Privacy policy
This website is operated by Nesta as part of a consortium set up to administer and manage the NGI Forward project being run by the European Commission within its Next Generation Internet initiative (the “Project”). The consortium members are Aarhus Universitet (Aarhus University), Uniwersytet Warszawski (University of Warsaw), Edgeryders OU, Resonance Design BV, Fondazione Innovazione Sociale Per L’Italia (Nesta Italy), Gemeente Amsterdam (City of Amsterdam) (the “Partners”).
The European Commission is the data controller of all personal data relating to the Project and being processed by the consortium in accordance with the European Commission instruction and in compliance with Regulation (EU) 2016/679.
This privacy policy explains how your personal information collected via this site will be used by the European Commission and the consortium.
1. What kind of information do we collect?
Sign-up details: If you register or sign up for events, newsletters or publications on the site, we will ask you for personal information such as your name, email address, occupation and other contact details such as a contact phone number.
Feedback: We may ask you for feedback about events or to complete surveys.
Your posts and communications: If you post content or communicate via the site, we may also ask for your name, occupation and the organisation you may work for. We also store and monitor this content and communications.
2. What do we do with information we collect and what is our legal basis for this?
Third-party processors: As is indicated below, we may use third-party platforms and processors to deliver newsletters, event registrations, surveys, and process any request to update your data contact preferences. In using these third parties we are pursuing our legitimate interest to use third party technology to achieve greater efficiency within our organisation.
Sign-up details: If you sign-up for us to send you newsletters, publications and other information about our activities (see “Marketing” section below), we will use your personal information to send these to you. Our legal basis for doing this is your consent. You have the right to withdraw this consent at any time, as explained in the “Marketing” section below.
Event registrations: If you register to attend one of our events we (and our Partners) will use your personal information to process your application to attend the event, take payment, if any, for our administration and management of the event and to send you any updates or information regarding the event. Our legal basis for doing so is to fulfil the agreement with you for your attendance.
We use Eventbrite as registration systems for many of our events and their servers are based in the United States (U.S.) and may store and process your information outside the European Economic Area (EEA). Eventbrite complies with the EU-US Privacy Shield Framework. If you wish to know more please see the Eventbrite Privacy Policy.
Feedback: If you agree to give us feedback or complete a survey, we will use the information to improve our work and activities. We usually use SurveyGizmo to process surveys, and they only process your information on our instructions. SurveyGizmo operates in the US and complies with the EU-U.S. Privacy Shield Framework. For more information see the SurveyGizmo Privacy Policy. If you agree to participate in any survey that will form part of any research project, we will tell you at the time you take part how your information will be used for the particular research project or programme, and how long it will be kept for.
Posts and Communications: If you post any comments on the website, any personal information you agree to provide will be displayed publicly on the website along with your comments.
For all kinds of information collected:
Please make sure that any personal details you provide are accurate and up to date, and let us know about any changes. Please get consent first before giving us anyone else’s information.
We may also use your information to carry out analysis and research to improve our publications, events and activities; customise our website and its content to your particular preferences; notify you of any changes to our website or to our activities that may affect you; prevent and detect fraud and abuse; and protect other users.
We may retain your information for our own legitimate business interests for statistical analysis purposes, in order to review, develop and improve our business activities. In this situation, we will only keep any personal information if it is necessary to do so, and will always put in place appropriate safeguards, including where possible anonymising or minimising the data retained.
Nesta uses a third party to provide cloud based data security, storage and disaster recovery service to backup data that we hold, we currently use Barracuda Networks lncorporated. Barracuda are a company based in the U.S. and store your Data outside the EEA. Barracuda complies with the EU-U.S. Privacy Shield Framework. For more information see the Barracuda Privacy Policy.
3. Who else has access to your information?
Your information will be shared with the European Commission and the Partners and any assessors and other individuals who may help run the Project. The legal basis for doing this is for the European Commission to pursue its legitimate interest of being able to work collaboratively with the consortium and any other organisations to operate and administer the Project.
