Privacy & Cookies Policy

This website is operated by Nesta for the purposes of delivering the Manchester Prize for the Department for Science Innovation and Technology (“DSIT”). This privacy policy explains how Nesta uses personal information we collect via this site. We are committed to protecting your privacy and we take all reasonable precautions to safeguard personal information.  This privacy policy does not cover the links within this site linking to other websites.  We encourage you to read the privacy statements on the other websites you visit.

What kind of information do Nesta collect?

Sign-up details: If you register or sign up for events, newsletters or publications on the site, we will ask you for personal information such as your name, email address, occupation and other contact details such as a contact telephone number.

Other application details (e.g. for services or funding): If you enter the Manchester Prize, or register to attend one of our events, we may ask for more detailed information which we will use to process your application and you will be asked to agree to specific terms and conditions at the time of making the application.

Feedback: We may also ask you for feedback about Nesta or to complete surveys. As a responsible organisation, we are committed to attracting and funding a diverse group of applicants to the Manchester Prize and want to improve how we do this. In order to allow us to do this better, we would like to collect some diversity monitoring information from those organisations we work with. The information you share will be anonymised and used to help inform the evaluation of the Manchester Prize. For the avoidance of doubt, any survey relating to demographic information will be confidential and none of the questions are mandatory. The information collected as part of the survey will have no impact on your application. 

Online activity: We record your activity and preferences when visiting the sites through the use of cookies (see ‘Cookies’, below).

Your posts and communications: If you post content or communicate via the site, we will also store and monitor your content and communications.

 

What do we do with information we collect and what is our legal basis for this?

Third party processors: As is indicated below, we may use third party platforms and processors to deliver newsletters, process applications, event registrations, process payments, and process surveys. In using these third parties we are pursuing our legitimate interest to use third party technology to achieve greater efficiency within our organisation.  To balance our interests against yours, we have taken steps to ensure these third parties maintain appropriate technical and organisational measures to keep your personal information secure.

Sign-up details: If you sign-up for us to send you newsletters, publications and other information about Nesta, our partners and activities (see ‘Marketing’ section below), we will use your personal information to send these to you.  Our legal basis for doing this is your consent.  You have the right to withdraw this consent at any time, as explained in the ‘Marketing’ section below.

Events: If you register to attend one of our events we will use your personal information to process your application to attend the event, take payment, if any, for our administration and management of the event and to send you any updates or information regarding the event. Our legal basis for doing so is to fulfil the agreement with you for your attendance.

We use Eventbrite as registration systems for many of our events and their servers are based in the United States (U.S.) and may store and process your information outside the United Kingdom (UK).  See the Eventbrite privacy policy.

Other application details: We will use your personal information to process applications you make via the site. We undertake this processing because it is necessary to fully assess your application, and if successful, to take steps to enter into an agreement with you (this is our legal basis for the processing). If you enter the Manchester Prize, you may be directed to another platform to process these applications. Some of these platforms may be managed by third parties other than us, and further details will be given to you when you start the application. Please ensure you always read the terms and conditions of those platforms when making any such applications, as when you submit an application you will be agreeing to the terms and conditions of those platforms. However, we remain the controller of your personal information in this arrangement – these third parties only process your personal information in line with our instructions.

Feedback and surveys: If you agree to give Nesta feedback or complete a survey, we will use the information to improve our work and activities. We usually use Alchemer (formerly Surveygizmo) to process surveys, and they only process your information on our instructions. Alchemer operates in the US and complies with relevant local data privacy requirements. Please see their privacy policy. If you agree to participate in any survey that will form part of any research project, we will tell you at the time you take part how your information will be used for the particular research project or programme, and how long it will be kept for. 

Posts and Communications: If you post any comments on the website, any personal information you provide will be displayed publicly on the website along with your comments. You accept full responsibility for those postings.

For all kinds of information collected: Please make sure that any personal details you provide are accurate and up to date and let us know about any changes. Please get consent first before giving us anyone else’s information.

The nature of Nesta’s work means we often work in partnership with other organisations, however, we will not share your information with any other organisation without having your permission first, unless we have a legitimate interest to do so (see the ‘Who else has access to your information?’ section below).

We may also use your information to carry out analysis and research to improve our publications, events and activities, customise our website and its content to your particular preferences, notify you of any changes to our website or to our activities that may affect you, to prevent and detect fraud and abuse, and to protect other users.

