Privacy policy.

1. About the Programme

NWCAM2 is a cross-border programme supporting small and medium-sized enterprises (SMEs) to adopt advanced manufacturing, digital and sustainable innovation to improve productivity and competitiveness.

The programme is funded under PEACEPLUS and delivered by a partnership of organisations across Northern Ireland and Ireland.

2. Who We Are

The Lead Partner for NWCAM2 is:

Catalyst (Northern Ireland Science Park (Holdings) Ltd)
Queens Road, Belfast, BT3 9DT
Email: nwcam2@wearecatalyst.org

The NWCAM2 Project Partners are:

  • Catalyst (Lead Partner)

  • Atlantic Technological University (ATU)

  • Ulster University (UU)

  • Trinity College Dublin, the University of Dublin (TCD)

  • North West Regional College (NWRC)

  • Irish Manufacturing Research CLG (IMR)

For the purposes of data protection law, each Project Partner acts as an independent Data Controller in respect of the personal data it processes.

Personal data is shared between Project Partners under a formal Data Sharing Agreement (DSA) which defines roles, responsibilities and safeguards.

3. Purpose of This Policy

This Privacy Policy explains how we collect, use, store and share personal data in connection with the NWCAM2 programme.

It applies to all individuals and organisations who engage with the programme, including through the Expression of Interest process and subsequent participation.

4. What Data We Collect

We may collect and process the following categories of personal data:

Basic Information

  • Name

  • Email address

  • Telephone number

  • Job title and role

Organisation Information

  • Company name

  • Sector and business activity

  • Location

Programme Participation Data

  • Expression of Interest submissions

  • Assessment and eligibility information

  • Engagement and support records

  • Communications with programme staff

Monitoring, Reporting and Compliance Data

  • Participation and performance data

  • Innovation and project outputs

  • Funding and subsidy declarations (where applicable)

  • Information required for audit and verification

Special Category Data

We do not routinely collect special category data. Where this is required, it will only be processed in accordance with applicable law and appropriate safeguards.

5. How We Use Your Data

We use personal data for the following purposes:

  • Delivering the NWCAM2 programme and SME support

  • Assessing eligibility and suitability for participation

  • Managing participation in programme activities

  • Monitoring, evaluation and reporting to funders

  • Financial management, audit, and verification

  • Compliance with funding conditions and legal obligations

Processing of personal data is necessary to deliver a publicly funded programme and to meet the requirements set by the programme funder.

6. Legal Basis for Processing

We process personal data under the following lawful bases:

  • Public task – to deliver a publicly funded programme in the public interest

  • Legal obligation – to meet regulatory, audit and reporting requirements

  • Contract – where processing is necessary for participation in programme activities

  • Legitimate interests – to manage and improve programme delivery

  • Consent – where required for specific optional activities (such as marketing communications)

Where special category data is processed, an appropriate additional lawful basis will be applied in accordance with data protection legislation.

7. Requirement to Provide Data

Provision of personal data is necessary to participate in the NWCAM2 programme.

If you do not provide the required information, we may not be able to:

  • Assess your Expression of Interest

  • Provide programme support

  • Allow participation in programme activities

8. Data Sharing

Personal data will be shared where necessary for the delivery and governance of the programme.

Data is shared with:

  • NWCAM2 Project Partners

  • SEUPB (programme funder)

  • Programme monitoring, audit and verification bodies

  • Regulatory authorities and government bodies where required

Purpose of sharing:

  • Programme delivery and coordination

  • Assessment and onboarding

  • Monitoring and reporting

  • Audit, verification and compliance

  • State Aid / Subsidy Control compliance

All data sharing is:

  • Necessary and proportionate

  • Governed by the Data Sharing Agreement

  • Carried out in accordance with UK GDPR and EU GDPR

By engaging with the NWCAM2 programme, including submitting an Expression of Interest or participating in programme activities, you acknowledge and agree that your personal data will be shared as described in this Privacy Policy for the purposes of programme delivery, coordination, monitoring, audit, verification, and compliance with funding and regulatory requirements.

9. Cross-Border Data Transfers

As a cross-border programme, personal data will be transferred between organisations in the UK and Ireland.

These transfers are lawful under:

  • The European Commission’s adequacy decision for the UK

Where required, additional safeguards will be applied in accordance with applicable data protection laws.

Personal data will not be transferred outside the UK or European Economic Area unless appropriate safeguards are in place.

10. Data Retention

Personal data will be retained in line with programme, legal and regulatory requirements.

This may include retention:

  • For the duration of the programme

  • For audit and verification purposes after programme closure

  • For up to 10 years or longer where required by:

    • Funding conditions

    • Audit requirements

    • State Aid / Subsidy Control regulations

11. Data Security

All Project Partners implement appropriate technical and organisational measures to protect personal data, including:

  • Secure systems and storage

  • Access controls

  • Staff training and confidentiality obligations

These measures are designed to protect against unauthorised access, loss, or misuse of data.

12. Your Rights

Under data protection law, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of data (where applicable)

  • Restrict processing

  • Object to processing

  • Request data portability

These rights may be limited where processing is required to:

  • Comply with legal obligations

  • Meet audit or regulatory requirements

  • Deliver a publicly funded programme

Requests can be made by contacting Catalyst using the details below.

13. Data Breaches

All Project Partners comply with legal requirements relating to personal data breaches, including:

  • Notification to relevant supervisory authorities where required

  • Communication to affected individuals where appropriate

14. Complaints

If you are not satisfied with how your data has been handled, you have the right to lodge a complaint with:

  • Information Commissioner's Office

  • Data Protection Commission

15. Contact

For any queries regarding this Privacy Policy or your personal data, please contact:

Catalyst (Lead Partner)
Email: nwcam2@wearecatalyst.org

16. Governance

This Privacy Policy operates alongside:

  • The NWCAM2 Data Sharing Agreement

  • Collaboration Agreements with Project Partners

  • PEACEPLUS Programme requirements

All processing of personal data is carried out in accordance with applicable UK and EU data protection legislation