Guidance

GovTech Catalyst privacy notice

Published 9 October 2018

GovTech Catalyst is provided by the Government Digital Service (GDS), which is part of the Cabinet Office.

GovTech Catalyst supports public sector organisations to find innovative solutions to operational service and policy delivery challenges. As part of this process, we periodically invite public bodies to submit expressions of interest to the fund, outlining a public policy challenge that could be addressed through technology innovation.

The data controller for GDS is the Cabinet Office. A data controller determines how and why personal data can be processed. For more information, read the Cabinet Office’s entry in the Data Protection Public Register.

What data we collect from you

The personal data we collect from you will include your:

  • name
  • email address

We will also make use of your organisation’s:

  • name
  • answers to questions on the GovTech Catalyst challenge submission form

The legal basis for processing this data is to perform a task in the public interest - specifically, to administer the GovTech Catalyst fund, a Small Business Research Initiative fund administered by GDS.

Why we need your data

We will collect this information from you in order to process your organisation’s interest in applying for a grant from the GovTech Catalyst fund.

What we do with your data

A panel of expert officials from GDS, DCMS, BEIS, HMT and a devolved administration official will review these expressions of interest and decide which organisations should receive funding.

We may contact you during this scoring process to ask follow-up questions. Following the scoring, we will communicate with you to indicate whether or not your organisation will be receiving funding, and to communicate feedback from the panel.

We will not:

  • sell or rent your data to third parties
  • share your data with third parties for marketing purposes

We will share your data if we’re required to do so by law – for example, by court order, or to prevent fraud or other crime.

How long we keep your data

We will only keep your personal data for as long as:

  • the law requires us to
  • we need for the purposes listed above

This means that we will only hold your personal data for a minimum of 1 year and a maximum of 2 years.

Where your data is processed and stored

We design, build and run our systems to make sure that your data is as safe as possible at any stage, both while it’s processed and when it’s stored.

Your personal data may be transferred outside the European Economic Area (EEA) while being processed by GDS. If this happens, we’ll make sure you’re given the same level of technical and legal protection as you are within the EEA through model contract clauses and US Privacy Shield.

Who we share your data with

As part of GovTech Catalyst we share your personal data with data processors who provide us with online survey and IT infrastructure services.

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. We set up systems and processes to prevent unauthorised access to or disclosure of the data we collect about you – for example, we protect your data using varying levels of encryption. All third parties that process personal data for GDS are required to keep that data secure.

Your rights

You have the right to withdraw consent to the processing of your data at any time.

You also have the right to request:

  • information about how your personal data is processed
  • a copy of that personal data
  • that this copy be provided in a structured, commonly used and machine-readable format
  • that anything inaccurate in your personal data is corrected without delay

  • that your personal data is erased if there is no longer a justification for holding it
  • that the processing of your personal data is restricted in certain circumstances (for example, where accuracy is contested)

If you have any of these requests, get in contact with our data protection officer.

Changes to this policy

We may change this privacy policy. In that case, the ‘last updated’ date at the top of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

If such changes affect how your personal data is processed GDS will take reasonable steps to let you know.

Questions and complaints

Contact the Data Protection Officer if you:

  • have any questions about anything in this document
  • think that your personal data has been misused or mishandled

Data Protection Officer

Cabinet Office
70 Whitehall
London
SW1A 2AS

If you have a complaint, you can also contact the Information Commissioner, who is an independent regulator set up to uphold information rights.

Information Commissioner's Office

Email icocasework@ico.org.uk

Contact form https://ico.org.uk/glo...

Telephone 0303 123 1113

Textphone 01625 545 860