However you choose to engage with or support Nesta, we may retain your information for our own legitimate business interests for statistical analysis purposes, in order to review, develop and improve our business activities.  In this situation, we will only keep personal information if it is necessary to do so, and will always put in place appropriate safeguards, including where possible anonymising or minimising the data retained.

 

How long will we keep your information for?

General principle: We will only keep any personal information that you provide to us for as long as is necessary to fulfil the purpose for which you gave us the information and we will securely delete information when it is no longer needed for that purpose, as explained in more detail below.

Events: If you attend one of our events, we will use your information for the purpose of the event and will only contact you for any other purpose if you have said we can. We will retain your personal information collected for the purpose of the event for 3 years for evaluation and business development purposes to help us understand our audience and reach, and to improve future events.

If you buy a ticket for one of our events, we will also keep your information in order to tell you about future similar events. If you do not wish us to contact you about future events please let us know by writing to us or emailing us at the contact details below.

Consent: We keep records of consent, and any withdrawal of consent, on our files for as long as your personal information is being used in line with that consent and for a period of 6 years after the consent is withdrawn (unless otherwise requested by you).

Other application details: If you enter the Manchester Prize, and you are successful, then we will keep your information for 6 years after the associated agreement has come to an end, or if the agreement was executed as a deed for 12 years. If the project or initiative has any external funding or support, we may need to retain your information for a longer period to fulfil our obligations under those agreements, in which case we will tell you that at the time of application.

If you are unsuccessful in  your entry to the Manchester Prize, once the process has ended we will retain your information for 3 years for evaluation and business development purposes, and to provide you with future opportunities to apply for similar opportunities, funding and support, or challenge prizes and programme in the future. If you do not wish us to contact you about future opportunities, please let us know by writing to us or emailing us at the contact details below.

In relation to the Manchester Prize, if you complete an application, we may use the information you provide to establish trends and to complete anonymised reports. No individual will be able to be identified from these established trends and/or from the contents of these reports which may be publically shared. 

Posts and communications: Any information that you post on the website shall only be kept and displayed for such time as the subject matter to which it relates is publically displayed.

Processing for statistical analysis purposes: This type of processing will only be undertaken whilst we retain your personal information in line with the principles explained above.

 

Marketing

If you sign up to our mailing list we will use your details to keep you informed about latest news, blogs, programme updates, research, publications, event details, jobs and funding opportunities, and may request feedback, including our annual audience survey.

We use third party provider, ActiveCampaign to deliver our e-newsletters.  We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. We currently use ActiveCampaign whose servers are hosted in the Spain, and comply with the EU-U.S. Privacy Shield. If you want to know more about how your information will be stored and processed, read the ActiveCampaign Privacy Policy. If we use any other providers we will let you know when you subscribe.

If you no longer want to receive marketing communications from us, you can unsubscribe from our mailing list at any time by clicking the unsubscribe link at the bottom of our emails or by emailing info@challengeworks.org detailing your name and email address.

 

Who else has access to your information?

We will share your personal information with our partners subject always to appropriate obligations of confidentiality and data protection.  We may additionally share your information with other partners and with companies who help us to operate this site, and if you register to attend an event or apply to one of our programmes or indicate interest in any other activity detailed on the site, we may share your details with the companies/organisations who help us to fund and organise the events, programmes and other activities. Our legal basis for doing this is to pursue our legitimate interest of being able to operate and administer the event, Prize or activity.  Some of these organisations may process your information in countries outside the UK where data protection laws are not the same.  Rest assured that we will always ensure any transfer is subject to appropriate security measures to safeguard your personal data. Where transfers are necessary to countries where data protection has not yet been declared to be adequate, we rely on GDPR Article 49(1)(c) for these transfers. Full details of these organisations, confirmation of where they would process your personal information, and details of the steps we have taken to safeguard your personal data will be provided as part of the online data collection process if this is relevant.

We may share your information within the Nesta group of companies, for the purposes of managing the event, grant or activity (e.g. assessing your application). Nesta currently provides all support and services for its subsidiary companies, therefore, our legal basis for sharing your information is to pursue the legitimate interests of shared resources and management reporting between the companies within the group. Our group companies will not process your data outside the UK unless we notify you otherwise. Details of our group companies can be found here. 