For more information see the European Commission Privacy Policy.
We may disclose your personal information to law enforcement agencies if required by law (in which case our legal basis for doing this is for compliance with a legal obligation), or to protect or defend ourselves or others against illegal or harmful activities (in which case, our legal basis for doing this is the pursuit of these legitimate interests).
4. How long will we keep your information for?
General principle: We will only keep any personal information that you provide to us for as long as is necessary to fulfil the purpose for which you gave us the information and we will securely delete information when it is no longer needed for that purpose, as explained in more detail below.
Events: If you attend one of our events, we will use your information for the purpose of the event and will only contact you for any other purpose if you have said we can. We will retain your personal information collected for the purpose of the event for 3 years for evaluation and business development purposes to help us understand our audience and reach, and to improve future events.
Consent: We keep records of consent, and any withdrawal of consent, on our files for as long as your personal information is being used in-line with that consent and for a period of 6 years after the consent is withdrawn (unless otherwise requested by you).
Posts and communications: any information that you post on the website shall only be kept and displayed for such time as the subject matter to which is relates is publicly displayed.
Processing for statistical analysis purposes: This type of processing will only be undertaken whilst we retain your personal information in line with the principles explained above.
5. Marketing
We use third-party providers Mailchimp and Salesforce to deliver our e-newsletters. We gather statistics around email opening and clicks using industry-standard technologies to help us monitor and improve our e-newsletter. Mailchimp and Salesforce use servers hosted in the USA and comply with the EU-U.S. Privacy Shield. If you want to know more about how your information will be stored and processed see the Salesforce and Mailchimp Privacy Policies. If we use any other providers we will let you know when you subscribe.
If you no longer want to receive marketing communications about the Project, you can unsubscribe from the mailing list at any time by clicking the unsubscribe link at the bottom of emails or by contacting us using the details at the bottom of this page, including your name and email address.
6. Security
We take steps to protect your personal information and follow procedures designed to minimise unauthorised access or disclosure of your information. If you have a password for an account on this site, please keep this safe and don’t share it with anyone else. You are responsible for all activity on your account and must contact us immediately if you are aware of any unauthorised use of your password or other security breach.
7. Contacting us, exercising your rights and complaints
You are legally entitled to know what personal information we hold about you and how that information is processed, which includes the right to:
- know what information we hold about you;
- ask us to correct any mistakes in your information which we hold;
- ask us to delete your personal information;
- ask us to stop using your personal information or restrict how we can use it, for example if you feel it is inaccurate or no longer needs to be used by us;
- to object to us using of your personal information
- to object to any automated decision making that we may do using your personal information.
If you wish to know what information we hold about you, or wish to exercise any of your other rights as detailed above, or have any complaint about how we are using your personal information, then please email us using the details at the bottom of this page and provide enough information to identify yourself (name and address or any registration details).
If our information is incorrect or out of date, please provide us with information to update it. If you want us to delete, restrict or stop using any information we hold about you, please explain the reasons why you would like this to happen. If you are unhappy with how we are using your information, again please explain to us the reasons and we will investigate the matter.
You can also contact us if you have a complaint about this policy.
If you are unhappy with how any data rights request or complaint has dealt with you have the right to complain to the Information Commissioner at Wycliff House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom or the following link https://ico.org.uk/concerns or helpline: +44 303 123 1113.
8. Changes to the privacy policy
We may change this privacy policy from time to time. We will notify you of any changes that relate to information we already hold about you, where practicable. You should check this policy occasionally to ensure you are aware of the most recent version that will apply each time you access this website.
9. Contacting us
Nesta, a company limited by guarantee registered in England and Wales with company number 7706036 and charity number 1144091. Nesta is also registered as a charity in Scotland number SC042833.
Registered office: 58 Victoria Embankment, London, EC4Y 0DS, United Kingdom.
Email: info@nesta.org.uk