NIRO manage the content of the nirab.org.uk website. NIRO is an independent, arm-length, part of the National Nuclear Laboratory Limited (“we”, “us” and “our”). We are committed to protecting and respecting your privacy.
This Website Privacy Notice (together with our Terms of Website Use and Acceptable Use Policy and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
For the purpose of the Data Protection Act 1998 (“the Act”), the data controller is National Nuclear Laboratory Limited.
Information we may collect from you
We may collect and process the following data about you:
Details of your visits to the Website including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own purposes or otherwise and the resources that you access.
If you contact us, we may keep a record of that correspondence including your name, phone number, email address and organisation (where provided).
We may also ask you for information when you report a problem with the Website.
We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
IP addresses and cookies
Where we store your personal data
Website hosting facilities are provided by our supplier whose data centres are based in the UK. We do not transfer your personal data outside the UK.
We require our supplier to hold Cyber Essentials, a government-backed certification scheme which covers the essential actions businesses should take to protect themselves from cyberattacks.
Uses made of the information and lawful basis
We use information held about you in the following ways:
To ensure that content from the Website is presented in the most effective manner for you and for your computer.
To provide you with information or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
To carry out our obligations arising from any contracts entered into between you and us.
To allow you to participate in interactive features of the Website, when you choose to do so.
To notify you about changes to the Website.
The lawful basis we rely on to process your personal data is either Article 6(1)(a) of the GDPR, for example when we require your consent for the optional cookies we use, or Article 6(1)(f) which allows us to process personal data when it’s necessary for our legitimate interests. For example, to promote NIRAB’s work.
Disclosure of your information
We may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 736 of the UK Companies Act 1985.
We may disclose your personal information to third parties:
In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
If National Nuclear Laboratory Limited or substantially all of its assets are acquired by a third party, in which case personal data held by it will be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms of Website Use and Acceptable Use Policy and other agreements; or to protect the rights, property, or safety of National Nuclear Laboratory Limited, our customers, or others.
You have the right to ask us not to process your personal data for marketing purposes. We will inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we may use to collect your data. You can also exercise the right at any time by contacting our Data Protection officer via email@example.com or by using the Contact Us part of the Website.
The Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Access to your information
The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act by contacting our Data Protection Officer via firstname.lastname@example.org or by using the Contact Us part of the Website.
Changes to our Website Privacy Notice
Any changes we may make to our Website Privacy Notice in the future will be posted on this page and, where appropriate, notified to you by e-mail.
Questions, comments and requests regarding this Website Privacy Notice are welcomed and should be addressed to email@example.com or the Contact Us part of the Website.