The Peterborough Integrated Renewables Infrastructure project (PIRI) is the largest smart city urban regeneration project in the UK and the successful delivery of this detailed design by December 2021 will enable net zero urban regeneration across all major cities by 2035.
The partnership includes Peterborough City Council, SSE Enterprise, Element Energy, Cranfield University, Smarter Grid Solutions and Sweco UK
The PIRI team recognise the importance of disseminating data and project results alongside the necessity for the privacy of data for individuals and organisational Intellectual Property. We take these decisions seriously. Our principle is to provide information on the products and services that we have set out to deliver whilst protecting the data rights of individuals and organisations contributing to the process.
Each partner organisation has its own data policy that explains what information is gathered from customers, project partners and how data is collected, stored, used and protected as well as individual responsibilities within the law, including The General Data Protection Regulation (2018) and the UK Data Protection Act 2018.
This policy also instructs you on what to do if you do not want your personal information collected or shared when you visit our websites or attend our events. By using and visiting the website, you agree to this policy and the uses made of personal information as set forth herein or amended hereafter.
This policy is reviewed annually. From time to time, we may update the policy. We encourage you to review it regularly to stay informed.
If you believe your personal information has been misused or handled in such a manner contrary to the policy stated above, please send details to GDPR@Cranfield.ac.uk.
What personal data may PIRI collect?
We process information about different types of data subjects, which our partners, visitors to our website, those who attend our events, clients and the general public. We record further details on the types of data subjects we process information about, and this information is available on request.
For those data subjects, we process a wide variety of categories – depending upon the purpose for the processing.
Information you voluntarily provide to us, such as your name, username, address, phone number, email address and other contact information.
When you enter into a contract to attend an event or work with us, we may collect financial, profile and preference information that you provide.
Cranfield University is a centre of transformational research in technology and management, and a wide range of personal data may be collected and processed for research purposes. This includes research into human behaviour and human factors and biometric data is collected through facial recognition cameras and other sensors (in particular for our research into digital aviation technologies). Facial recognition data is not used for employee performance monitoring.
When you attend a lecture or an event (either in person or virtually) we may also collect and record visual and audio images.
PIRI does not hold or process electronic card payments; these transactions, including all personal data, are transferred to external web payment services and are governed by their privacy policies and notices.
Some further examples of data we collect are given below and full information is available on request.
- access and control lists
- attendance records
- complaints, incidents and accidents
- information from publicly available sources
- lifestyle and social circumstances
- associations and professional body memberships
- survey responses
- vehicle details including vehicle registration and driver/ownership
- visual images, personal appearance and behaviour
Explaining the legal reasons we rely on
In summary, we process personal information to enable us to:
- provide education professional learners
- support and manage our internal support functions; administration and other business-related functions of the project
- maintain our accounts and records
- provide commercial activities to our clients
- undertake research
- advertise and promote the PIRI
- carry out knowledge exchange activities.
- publish PIRI publications
When collecting your personal data, our intention is to be clear to you which data is necessary in connection with a particular service.
All information is processed under a legal basis to comply with the General Data Protection Regulation. Information on these legal bases is given below.
In certain circumstances, we need your personal data to comply with our contractual obligations.
For example, if you attend an event with us, we will process the information necessary for fulfilling the contract to provide the service in accordance with the agreed terms.
If the law requires us to, we may need to collect and process your data.
For example, to fulfil our legal obligations in relation to tax.
Occasionally processing may be necessary in order to protect your vital interests.
For example, should you decide to attend an event with us, in the case of a medical emergency we will share your data with the emergency services.
In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running the project and which does not materially impact your rights, freedom or interests.
For example, we may use your address details to send you direct marketing information by post, telling you about products and services that we think might interest you
We also have a legitimate interest to visually identify and record people on campus for the purpose of security.
We also process special category and sensitive classes of information that may include:
personal data including protected characteristics as outlined in the Equality Act 2010 and other relevant legislation.
Who do we share your personal data with?
Where required and agreed, we share your information with the PIRI partners – The partnership includes Peterborough City Council, SSE Enterprise, Element Energy, Cranfield University, Smarter Grid Solutions and Sweco UK
The project team has an IP agreement which defines the control and sharing of background and foreground IP contributed during the project.
