Privacy Notice for Individuals competing in the QuEST UK Ingenium 2020
This Privacy Notice sets out details of the personal data we, QuEST Global Engineering Ltd UK, will collect and transfer if you wish to compete in the QuEST UK Ingenium 2020.
We are required by data protection law to give you the information in this Privacy Notice. It is important that you read the Privacy Notice carefully.
Who is the controller?
QuEST Global Engineering Service Ltd is the “controller” for the purposes of data protection law. This means that we are responsible for deciding how we hold and use personal data about you.
Our Data Protection Representative is Melanie Horner and can be contacted at email@example.com. She acts as your first point of contact if you have any questions or concerns about data protection.
What type of personal data will we collect during this process?
We will collect personal data in order to manage and administer the competition, and correspond with you regarding this competition.
The data we collect includes name, title, email address, university/college and course details, contact number, project details.
Why will we collect your personal data and on what legal grounds?
QuEST will rely on one or more of the following legal grounds to collect and hold your personal data:
It is necessary for the performance of a contract – the processing is necessary for the purpose of managing and administering the competition.
Legitimate interests – the processing is necessary to allow QuEST to administer the competition and to ensure that the competition is run fairly and in accordance with our rules and to contact the competition participants.
Who we will share your data with during this process?
QuEST will share your data with QuEST staff involved in administering this competition.
QuEST will not share your data with anyone outside QuEST without asking you first.
Winners and runner up details may be published online.
Transferring personal data outside the EEA
We may transfer your personal data to the following country outside the EEA: India.
QuEST is a global company and your data will be shared with global teams in India involved in administering this online tool and in coordinating arrangements if you are invited to India as a result of winning this competition.
An overseas transfer of personal data takes place when the data is transmitted or sent to, viewed, accessed or otherwise used in, a different country. Data protection law restricts transfers of personal data to countries outside of the European Economic Area (EEA) because the law in those countries might not provide the same level of protection to personal data as the law in the EEA. To ensure that the level of protection afforded to personal data is not compromised, therefore, we are only able to transfer your personal data outside the EEA if certain conditions are met, as explained below.
We have put in place the following appropriate measure to ensure that any personal data transferred to India is treated in a way that is consistent with and which respects the EEA and UK laws on data protection and receives an adequate level of protection: We use EU standard model clauses to contractually require QuEST India to hold data in line with EU laws.
How long will we keep your personal data?
Entrant information will be kept on file for a maximum of 2 years for the purpose of recording entrant’s participation in the Ingenium. QuEST will securely delete entrant information after this point. If you would like to withdraw or amend your details please contact XXXX
You have a number of legal rights relating to your personal data, which are outlined here:
The right to make a subject access request.
This enables you to receive certain information about how we use your personal data, as well as to receive a copy of it and to check that we are lawfully processing it.
The right to request that we correct incomplete or inaccurate
personal data that we hold about you.
The right to request that we delete or remove
personal data that we hold about you where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
The right to object to our processing
your personal data where we are relying on our legitimate interest (or those of a third party), where we cannot show a compelling reason to continue the processing
The right to request that we restrict our processing
of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
The right to request that we transfer
your personal data to you or to another party, in a structured format. This right applies in respect of data that you have provided where our legal ground for using the data is that it is necessary for the performance of a contract or that you have consented to us using it (this is known as the right to “data portability”).
If you would like to exercise any of the above rights, please contact Melanie Horner, Data Protection Representative on firstname.lastname@example.org. Note that these rights are not absolute and in some circumstances we may be entitled to refuse some or all of your request.
You can raise a concern with the Information Commissioner Office.