The NERC EDS Environmental Information Data Centre (EIDC) is hosted at the UK Centre for Ecology & Hydrology (UKCEH). This privacy notice for EIDC (together with UKCEH terms of use) is part of a wider privacy composite notice which outlines all the data processed regularly by UKCEH.

This privacy notice tells you what to expect when the EIDC collects personal information from people who are in direct correspondence with us or who are visiting and/or using tools on the following websites:

It sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

By visiting http://eidc.ac.uk or https://catalogue.ceh.ac.uk/eidc/documents you are accepting and consenting to the practices described in this notice and related policies. This privacy notice will be revised as required and you are encouraged to revisit the privacy notice regularly to read the latest version.

1. The name and contact details of our organisation

The NERC Environmental Information Data Centre is hosted at the UK Centre for Ecology & Hydrology (UKCEH).

UK Centre for Ecology & Hydrology
Maclean Building, Benson Lane
Crowmarsh Gifford
Wallingford
Oxfordshire
OX10 8BB
UK

Our data protection representative is
Quentin Tucker Email: cehdataprotection@ceh.ac.uk

2. Personal data

This section of the privacy notice provides information on:

the purpose of the data processing;
the lawful basis for the processing;
further information where the lawful basis is legitimate interests for the processing;
the categories of personal data obtained (if the personal data is not obtained from the individual it relates to).

Visitors to our website:

The relevant section of our privacy notice will depend on the purpose of your visit to our website.

We use the following lawful grounds for processing personal information to support our work when we carry out processing in pursuit of our purposes laid out in Article 93 of the Higher Education and Research Act 2017, in the most part, our lawful basis for processing your personal information falls under:

Public task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law, but we also make use of: contractual, legitimate and consent based processing.

Contributors to NERC science in the public interest - EIDC data centre functions and personal data:

Purpose of the processing: Your personal data are processed as part of long-term data archiving services for scientific research and development undertaken for NERC and hosted at UKCEH.

The lawful basis for the processing personal data: EIDC is providing long-term data archive services for scientific research and development in the public interest.

For more information on our use of personal data see the EIDC Policy on Retention and Use of Personal Data.

In addition to the personal data provided by you in some instances there may be some categories of personal data that are not obtained from you personally this may include information received such as:

the Internet protocol (IP) address used to connect your computer to the Internet
your login information
browser type and version
time zone setting
browser plug-in types and versions
operating system
platform

Further information is available in our cookies policy

The recipients of the personal data:

NERC Environmental Information Data Centre staff
UKCEH Data Licensing Team
UKCEH Enquiries Team
NERC Grant Administration Team
Other NERC data centre grant support staff
DataCite (for personal data agreed with you to include in a Digital Object Identifier)
Data.gov.uk (for personal data agreed with you to include in a public data catalogue record)
Science and Technology Facilities Council
Jisc

3. The details of transfers of the personal data to any third countries or international organisations (if applicable)

Your information is processed in the UK and European Economic Area (EEA).

4. The retention periods for the personal data

Personal data retention is outlined in the EIDC Policy on Retention and Use of Personal Data

5. The rights available to individuals in respect of the processing

UK data protection laws provide the following rights for individuals:

The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling.

The lawful basis for EIDC processing personal data can also affect which rights are available to individuals. For example, some rights will not apply.

An individual always has the right to object to processing for the purposes of direct marketing, whatever lawful basis applies. The remaining rights are not always absolute, and there are other rights which may be affected in other ways. Further details on how the lawful basis for processing your data affect the rights available to you are outlined below:

Contract
Processing on the basis of contract, the individual's right to object and right not to be subject to a decision based solely on automated processing will not apply. However, the individual will have a right to data portability.

Public Task
Individuals' rights to erasure and data portability do not apply if processing on the basis of public task. However, individuals do have a right to object.

Please contact the EIDC (info@eidc.ac.uk).

6. The right to withdraw consent (if applicable)

Where any data processed using consent as the lawful basis you have the right to withdraw consent at any time.

7. The right to lodge a complaint with a supervisory authority

Initially please raise your concern with the EIDC (info@eidc.ac.uk).

Any continuing concerns you may have can be raised with UKCEH's data protection representative:

Quentin Tucker
Email: cehdataprotection@ceh.ac.uk

If the EIDC (UKCEH) has not resolved your information rights concern you can raise the matter with the Information Commissioner's Office via live chat or by phoning 0303 123 1113.

8. Provision of privacy information

There are a variety of ways in which EIDC provide privacy information including:

Providing individuals with privacy information at the time we collect their personal data from them.
If we obtain personal data from a source other than the individual it relates to, we provide them with privacy information.
Within a reasonable period of obtaining the personal data and no later than one month.
If we plan to communicate with the individual, at the latest, when the first communication takes place
If we plan to disclose the data to someone else, at the latest, when the data is disclosed.

9. How the EIDC provide privacy information

We provide the information in a way that is:

Concise
Transparent
Intelligible
Easily accessible
Uses clear and plain language.

10. Changes to the information

The EIDC regularly reviews and, where necessary, updates our privacy information.

If the EIDC plans to use personal data for a new purpose, we update our privacy information and communicate the changes to individuals before starting any new processing.

11. Register of processing activities

UKCEH undertakes an information audit to find out what personal data we hold and what we do with it.

UKCEH puts itself in the position of the people we're collecting information about.

UKCEH will be carrying out user testing to evaluate how effective our privacy information is.

12. Delivering Privacy Information

We provide our privacy information to individuals through our website and in documents relevant to our communication with you.

13. Affiliated Websites

The EIDC has no affiliated websites

14. Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our cookies policy.

15. Third party services

We may use third party services as a method to allow website metrics. These set cookies to help us accurately estimate the number of visitors to the website and volumes of usage. This allows us to ensure that the service is available when you want it and fast. See more details of our third party usage.

16. Links

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites and any services that may be accessible through them have their own privacy notices and that we do not accept any responsibility or liability for these policies or for any personal data that may be collected through these websites or services. Please check these policies before you submit any personal data to these websites or use these services.