United Kingdom National Nuclear Laboratory Limited (“UKNNL”) is committed to protecting the privacy and security of your personal data.
UKNNL (also referred to as ‘we’, ‘us’ and ‘our’) is the controller and responsible for your personal data.
This privacy notice describes how we may collect personal data about you in the course of our business, including through your use of our website, when you contact or request information from us, when you attend our seminars and conferences, when we send you news releases, publications, articles or our services or as a result of your relationship with one or more of our staff.
This privacy notice supplements any other privacy notices (including on our website) and is not intended to override them.
Your duty to inform us of changes
It is important that the personal data we hold about you is accurate and current. Please keep us informed if any of your personal data you have provided to us changes during your relationship with us.
What personal data do we process about you?
We will process the following categories of personal data about you:
- Name
- Title
- Organisation
- Telephone number – landline and mobile
- Email address
- Postal address
How do we process your personal data?
We collect your personal data from the following sources:
- Our website – www.UKNNL.co.uk (please see our Website Privacy Notice for more information).
- Emails sent by you to us.
- Questionnaires and forms completed by you.
We will store your personal data on our IT system including our intranet and it will be accessible by our staff.
Our IT system is certified to ISO27001 and Cyber Essentials. Our IT systems are monitored for any malicious activity.
We will use the personal data collected about you for the purposes of:
- Emailing you about our or other events which we think may be of interest to you.
- Emailing you about our or other news we wish to share and which we think will be of interest to you.
- Contacting you about any services or requests you may have asked of us.
How long do we process your personal data?
Whenever we collect or process your personal data, we will only keep it for as long as is necessary for the purposes for which it was collected. At the end of that retention period, your personal data will either be deleted or anonymised.
We are legally required to keep basic information about our customers (including contact, identity, financial and transaction data) for at least six years after they cease being customers, for tax purposes.
If you have any questions about how long we keep your personal data for, please contact our Data Protection Officer (“DPO”) in writing (see below).
Who do we share your personal data with?
We will not share your personal data with anyone who does not have a clear need to know.
We will sometimes share your personal data, insofar as we are permitted by law to do so, with trusted third parties such as IT companies who support our website and other business systems and delivery partners.
Your rights in connection with your personal data
In certain circumstances and subject to limitations, by law, you have the right to:
- Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data UKNNL holds about you and to check that we are lawfully processing it.
- Request correction of the personal data that we hold about you. This enables you to request that any incomplete or inaccurate information we hold about you is corrected.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for continuing to process it.
- Object to processing of your personal data where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
- Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example, if you want us to establish its accuracy or the reason for processing it.
- Request the transfer of certain personal data to another party.
If you want to exercise any of the above rights in relation to your personal data, please contact our DPO in writing (see below). You will not normally need to pay a fee to exercise any of these rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. We may refuse to comply with the request in certain circumstances.
Data Protection Officer
We have appointed a DPO to oversee compliance with data protection legislation. If you have any questions about this privacy notice, or how we handle your personal data, please contact the DPO via our webform.
You have the right to make a complaint at any time to the Information Commissioner’s Office (“ICO”) or judicial levels. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.