Who we are
Our website address is: https://ndagrouppensionreform.co.uk.
Introduction
The Company is committed to protecting the privacy and security of your personal information. This privacy notice describes how we collect and use personal information about you during and after your relationship with us in accordance with the General Data Protection Regulation (GDPR) and Data Protection Act 2018 (DPA).
This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained within this privacy notice.
This notice applies persons accessing our Pension Reform website. It does not form part of any contract of employment or other contract to provide services. We may update this notice at any time.
It is important that you read this notice, together with any other privacy notice we may provide when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.
Our Contact Details
Simon Tucker – Data Protection Officer
Nuclear Decommissioning Authority
Herdus House
Westlakes Science & Technology Park
Moor Row
Cumbria
CA24 3HU
United Kingdom
Email: [email protected]
What type of information we have
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymised data).
Most of the information you share with us will be anonymous, however, we may collect, store, and use the following categories of personal information about you:
- Personal contact details such as name, title, addresses, telephone numbers and personal email addresses;
- Information about your use of our information and communications systems;
Please note the above list is not exhaustive.
How did we get the information and why do we have it?
We collect personal information about you directly from your interactions with us in person or from our website. We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances, known as the ‘lawful basis for processing’:
- Where it is necessary for legitimate interests pursued by us or a third party and your interests and fundamental rights do not override those interests. In accordance with best practice a Legitimate Interests Assessment (LIA) will be conducted when this lawful basis is used.
We may also use your personal information in the following situations, which are likely to be rare:
- To protect your interests (or someone else’s interests);
- Where we have your consent.
Please see the ‘Your data protection rights’ section for more information on withdrawing your consent.
What we do with the information
The situations in which we may process your personal information are listed below:
- Communicating with you
- Complying with legal, statutory and regulatory obligations including reporting to government;
We give you the opportunity to elect not to receive materials from us. If you sign up for an electronic newsletter or e-mail list, each message will include instructions on how to “unsubscribe” from that list.
If you wish to know more about which legal basis NDA uses to process your personal data then please contact the Data Protection Officer
Change of purpose
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
How we store your information
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality. Details of these measures may be obtained from the Data Protection Officer.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
We will only hold onto your personal information for as long as necessary to fulfil the purposes we collected it for. All records are retained and securely destroyed in accordance with our records retention schedule. Details of retention periods for different aspects of your personal data are available upon request. However, your information may be held beyond the specified retention periods where there is the potential for it to be required for legal purposes.
Cookies
Our website uses cookies which are small text files placed on your browser which ‘remember’ when a device accesses our site – they allow us to manage our site more effectively, to determine the number of unique devices that have visited our site and to provide you with a better service. You will always be asked for permission before the cookies are placed on your device; if you refuse this permission no cookies will be placed on our device, however if you do this some of the functionality of the website may be reduced. No information from cookies is shared with third parties.
Your data protection rights
Data protection legislation strengthens the rights of individuals and includes:
- The right to be informed (which this notice fulfils);
- The right of access;
- The right to rectification;
- The right to erasure;
- The right to restrict processing;
- The right to data portability;
- The right to object;
- Rights in relation to automated decision making and profiling.
For a detailed explanation of these rights, and the specific circumstances in which they apply, please visit the Information Commissioners Office (ICO) website.
If you wish to exercise any of your rights, including where you are seeking a copy of your own personal information, please contact the DPO via [email protected].
How to complain
If you wish to make a complaint to NDA about the way in which we have processed your personal information please contact the DPO using the email address above.
If you remain dissatisfied with the response received, you have the right to lodge a complaint to the ICO. The ICO is the UK’s independent body set up to uphold information rights, and they can investigate and adjudicate on any data protection related concerns you raise with them. They can be contacted at:
Information Commissioner’s Office
Wycliffe House, Water Lane,
Wilmslow,
Cheshire,
SK9 5AF
0303 123 1113
ico.org.uk