Comments, blogs and other information which you post on the site will be displayed publicly and to other users. Please be careful when disclosing personal information which may identify you or anyone else. We are not responsible for the protection or security of information which you choose to post in public areas.

We may disclose your personal information to law enforcement agencies if required by law (in which case our legal basis for doing this is for compliance with a legal obligation), or to protect or defend ourselves or others against illegal or harmful activities (in which case, our legal basis for doing this is the pursuit of these legitimate interests).

 

Feedback and surveys

In relation to the Manchester Prize, if you complete a survey, we will use the information you provide to establish trends and to complete anonymised reports.  No individual will be able to be identified from these established trends and/or from the contents of these reports.  We will share these reports with The Department for Science, Innovation & Technology, on behalf of which we are delivering the Manchester Prize, who are working with us in respect of the Programme, but you will not be able to be identified from the reports or any other information sent to our partners.

 

Cookies

This site uses cookies. Cookies are small text files that are placed on your computer by websites you visit. They are widely used to make websites work, or work more efficiently, as well as to provide some useful information to site owners. Most web browsers allow some control of most cookies through browser settings.

This site uses a variety of types of cookies. Some are strictly necessary to enable you to move around the site or to provide certain basic features, such as logging into secure areas. The site may also use performance cookies which collect information about how you use the site, such as how you are referred to and how long you stay on certain pages. This information (if collected) is aggregated and therefore anonymous and is used to improve the performance of the site. If they are used, you will be able to opt out of these cookies via our cookie preferences tool. Please note that some of the features of the site may not work if you choose to block cookies. To find out more about cookies, see our Cookie Policy.

We may also use third party tracking cookies for remarketing, including Google Adwords. These third parties help us to send you tailored advertisements about Nesta that we think may be of interest to you, based on what parts of the Prize website you have viewed. The advertisements will be shown to you on other search results pages, or on sites within Google’s or any other third party display network. We do not collect any identifiable information through the use of these third party remarketing services. If you do not wish to receive such advertisements, then you can deactivate the Google Adwords cookie from your account. For more information on how Google uses advertising cookies, and to manage your settings and opt-out of these features on the Google support website.

 

Security 

We take steps to protect your personal information and follow procedures designed to minimise unauthorised access or disclosure of your information. If you have a password for an account on this site, please keep this safe and don’t share it with anyone else. You are responsible for all activity on your account and must contact us immediately if you are aware of any unauthorised use of your password or other security breach.

 

Contacting us, exercising your rights and complaints

You are legally entitled to know what personal information we hold about you and how that information is processed, which includes the right to:

  • know what information we hold about you
  • ask us to correct any mistakes in your information which we hold
  • ask us to delete your personal information
  • ask us to stop using your personal information or restrict how we can use it, for example if you feel it is inaccurate or no longer needs to be used by us
  • to object to us using of your personal information
  • to object to any automated decision making that we may do using your personal information

If you wish to know what information we hold about you, or wish to exercise any of your other rights as detailed above, or have any complaint about how we are using your personal information, then please email or write to us at information@nesta.org.uk or 58 Victoria Embankment London EC4Y 0DS UK and provide enough information to identify yourself (e.g. name and address or any registration details).

If our information is incorrect or out of date, please provide us with information to update it. If you want us to delete, restrict or stop using any information we hold about you, please explain the reasons why you are asking this. If you are unhappy with how we are using your information, again please explain to us the reasons and we will investigate the matter.

You can also write to the same address if you have a complaint about this policy. If you are unhappy with how any data rights request or complaint has dealt with you have the right to complain to the Information Commissioner at Wycliff House, Water Lane, Wilmslow, Cheshire SK9 5AF or the following link: https://ico.org.uk/concerns or helpline: 0303 123 1113.

 

Changes to the privacy policy

We may change this privacy policy from time to time.  We will notify you of any changes that relate to information we already hold about you, where practicable. You should check this policy occasionally to ensure you are aware of the most recent version that will apply each time you access this website. 

Nesta is a company limited by guarantee registered in England and Wales with no 7706036 and charity number 1144091. Registered as a charity in Scotland number SC042833.

Registered office: 58 Victoria Embankment, London, EC4Y 0DS.

