Privacy notice

Who we are

The Floods and Droughts Research Infrastructure (FDRI) project is a major capital investment by the UK Government that will enable essential science and innovation to improve the UK’s resilience to hydrological extremes. It is being led by the UK Centre for Ecology & Hydrology (UKCEH) with project partners the British Geological Survey (BGS), the University of Bristol and Imperial College London.

UKCEH is an independent, not-for-profit research institute and is a registered Charity in England & Wales (number 1185618) and in Scotland (number SC049849), and a registered Company Limited by Guarantee in England & Wales (number 11314957).

Joint Data Controllers for all processing of personal data are:

• The UK Centre for Ecology & Hydrology (“UKCEH”) Maclean Building, Benson Lane, Crowmarsh Gifford, Wallingford, Oxfordshire OX10 8BB
• The British Geological Survey (“BGS”), Nicker Hill, Keyworth, Nottingham NG12 5GG
• University of Bristol, Beacon House, Queens Road, Bristol BS8 1QU
• Imperial College London, Exhibition Road, London SW7 2AZ
• Lancaster University, University House, Bailrigg, Lancaster LA1 4YW
• United Kingdom Research and Innovation Natural Environment Research Council (“NERC”), Polaris House, North Star Avenue, Swindon SN2 1EU

The main UKCEH Privacy Notice is here.

Why are we collecting your information?

FDRI collects the minimum amount of personal data in order to run the FDRI Project and to communicate with you. This Privacy Notice covers all activities associated with the project, including the website, workshops, surveys/questionnaires, interviews, and meetings, as well as providing project updates via a newsletter. FDRI team members will also contribute to a database capturing events and outputs of meetings led by FDRI and where FDRI team members participated. 

The personal data about you that we may collect includes:

• Name, title and role
• Email address and phone number
• Name and category of organisation or community group
• FDRI Project interactions and engagements 

In data protection terms we are using the ‘lawful basis’ of ‘legitimate interest’ and ‘consent’ for collecting and processing your personal data. The data will not be used for marketing purposes.

All data held by FDRI is compliant with UK data protection legislation. Personal data we collect from you, or that you provide to us, is covered by this Privacy Notice, UKCEH Privacy Notice or the other Joint Controllers’ Privacy Notices.

FDRI will adhere to ethical approval processes where relevant, ensuring that your interests are protected and that all activities are carried out to the highest standards. The FDRI Project Management Office (PMO) will clearly inform you about the information they intend to collect and how it will be used. Your consent will always be obtained before any data is collected or used as part of this project.

How are we storing your information, and will we share it?

The personal data that we collect will be stored securely and comply with UK GDPR (General Data Protection Regulation) for as long as we may need to engage with you. 

Sharing your personal information

Your data may contribute to our internal reporting requirements and external communication activities (e.g. as part of a conference presentation, public talk or research publication). The project will not use any information that would identify you without obtaining your specific consent first. Other than as set out above, and except where we have a legal obligation to so do, we will not share your personal data with anyone else, and we will always adhere to current UK Data Protection Legislation. Any data that will be published or reported externally will be anonymised.

The GDPR clearly defines the rights which applies to individual's (i.e. your) data. We are collecting and processing this data under legitimate interest and consent. Your rights are as follows:  

• you have the right of access to your data*
• you have the right to correct your data if it is incorrect*
• you have the right to ask for your data to be deleted*
• you have the right to withdraw your consent at any time*

* For data that is or is not anonymised.

You should contact fdri@ceh.ac.uk if you have a query about how your data is used in the project.

If you have any concerns or complaints about how your personal data is being used, we will try to answer any questions you have. The UKCEH Data Protection Officer can be contacted at cehdataprotection@ceh.ac.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office. You also have the right to an effective judicial remedy against decisions of the Information Commissioner’s Office. 

Deletion of Data

Personal data deletion will be managed according to Article 5(1)(c) “Personal data shall be:(c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed".

This Privacy Notice may be updated from time to time. The latest version will always be available on the FDRI website. If changes are made to this Privacy Notice in the future, a prominent notice will be posted on the website.