Privacy Policy

In this privacy policy, references to “MTC”, “we”, “us” or “our” are to The Manufacturing Technology Centre Limited and each of its subsidiaries, including MTC Operations Limited and The Manufacturing Technology Centre Training Limited.  

The Manufacturing Technology Centre Limited is ultimately responsible for how we use and look after your personal data and is responsible for this website and this policy.

MTC respects your privacy and the purpose of this policy is to tell you how we use your data, how we look after your data, what your rights are in relation to your data and how the law protects you.

The data we collect about you

Where this policy refers to your data, it means your personal data, which is any information that relates to you and from which you can be directly or indirectly identified.  It does not include any anonymous data.  “Using” means collecting, storing, using, sharing and doing anything with your data.

The data we use in relation to you may include the following types:

• Identity Data including your name or other identifier, title, date of birth, gender and job title
• Profile Data including interests, preferences, requirements or opinions you have shared with us, for example as feedback on our services or in response to a survey you have participated in
• Contact Data including your postal address, email address and telephone number
• Technical Data including information we collect about the device you use to access or website (such as your IP address, browser type and version, location and time zone and operating system and platform) and information about how you use our website
• Marketing data including any preferences you have indicated for receiving marketing information from us and third parties we work with and your communications preferences

How we obtain your personal data

We use different methods to collect your data including:

• Your interactions with us.  You may give us your personal data by responding to surveys, filling in forms (including forms to subscribe to our publications), corresponding with us or applying to work for us.
• Your visits to our website.  When you visit our website we will automatically collect certain information about the device you are using and how you use our website.  We do this using cookies.  For more information see our Cookies Policy [make link].
• Third parties or publicly available sources.  We may obtain your personal data from sources such as suppliers of marketing databases.  In addition, if we are working with or for your employer, your employer may provide us with your identity and contact details so that we can interact with you.
• Your visits to our premises.  We use CCTV at our premises and may obtain visual images of you during your visits.  CCTV is located in public areas of our premises such as the car park and reception areas.

Use of personal data

We will only use your data where the law allows us to do so and we must have a legal basis for each use of your data.  In most cases we rely on one of the following bases:

Legitimate Interests: we may use your data where it is necessary to conduct our legitimate business interests and those interests are not overridden by any adverse impact on you (unless we have your consent to use the data)

Legal obligations: we may use your data where it is necessary for compliance with a legal obligation.  Where you are an employee of MTC, this includes use of your data to meet our obligations as your employer.

Consent: we may rely on your consent where we have obtained your agreement to use data for a particular purpose, for instance if you opted in to receive marketing communications.  For most of our processing activities, we do not rely on consent.

Contract: we may use your data to fulfil a contract with you

In the table below, we have set out a description of the ways we plan to use different types of your data and which legal basis we rely on.  

We will not rely on the legitimate interests for processing your data if we think that you might find it intrusive or detrimental.  We will also aim in all cases to minimise the data we process.

Opting out of Marketing

You can ask us to stop sending you marketing communications at any time by emailing us at marketinggdpr@the-mtc.org or following the instructions on the footer of our emails to you.

Cookies

For more information about how we use cookies and how to change your preferences, please see our Cookies Policy.

Sharing your personal data

We may share your data, where necessary, with the following third parties:

• Third parties who provide services to us (for example in relation to hosting and managing this website or our CRM system).  
• Our partners in relation to projects you or your organisation participate in
• Third parties to whom we sell, transfer, or merge any of our business or assets

We will require anyone with whom we share your data to treat in accordance with the law.  We do not allow our service providers to use your data for anything other than providing the relevant service.

International Transfers

Most of the third parties we share your data with will be in the UK but occasionally we may transfer your data to third parties outside the UK.  Where this happens, we ensure that your data is adequately protected.  For example, we will check that the country to which the data will be exported has been approved by the UK as one that provides adequate protection for data or we will impose contractual obligations on the recipient that have been approved for use in the UK as providing adequate protection.

Data Security and Retention

We have put in place appropriate security measures to prevent your data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. 

We have put in place procedures to deal with any suspected data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We will only retain your data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for your data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we use your data, whether we can achieve the intended purpose through other means, and any applicable legal requirements.

In some circumstances, you can ask us to delete your data (see Your Rights).

Your Rights

You have the following rights:

• Right of access (commonly known as the right to make a “subject access request”).  This entitles you to a copy of the personal data we hold about you and to check that we are processing them lawfully.
• Correction.  This enables you to have incomplete or inaccurate data corrected.
• Objection.  If you object to us relying on a legitimate interest for processing your data, we must stop using it unless we have a compelling interest that overrides your rights
• Erasure (commonly known as the “right to be forgotten”).  You can ask us to delete your data if any of the following applies:
  • We are relying on consent as our lawful basis and you withdraw consent
  • We no longer need your data for the original purpose
  • Your object to us using your data on the legitimate interests basis and we do not have an overriding legitimate interest 
  • The processing is for direct marketing and you have opted out
  • We are not using your data in a lawful manner
• Withdrawal of consent. If we have been relying on consent to use your data and you withdraw consent, we must stop using your data.
• Restriction. This entitles you to ask us to suspend our use of your data as an alternative to erasing it, whilst its accuracy is being determine, whilst your objection to our legitimate interests is being assessed or where we are not entitled to continue holding your data but you do not want us to erase it.

Fees and timing.  In most cases you will not have to pay a fee to exercise your rights and we will respond within one month.  This time limit will be paused while you provide any further information we reasonably require, such as information to confirm your identity.  We will keep you updated on the progress of your request.  

Your right to complain

We are committed to protecting your data but we know we can always improve and if you have any concerns, we hope you will raise them with us by contacting our data protection officer at dpo@the-mtc.org.  You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues. For more information on how to do this, visit www.ico.org.uk.

Candidates and employees

The information in this policy applies to data we process in relation to our employees and candidates applying for roles at MTC.  There is more information for candidates in our Candidate Privacy Notice and more information for employees in our Employee Privacy Notice which employees can access on the intranet site and candidates can request from the hiring manager.