Email: information@nesta.org.uk 

 

What type of information do DSIT collect? 

The Manchester Prize is being delivered by Nesta for DSIT. As a result, DSIT and Nesta are joint controllers in the processing of personal data described in this section. This means that both DSIT and Nesta will work together to decide why and how this data is processed. It also means that we are jointly responsible to you for that processing.

We do not process all your personal data as joint controllers. Nesta makes decisions regarding processing of all other categories of personal data independently of DSIT, for which Nesta is solely responsible. 

Categories of personal data: Any information submitted by you as part of your entry to the Manchester Prize will be shared with DSIT. 

Role of DSIT, and purpose and basis of the processing: The Manchester Prize is owned and funded by DSIT. As such, Nesta will share with DSIT all entries and associated contact and payment information for the purposes of assessment, due diligence and counter-fraud checks and award.

DSIT is able to process this data on the basis that it is necessary to perform the public function of delivering the Manchester Prize. Where DSIT is processing your personal data, our lawful basis for doing so is UK GDPR Article 6 (1) (e), commonly known as “public task”

How long will we keep your data? As a general principle, we will only keep your data for as long as necessary to fulfil our stated purposes and comply with legal requirements.

Subject to any legal requirements to retain your data for a longer period, if you are successful in your entry to the Manchester Prize, your data may be retained by DSIT for 9 years. If you are unsuccessful in your entry to the Manchester Prize, your data may be retained by DSIT for 2 years.

Contacting DSIT, exercising your rights, and complaints: You are legally entitled to know what personal information DSIT holds about you for the purposes of the Manchester Prize, and how that information is processed, which includes the right to:

  • know what information DSIT hold about you
  • ask DSIT to correct any mistakes in your information which we hold
  • ask DSIT to delete your personal information
  • ask DSIT to stop using your personal information or restrict how DSIT can use it, for example, if you feel it is inaccurate or no longer needs to be used by us
  • to object to DSIT using your personal information
  • to object to any automated decision-making that DSIT may do using your personal information

If you wish to know what information DSIT hold about you, or wish to exercise any of your other rights as detailed above, or have any complaint about how we are using your personal information, then please email or write to DSIT’s Data Protection Officer at dataprotection@energysecurity.gov.uk or Data Protection Officer, Department for Science, Innovation and Technology 1 Victoria Street, London, SW1H 0ET and provide enough information to identify yourself (e.g. name and address or any registration details).

If DSIT’s information is incorrect or out of date, please provide DSIT with information to update it. If you want DSIT to delete, restrict or stop using any information held about you, please explain the reasons why you are asking this. If you are unhappy with how DSIT is using your information, again please explain to us the reasons and it will investigate the matter.

 

Cookie policy

About cookies

You may have heard of internet cookies…you may know all about them. To confirm, cookies are small text files that are placed on your computer by websites you visit.

Cookies allow us to identify you (or, more accurately, your computer) when you visit our website. Knowing how often people are visiting each page of our website helps us work out how and where to improve our website.

By continuing to use our website, you consent to the use of cookies (including third-party cookies) as described in this policy. This cookie policy is part of our Privacy Policy.

 

Types of cookie

Categories

Necessary cookies help make our website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Performance cookies help us understand how visitors interact with our websites by collecting and reporting information anonymously.

Marketing cookies are used to track visitors across websites. The intention is to display content and ads that are relevant and engaging for the individual user and thereby more valuable.

Persistent cookies and session cookies

Persistent cookies remain on a visitor’s device for a set amount of time. This means for example that we can identify when a site visitor is a repeat visitor or new to us.

are created temporarily and last for as long as your browser window is open, being automatically deleted after you close your browser. These allow us to link the actions of a user during a visit to the website, to provide a consistent experience.

 

The cookies we use

Details about the cookies we use are set out in the table below. Some of these are third party cookies – see the section on third party cookies below for more information.

