Some of the mailing lists that you may sign up to are for Programmes operated by Nesta through its wholly owned subsidiary Nesta Enterprises Limited, (see below for their details) and will manage the mailing list subscription for that that Programme. Please see the Programme or Nesta website for more information.

Sign-up details: When you sign up to receive one of our newsletters we will ask you for personal information such as your name, email address, occupation and other contact details such as a contact phone number.

Sign-up details: If you sign-up for us to send you newsletters, publications and other information about Nesta, our partners and activities, we will use your personal information to send these to you. Our legal basis for doing this is your consent. You have the right to withdraw this consent at any time, as explained in the “Marketing” section below.

Third party processors: As is indicated below, we may use third party platforms and processors to deliver newsletters. In using these third parties we are pursuing our legitimate interest to use third party technology to achieve greater efficiency within our organisation. To balance our interests against yours, we have taken steps to ensure these third parties maintain appropriate technical and organisational measures to keep your personal information secure.

Social media interaction: We use a third-party providers to check whether the people whose contact email addresses we have collected have registered with those email accounts on social media platforms, such as Facebook or Twitter. We currently use 89up Limited, who provide us with statistical information about how many of our contacts are on Facebook. We do not receive any information as to who is on Facebook. 89up Limited also provides us with the Twitter handle for our contacts who are on Twitter. We use this information to follow our contacts on Twitter. In pursuing these activities, we are pursuing our legitimate interests to understand more about our contacts’ use of social media and this will then inform our marketing strategy. We have an appropriate contract in place with to ensure the security and protection of the data.

For all kinds of information collected: Please make sure that any personal details you provide are accurate and up to date, and let us know about any changes. Please get consent first before giving us anyone else’s information.

The nature of Nesta’s work means we often work in partnership with other organisations, however, we will not share your information with any other organisation unless we have your permission first, unless we have a legitimate interest to do so (see section 5 below).

We may also use your information to carry out analysis and research to improve our publications, events and activities, and to prevent and detect fraud and abuse, and to protect other users.

We may retain your information for our own legitimate business interests for statistical analysis purposes, in order to review, develop and improve our business activities. In this situation, we will only keep any personal information if it is necessary to do so, and will always put in place appropriate safeguards, including where possible anonymising or minimising the data retained.

We use a third party to provide cloud based data security, storage and disaster recovery service to backup data that we hold, we currently use Barracuda Networks lncorporated. Barracuda are a company based in the U.S. and store your Data outside the EEA. Barracuda complies with the EU-U.S. Privacy Shield Framework. See the Barracuda Privacy Policy for more information.

We will only keep any personal information that you provide to us for as long as is necessary and for as long as you wish to be on the mailing lists you have signed up for, and we will securely delete information when it is no longer needed for that purpose.

We keep records of consent, and any withdrawal of consent, on our files for as long as your personal information is being used in-line with that consent and for a period of 6 years after the consent is withdrawn (unless otherwise requested by you).

If you sign up to any of our mailing lists we will use your details to keep you informed about latest news, blogs, programme updates, research, publications, event details, jobs and funding opportunities for your chosen area of interest, and may request feedback, including our annual audience survey.

We use third party providers to deliver our e-newsletters. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. We currently use Mailchimp, Salesforce and Cvent whose servers are hosted in the USA, but do comply with the EU-U.S. Privacy Shield. If you want to know more about how your information will be stored and processed see the privacy policies for SalesForce, MailChimp and CVent.

If you no longer want to receive marketing communications from us, you can unsubscribe from our mailing list at any time by please clicking the unsubscribe link, at the bottom of our emails or by emailing [email protected] detailing your name and email address. If you are given the opportunity to update your contact preferences in any email from us, this will link to a form hosted by Surveygizmo. If this function is not made available, please email us at the above address with your preference updates.

We use third party remarketing services to tailor advertising to you based upon your browsing history on this website, for more information see “Cookies” below.

We may share your information with our partners and companies who may work with us to administer or manage the mailing list you may have subscribed to. Our legal basis for doing this is to pursue our legitimate interest of being able to work collaboratively with other organisations to operate and administer the event, programme or activity to which the mailing list may apply. Some of these organisations may process your information in countries outside the EEA, such as the United States, where data protection laws are not the same as in the EEA. Rest assured that we will always ensure any transfer is subject to appropriate security measures to safeguard your personal data. Where transfers are necessary to countries where data protection has not yet been declared to be adequate, we rely on GDPR Article 49(1)(c) for these transfers. Full details of these organisations where appropriate, confirmation of where they would process your personal information, and details of the steps we have taken to safeguard your personal data will be published on the Programme or Nesta website when known.

We may share your information within the Nesta group of companies, for the purposes of managing our subscriptions. Nesta currently provides all support and services for its subsidiary companies, therefore, our legal basis for sharing your information is to pursue the legitimate interests of shared resources and management reporting between the companies within the group. Our group companies will not process your data outside the EEA unless we notify you otherwise.

We may disclose your personal information to law enforcement agencies if required by law (in which case our legal basis for doing this is for compliance with a legal obligation), or to protect or defend ourselves or others against illegal or harmful activities (in which case, our legal basis for doing this is the pursuit of these legitimate interests).

We take steps to protect your personal information and follow procedures designed to minimise unauthorised access or disclosure of your information.

You are legally entitled to know what personal information we hold about you and how that information is processed, which includes the right to:

• know what information we hold about you
• ask us to correct any mistakes in your information which we hold
• ask us to delete your personal information
• ask us to stop using your personal information or restrict how we can use it, for example if you feel it is inaccurate or no longer needs to be used by Nesta
• to object to us using of your personal information
• to object to any automated decision making that we may do using your personal information

If you wish to know what information we hold about you, or wish to exercise any of your other rights as detailed above, or have any complaint about how we are using your personal information, then please email us using [email protected] or write to us at 58 Victoria Embankment London EC4Y 0DS UK and provide enough information to identify yourself (e.g. name and address or any registration details).

If our information is incorrect or out of date, please provide us with information to update it. If you want us to delete, restrict or stop using any information we hold about you, please explain the reasons why you are asking this. If you are unhappy with how we are using your information, again please explain to us the reasons and we will investigate the matter.

You can also write to the same address if you have a complaint about this policy.

If you are unhappy with how any data rights request or complaint has dealt with you have the right to complain to the Information Commissioner:

• On the ICO website;
• By mail at Wycliff House, Water Lane, Wilmslow, Cheshire SK9 5AF, or
• By calling the helpline on 0303 123 1113.

Nesta, a company limited by guarantee registered in England and Wales with company number 7706036 and charity number 1144091. Registered as a charity in Scotland number SC042833.

Nesta Enterprises Limited a company limited by guarantee and registered in England and Wales with company number 08580327

Both with a Registered office: 58 Victoria Embankment, London, EC4Y 0DS

Email: [email protected]