When completing individual work packages, research partners act as the lead organisation responsible for data management
External Partners & contributors
Our guiding principle is to share results and data from the project wherever possible using the most accessible platform, without placing at risk the privacy of individuals or IP of project partners or contributors.
This group includes all potential project beneficiaries, as follows:
- Local authorities
- Energy companies
- Project groups working on low carbon development
- Energy system designers
- Researchers & academic institutions
- Research & development programme funders.
PIRI will not sell, license or trade your personal information without your consent. We will not share your personal information with others unless they are acting under our instructions or we are required to do so by law (for example, to government bodies and law enforcement agencies, regulatory and investigatory authorities.)
We also sometimes share your personal data with trusted third parties. Here’s the notice we apply to those organisations to keep your data safe and protect your privacy:
- We provide only the information they need to perform their specific services
- They may only use your data for the exact purposes we specify in our contract with them
- We work closely with them to ensure that your privacy is respected and protected at all times
- If we stop using their services, any of your data held by them will either be deleted or rendered anonymous.
Examples of the kind of third parties we work with are:
Suppliers, service and support providers e.g. IT companies who support our website and other business systems
Professional and legal advisors
Google/Facebook to show you products that might interest you while you’re browsing the internet. This is based on either your marketing consent or your acceptance of cookies on our websites. See our Cookies Notice for details.
Data insight companies to ensure your details are up-to-date and accurate
If requested to do so by a legitimate public authority PIRI will share your name, contact details and time of visit for contact tracing purposes to control the spread of Covid 19.
We also share information with other parties at the specific request of, or consent by, the data subject.
How long will we keep your personal data?
For the most part, data will be kept for a standard retention period of seven years in line with statute of limitations.
Under the GDPR, you have the following rights:
The right of access – you have the right to request the personal data we hold about you, free of charge in most cases.
The right to be forgotten – you have the right to request that we delete your data.
The right to data portability – you have the right to request that we supply a copy of your data in a commonly used and machine-readable format for you to transfer your data to another service provider.
The right to be informed – you have the right to be informed about our processing of your data.
The right of rectification – you have the right to request the correction of your personal data when incorrect, out of date or incomplete.
The right to restrict processing – you can request that your data is not used for processing. Your record can remain in place, but not be used.
The right to object – you have the right to stop the processing of your data for direct marketing.
PIRI offers visitors to our website the opportunity to subscribe (opt in) to several electronic communications. You have the possibility at all times to tell us you no longer wish to subscribe to our electronic communication service (opt out). All e-communications you receive from us will provide clear instructions on how to unsubscribe from each service.
You also have the right to object to the processing of your data where you believe a decision has been made about you by fully automated means, which has adversely affected you.
The right to be notified – you have the right to be notified if there has been a data breach which compromises your personal data, within 72 hours of PIRI having become aware of the breach.
Right to complain to the supervisory authority – you have the right to complain to the supervisory authority; in the UK, this is the Information Commissioner’s Office (ICO) – see the ICO website for further information.
Please note that the rights described above do not apply in every circumstance. If you require further clarification, please contact GDPR@cranfield.ac.uk.
Where your personal data may be processed
Your personally identifiable information will normally be processed in databases located in the United Kingdom, but some data may be processed elsewhere through specific contractual agreements. PIRI is committed to keeping secure the data you provide us and will take reasonable precautions to protect your personally identifiable information from loss, misuse or alteration.
Cranfield University are the partner responsible for hosting this website Cranfield University has made substantial investments in security technology and security management processes. These technologies are deployed to guarantee maximum security of the information you provide us with.
External website links
The links are provided as a courtesy, to be used or not at the discretion of the individual user. If users decide to follow these links, PIRI cannot be responsible for the Privacy Policies and content of those sites. Users should contact the co-ordinator of the particular site with any questions about those sites.
Data Protection Notice
Cranfield University are the partner responsible for hosting this website Please note that any information supplied via this website may be stored on our computer system for the provision of information, marketing and analysis. We may also share this information with other third parties in line with our registration with the ICO.
We are registered with the Information Commissioners’ Office and our registration number is Z4690919.
PIRI will only process children’s personal data under very specific circumstances. For example, events supporting science-based projects in schools, attendees at the on-site pre-school and ‘Bring Your Child to Work Day’.
Where there is a need to collect information from a person under 16, then PIRI will need consent from a parent or guardian in order to process any data. In these circumstances, an email or postal address of this person will be needed so that we can write to them to collect this.