Cookie Purpose  Duration 
PHPSESSID The PHPSESSID cookie is native to PHP and enables websites to store serialised state data. On the Action website it is used to establish a user session and to pass state data via a temporary cookie, which is commonly referred to as a session cookie. As the PHPSESSID cookie has no timed expiry, it disappears when the session is closed. Session
DYNSRV This cookie is added by our load balancer to track which web server to send the visitor to. Its purpose is to improve the performance of the website. Session
has_js This cookie records whether your browser has JavaScript enabled. Session
_ga This is a Google Analytics cookie. It helps us monitor the use and performance of our website. 2 years
_gat This is a Google Analytics cookie. It is used to throttle request rates. 1 minute
_gat_UA-1360665-8 This is a Google Analytics cookie. It helps us monitor the use and performance of our website. 10 minutes
_gid This is a Google Analytics cookie. It helps us monitor the use and performance of our website. 1 day
_utmz This is a Google Analytics cookie. It identifies the traffic source or campaign that explains how the user reached our website. 6 months
_utmt This is a Google Analytics cookie. It helps us monitor the use and performance of our website. 10 minutes
_utmc This is a Google Analytics cookie. It helps to identify unique sessions. Session
_utmb This is a Google Analytics cookie. It helps to identify unique sessions. 30 minutes after inactivity
_utma This is a Google Analytics cookie. It identifies unique visitors to our website. 2 years after each update
vuid Our website uses Vimeo to embed videos from our Vimeo channel as well as other channels. You can find Vimeo’s privacy policy at https://vimeo.com/privacy. 2 years
__cfduid, optimizelyEndUserId These cookies are used to by Cloudflare to support performance optimisation. They do not store any personally identifiable information. You can find Cloudflare’s privacy policy at https://www.cloudflare.com/security-policy
cookie_notice This cookie is used to remember your preference for accepting the use of cookies.
1P_JAR, SID, SAPISID, APISID, SSID, HSID, NID Google sets a number of cookies on any page that includes a Google Map. They include a mixture of pieces of information to measure the number and behaviour of Google Maps users. Mixture of session cookies and other cookies expiring after 2 years.
pl, fr, datr, xs, dpr, c_user, sb, wd, act, presence These cookies are used by Facebook to support social sharing and the integration of Facebook services. These cookies include session cookies and cookies lasting for up to 2 years. See Facebook’s privacy policy for more information.
__unam, __sharethis_cookie_test__ The “__unam” cookie is set as part of the ShareThis service and monitors “click-stream” activity, e.g. web pages viewed, navigation from page to page, time spent on each page etc. The ShareThis service only personally identifies you if you have separately signed up with ShareThis for a ShareThis account and given them your consent. See the ShareThis privacy policy for more information. 15 months
_eventqueue This cookie stores an array of mouse events that can’t be guaranteed to be logged to our servers before the current page is unloaded. These events can then be processed and logged on the subsequent page.  10 minutes
heatmaps_g2g_xxxxxxxxx This cookie tells our tracking code to log data about where a visitor is clicking on a site to send back to our servers and later used to generate a heatmap report of clicks on that page. 1 hour
_first_pageview This cookie is set on the first page view of a session. It is used to make our tracking code more efficient, so certain processes are only run on a visitor’s initial page view. 10 minutes
catAccCookies This cookie is used to remember your preference for accepting the use of cookies. 2 years

 

Third party cookies

First party cookies are the cookies that are set by this website; third party cookies are set by other websites.

This website uses cookies provided by other organisations to support functions such as statistical performance analysis, rich media functionality and social sharing. These are third party cookies. You can read privacy policies from these third parties below:

We use Vimeo to embed videos and provide some video elements in websites. You can find Vimeo’s privacy policy at https://vimeo.com/privacy.

We use Google Analytics for statistical performance analysis. This information is aggregated and therefore anonymous. Google’s privacy policy is at https://policies.google.com/privacy. To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.

We use Cloudflare for content delivery and internet security. You can find Cloudflare’s privacy policy at https://www.cloudflare.com/security-policy.

We use ActiveCampaign for our email marketing. You can find ActiveCampaign’s privacy policy at https://www.activecampaign.com/legal/privacy-policy

We use Zoom as registration systems for many of our events. See the Zoom privacy policy.

We use Alchemer to process surveys. You can find the Alchemer privacy policy at https://www.alchemer.com/privacy/

 

Control your cookie settings

If you want, you can block cookies by changing the settings on your browser – we have set out below links to the ‘Help’ pages of some major browsers which explain how you can do this. Blocking the cookies we use may have an adverse impact upon the presentation of some or all of our website.

General guidance on how to manage your cookies can be found here:

 

About Cookies

Your Online Choices