Privacy notice for the Centre for Enterprise

Privacy notice for the Centre for Enterprise

This privacy notice explains who we are, how and why we collect and use personal information about you, what personal data is collected and held about you to progress and respond to your enquiry accordingly, our purposes and lawful bases for processing, who we share your personal data with, relevant retention periods, and how you can exercise your privacy rights.

This notice provides information that is in addition to information contained in the University’s website users privacy policy. Please do read this notice to understand our practices and if you have any questions, please contact us using the contact details provided below.

Who we are

Throughout this notice, “University”, “we”, “our” and “us” refer to the Manchester Metropolitan University, an exempt charity under Schedule 2 to the Charities Act 1993 (amended by the Charities Act 2011). The University is the Data Controller in respect of the personal data you provide as part of the Centre for Enterprise activity. 

The University is registered as a Data Controller with the Information Commissioner’s Office (ICO). We manage personal data in accordance with the General Data Protection Regulation (GDPR) and the University’s Data Protection Policy.

The personal data we process

We collect and process certain data about you, (including information of a sensitive nature). This includes :

  • personal contact details such as your name, title, address, telephone numbers, email address, information from due diligence check, for example directorships and other relevant business interests
  • date of birth and gender (where applicable, for example, start-up support)
  • evidence of your nationality and eligibility to work/start-up business in the UK (where applicable for example start-up support)
  • information about the requested business support needs and potential provision and assistance suggested to/agreed with you
  • correspondence with or about you, for example, letters to you about the start-up/business support requested/ provided about/through our projects
  • your national insurance number (where applicable)
  • information about your use of our information and communications systems
  • photographs for use in marketing
  • whether you would like to subscribe to our newsletter

The purposes of the processing

Use of personal data

Your information will enable us to:

  • operate recruitment and promotion of business on the programme
  • determine the support, distribution and progress of beneficiaries of its projects and through its delivery partners
  • maintain accurate and up-to-date project beneficiary records and contact details
  • operate and keep a record of support provided through and funded by its project
  • provide referrals where applicable and appropriate to other business support agencies we believe could help you and your business
  • maintain and promote equality in the workplace of business on the programme
  • undertake business management and planning, including accounting and auditing
  • maintain contact with you to ascertain the impact and results of the support provided
  • obtain feedback and conduct evaluations to enable the development and improvement of our projects (current and new)
  • ensure network and information security and compliance with information and communication policies

Lawful bases

We rely upon the following lawful bases to use your personal information for these purposes:

  • UK GDPR, Article 6, (1) b – necessary for the performance of a contract or prior to entering into a contract UK GDPR, Article 6, (1) f - Legitimate interests and– all other cited purposes.
  • UK GDPR, Article 6 (1) c – Legal obligations – information relating to maintenance and promotion of equality in the workplace.

If you contact us, we may also keep a record of that correspondence.

The recipients or categories of recipients of the personal data

We may disclose personal data about you to the following third parties:

  • the Manchester Metropolitan Alumni team (if relevant) – to record your involvement with Manchester Met
  • relevant departments within the Manchester Metropolitan University
  • programme funders such as Innovate UK, Greater Manchester Combined Authority
  • project partners such as University of Manchester, University of Salford, University of Bolton, Lancaster University
  • delivery partner or workshop hosts

The right to withdraw consent or opt out

If we have collected and process your personal information with your consent or promotional purposes using legitimate interests, then you can withdraw your consent or opt out at any time. Opting out will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. You can opt out by writing to the Centre for Enterprise via cfegrowth@mmu.ac.uk   and in the e-mail subject state: Withdrawal of Consent.

Data retention

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, contractual or reporting requirements.

Your personal data will be stored throughout your involvement with the Centre for Enterprise, and for a period afterwards: due to funding requirements of individual programmes. For more information on this, please visit the programme specific privacy policies.

Please see:

Your rights in respect of the processing

The GDPR provides data subjects with the following data subject rights:

  • the right to be informed – this privacy notice assists with fulfilling these obligations
  • the right of access
  • the right to rectification
  • the right to erasure
  • the right to restrict processing
  • the right to data portability
  • the right to object

Please note, that these rights apply in certain circumstances, for example according to the lawful basis utilised by the University. The right of access to personal information held about you exists in order to be aware of, and verify, the lawfulness of the processing. Please use the contact information below to exercise these rights.

Contacting us

For questions or concerns about this privacy notice, or our use of your personal information, please contact enterprisemarketing@mmu.ac.uk in the first instance.

Our Data Protection Officer can also be contacted using dataprotection@mmu.ac.uk, by calling 0161 247 3884 or in writing to: Data Protection Officer, Legal Services, All Saints Building, Manchester Metropolitan University, Manchester, M15 6BH.

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) as the supervisory authority in respect of the processing of your personal data. We would encourage you to expend our internal complaints procedure through our initial contact and the University Data Protection Officer, prior to contacting the ICO. Please contact casework@ico.org.uk or telephone 0303 123 1113.

Go to further contact information for the ICO.

Updates to this privacy notice

We may update this privacy notice from time to time in response to changing legal, technical or business developments. When we update our privacy notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.