Privacy Policy
PRIVACY NOTICE
This Privacy Notice is intended for website visitors, directors or staff of potential/actual member organisations. It is provided to provide you with the information you need to ensure that your rights and freedoms as a data subject are protected as required under the (EU) 2016/679 (‘General Data Protection Regulation’), which we refer to here as ‘the Regulation’.
Who we are
Sussex Innovation Centre Management Limited (‘SINC’) manages the Sussex and Croydon Innovation Centres and acts as the focus for encouraging and supporting technology and knowledge-based companies in Sussex and the South East. The company also provides business support services to assist in the commercialisation of research expertise at the University of Sussex and to encourage student entrepreneurship.
Our contact details are:
Sussex Innovation Centre Management Limited
The Sussex Innovation Centre
Science Park Square
Falmer
Brighton
BN1 9SB
+44 (0)1273 704400
Why we process your data
When we refer to ‘personal information’, ‘information’ or ‘data’ this has the same meaning is the ‘personal data’ under the Regulation.
We will process your personal data because we believe that you or your organisation may be interested in our membership and support service, you have expressed an interest in our services or because your organisation is a member. Before accepting organisations as members we conduct due diligence with the aim of accepting membership applications from organisations that fall within our mission and will derive fair value from our available services.
To perform certain functions within our business it may be necessary for us to share your information with other recipients who support us in providing you or your organisation with our services. These recipients are typically cloud-based applications used in the course of providing services to our members and prospective members. We keep this sharing to a minimum and only where necessary.
Transferring personal data outside the EEA
For us to perform the normal functions of our company and in providing you with goods and services, your information will be transferred outside the EEA. The international recipients are cloud-based software providers. The organisations receiving your data are based in the United States and are committed to protecting your data to the requirements of the Regulation by complying with the US-EU Privacy Shield.
Your data protection rights
You have the right to contact us and request access to your information, have it rectified or erased, restrict the processing of your data or to object its processing, as well as the right to data portability. If you have an issue regarding the processing of your data then we hope that we can address any concerns you may have by contacting us at info@sinc.co.uk However you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk
Your right to withdraw consent
Where we approached you for consent to process your data, you can withdraw that consent at any time.
Receiving marketing from us
From time-to-time we may reach out to you by phone, email or post to provide you with information about our services and products. If that’s not something you want then let us know at info@sinc.co.uk
Obligations to provide us with certain information
When your organisation chooses to buy services from us we will require certain information to undertake the relevant financial transaction and to provide your organisation with the chosen services. Providing certain personal data in this situation is a contractual requirement. If you do not provide the required information then you will not be able to pay for those services or products and neither will you nor your organisation be able to receive them from us.
Online profiling
In line with the practice of many websites, we use tools to understand where our site visitors have come from, their characteristics and their online behaviour by virtue of you accessing our site. This helps us to determine how best to offer services and products to website visitors and clients.
How we use personal data
Where we process your personal information for legitimate interests this means that we assessed that we have a legitimate interest in the processing for the stated purpose, that the processing is necessary for this purpose and we have not infringed upon your interests, rights or freedoms. Legitimate interest applies on the following table as both you and SINC have a shared objective in ensuring that your organisation is a member of SINC only if that membership is suitable both for your organisation and SINC.
| Purpose | Personal data processed | Use of data | Lawful basis for processing | Data sharing | Retention period |
| To receive your enquiry through our website. | IP address, geographical information inferred from your IP address, browser information, | Allows general analysis of where interest in our services is coming from in order to tailor the online services better. | Legitimate interest. | Internally within marketing team. Externally through the web form provider that collects this information. | 6 months. |
| To process your organisation’s membership application. | Name, contact details, home address, any relationship with the University of Sussex, signature and meeting notes. | Assess the eligibility of the organisation you represent in becoming a SINC member. | Legitimate interest. | Internally within the management team of SINC. Externally through the use of cloud-based software vendors. | 6 months. |
| To deliver membership and business support services. | Name, contact details, home address. | Provide you and your organisation with access to the facilities, services and community information that we are committed to providing under contract. | Contractual obligations. | Internally with the Facilities, Business Support and Finance teams. Externally with our IT Administration provider and through the use of cloud-based software vendors. | 5 years (retention of contract). |
| To invoice your organisation for the services provided and record those transactions. | Name, contact details. | Prepare and send an invoice for services provided. Follow-up on payments due. | Legitimate interest. | Internally with the Finance teams. Externally through the use of cloud-based software vendors. | 1 year. |
| Retain invoice and payment records for external audit, HMRC discovery or both. | Legal obligation. | Internally with the Finance teams. Externally through the use of cloud-based software vendors, external auditors and HMRC. | 7 years |
Your rights explained
| Rights | Detail |
| Marketing – You have a right
to object to direct marketing. |
You have a right to object to processing of your personal information for direct marketing purposes. |
| Access – You have a right to request a copy of the personal information we hold about you. | To exercise this right please contact us at:
Sussex Innovation Centre Management Limited The Sussex Innovation Centre Science Park Square Falmer Brighton BN1 9SB +44 (0)1273 704400 Please note that will be required to confirm your identity when making such a request. We may also require further information from you to locate the information that you are requesting. |
| Rectification – You have a right to rectification of inaccurate personal information and to update incomplete personal information. | If you believe that any of the information that we hold about you is inaccurate, you have a right to request that we restrict the processing of that information and to rectify the inaccurate personal information.
Please note that if you request us to restrict processing your information, we may have to suspend the provision of services, products or both to you. |
| Erasure – You have a right to request that we delete your personal information. | You may request that we delete your personal information if you believe that:
|
| Restriction – You have a right to request us to restrict the processing of your personal information. | You may request us to restrict processing your personal information if you believe that:
Please note that if you request us to restrict the processing your information, we may have to suspend the provision of services, products or both to you. |
| Objection – You have a right to object to the processing of your personal information. | You have a right to object to us processing your personal information, including the profiling of your information (and to request us to restrict processing). We may override this request where:
Please note that if you object to us processing your information, we may have to restrict or cease processing or delete your personal information altogether, we may have to suspend the provision of services, products or both to you. |
| Portability – You have a right to data portability. | You may request us to transfer to a third-party your data in a machine-readable format where the:
|
| Withdraw consent – You have a right to withdraw your consent. | Where we rely on your consent to process your personal information for a particular purpose, you have a right to withdraw your consent at any time for that purpose. |
| Lodge complaints – You have a right to lodge a complaint with the regulator. | If you have an issue concerning the processing of your information then please contact us at info@sinc.co.uk
We hope that we can address any concerns you may have, but you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk |
What to do next…
If you’ve seen enough and think your business might benefit from our facilities and services then get in touch and we can site and discuss your options. Call +44 (0) 1273 704400 or complete our enquiry form.