The legal basis for processing your personal data under Article 6 of the UK GDPR will be one of the following: 

• 1(e) Public task: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller; in this case, the data to be processed by DSIT is required for the delivery of the ESERO-UK grant. The data is necessary to ensure that organisations will be able to bid for and receive funding. 

Who has access to your data?  

Access to your data held by DSIT will be provided to staff within the organisation who need to view it as part of their work in carrying out the purposes described above.  

As part of our IT infrastructure, your personal data will be stored in the UK on systems provided by our data processors - Microsoft and Amazon Web Services. This does not mean we actively share your personal data with these entities; rather, they are technical service providers who host infrastructure supporting our IT systems. 

We may share your data with third parties who are contracted in to support and administer tasks directly related to the ESERO-UK Space Education and Engagement Programme Grant Scheme who will act as data processors. These bodies are required to take appropriate security measures to protect your data in line with our policies and this privacy notice. We do not allow them to use your data for their own purposes. We permit them to process your data only for specified purposes and in accordance with our instructions. 

Retaining your data  

Personal data will be retained to the following schedule: 

• Information within proposals (successful and unsuccessful) will be retained for 7 years following scheme closure, 30th April 2027.   

• Your contact data will be retained for no longer than 7 years following the scheme closure for monitoring and evaluation purposes.   

• Sensitive personal data collected to facilitate event attendance will be destroyed one month after the event.  

• Anonymised and non-personal data may be kept for up to 15 years for statistical purposes.  

Your data protection rights  

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.  

You have the right to request that any inaccuracies in your personal data are rectified without delay.  

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.  

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.  

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.  

You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.  

You have the right to withdraw consent to the processing of your personal data at any time.  

You have the right to object to the processing of your personal data.  

To exercise your rights please contact the Data Protection Officer using the contact details below. 

How to contact us  

The data controller for your personal data is the Department for Science. Innovation and Technology (DSIT). You can contact the DSIT Data Protection Officer at:  

DSIT Data Protection Officer  Department for Science, Innovation &Technology  22-26 Whitehall  London  SW1A 2EG 

 Email: dataprotection@dsit.gov.uk 

If you are unhappy with the way we have handled your personal data, please write to the department’s Data Protection Officer in the first instance using the contact details above.

Complaints 

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.  The Information Commissioner can be contacted at:  

Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF 

Tel:0303 123 1113 

 https://ico.org.uk/make-a-complaint/ 

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.