Privacy notice

This notice was last updated on 27 November 2019.

This privacy notice is a statement that describes how and why Invest Northern Ireland processes (‘collects’, ‘uses’, ‘retains’, ‘discloses’, ‘disposes of’) personal data.

This notice applies to customers using our services and covers our website and cookie policy. It also explains how you can control how we use your information in accordance with your rights under relevant data protection legislation.

Invest Northern Ireland (Invest NI) processes personal data in accordance with our obligations under the EU wide General Data Protection Regulation ('GDPR') and the UK Data Protection Act 2018 ('DPA').

This notice is written to comply with requirements under both DPA and GDPR (as they are known), however, elements may be revised on occasion to reflect any changes to Invest NI's data processing or to follow relevant guidance issued by the Information Commissioner’s Office (ICO). We shall update this notice to reflect any such changes.

Data Controller

Data Controller

Invest NI is the data controller (ICO Registration number: Z6586089) for the personal data processed on customers using our services and also users of this website.

Lawful basis for processing

As a public sector body, the vast majority of personal data processed by Invest NI is done so in the exercise of the ‘official authority’ vested in Invest NI by virtue of the Industrial Development Act (Northern Ireland) 2002 and the Industrial Development (Northern Ireland) Order 1982. Broadly these allow Invest NI to process data for economic development purposes.

For non ‘core’ functions not covered specifically by our regulatory remit, such as marketing and IT services, Invest NI will rely on its legitimate interests as a legal basis to process personal data in a proportionate and expected way. These legitimate interests are to promote our organisation (for marketing functions) and to function effectively as an organisation (for example in the use of communication technologies).

There will also be a legal obligation on Invest NI to process certain personal data (such as for tax purposes). Where we are relying on your consent to process your personal data we will make this clear at the point of collection.

Security of your personal information

Invest NI regards the lawful and correct handling of personal and business sensitive information as essential to its successful operation and to maintaining confidence of its customers. To this end, Invest NI maintains an Information Security Management System certified to the international security standard ISO 27001 to protect the confidentiality, integrity and availability of corporate information, including personal data entrusted to us by our customers.

Further detail on our data processing arrangements can be found in the Invest NI Information Security Handbook (PDF).

How we process data

How we process data

This section details the purpose and categories under which we collect data, the data we hold, what we do with the data and how we retain the data. We will never share your information other than for the purpose for which it was provided to us (economic development activities).

investni.com

www.investni.com is the corporate website of Invest Northern Ireland (Invest NI). We are committed to protecting the privacy of all personal information obtained from you during any visits to this website.

In this section, we set out the basis on which any personal data we collect from you, or that you choose to provide us in connection with the investni.com website (this Website), will be processed.

What information do we collect?

This Website may collect and process data you provide to us about you, for example through filling out an enquiry form, and other information that we automatically collect from you.

Information you provide to us

1. This Website

Information that you choose to give this Website includes the following:

a. Contact us form

We collect questions, queries or feedback you leave, including your name, email address, telephone and postcode, if you use our Contact Us form on this Website to get in touch. We use these details to respond to the feedback or query you send us. In some instances the information is passed to the authorised person in Invest NI, government department, agency or public body that we believe can best respond or assist you.

b. Media enquiry form

We collect questions, queries or feedback you leave, including your name, email address, telephone, postcode, media outlet and deadline for response, if you use our Media Enquiry form on this Website to get in touch. Our Press Office will use these details to respond to the feedback or query you send us. In some instances the information is passed to the authorised person in Invest NI, government department, agency or public body that we believe can best respond or assist you.

c. Sign-up to receive our email newsletter

We collect your name and email address when you sign-up to receive our weekly email newsletter, the 2 Minute Update. The 2 Minute Update gives you information about our latest events, news and features, our programmes and advisory services, advertising campaigns promoting our available support, and business advice and information from Invest NI and our economic development partners. You can opt-out from receiving our weekly newsletter at any time by selecting the ‘unsubscribe’ link that appears in the footer of every email newsletter we send.


2. MYINI Portal

MYINI is Invest NI’s customer portal through which you can register for events, and set up an account to access and apply for available support. MYINI is a sub-domain of this Website.

a. Event registration form

We collect your name, email address, company name, job title, mobile number and details of any access or dietary requirements if you register for an event through the MYINI Portal: https://myini.investni.com. We will use this information solely for the purposes of administering the event. You do not need to create an account on MYINI to register for an event.

b. Paying for events

If you are registering for one of our paid events, such as an Export Skills Workshop through the MYINI Portal, we will collect payment through the third party payment gateway, Worldpay. Invest NI does not collect or store any card or cardholder information. In order to process your payment, Worldpay will ask for your card details (card number, security code and expiry date) and cardholder details (cardholder’s name, address, telephone and email address). You do not need to create an account on MYINI to register and pay for a paid event.

c. Creating an account

If you are creating an account on the MYINI portal, we will collect your name, company name and email address. We use this information solely to create the account and this will allow you to use your email address as a unique identifier for logging into the system.

d. Applying for support

To apply for support, either financial or programme based, Invest NI is required to capture data from you. Invest NI can collect your name, contact information, details of your business, its trading history, performance and future plans. Invest NI uses this information to carry out due diligence checks and also in support of an application for public funds. The specific data collected on an application will vary, depending on the type of support being sought. Customers will be expected to update their data periodically and will also need to confirm data is true, accurate, and up-to-date at the time of applying for support.

Information we collect from you

Information that we may automatically collect in relation to your visits to this Website does not identify your personally. It provides us with information about how you use investni.com and engage with us. We use this information to improve our services and make them more useful to you. The information we collect includes some or all of the following:

1. Technical information

Your Internet Protocol (IP) address and detail of which type of web browser you used. We collect this information in a way which does not identify you personally.

2. Information about your visit to this Website

This can include:

  • The pages you visited, when (date and time) you visited them and how long you visited them for.
  • The website address from which you accessed this Website.
  • The website address from which you exited this Website.
  • Queries via this Website’s search engine.
  • Internet browser and devices used.

We collect this information in a way which does not identify you personally.

We collect information on how you use this Website through cookies. Cookies are text files placed on your computer, laptop, tablet or mobile phone to collect information. You can decide if you want to accept or reject cookies by changing the settings on your browser. To find out more, please read our cookie policy.

What we do with the information we collect

We use the information we collect to understand your needs and provide you with a better service, including the following:

  • Respond to any requests or feedback you send us, if you have asked us to.
  • Send email alerts to you, if you request them.
  • Provide you with information, if you want it, about our latest events, news and features, our programmes and advisory services, advertising campaigns promoting our available support, and business advice and information from Invest NI and our economic development partners.
  • Analyse, evaluate and improve this Website via data amalgamated from multiple visitors, which does not identify you personally.

Linking to other websites

www.investni.com contains links to many other government and non-government websites. This Website does not endorse or favour any specific commercial product or business. Non-government sites linked to from this website are present only because they may be useful additions to the information we provide.

A link to a third-party website does not imply endorsement - you must use your own judgement to decide whether the information or service on that website is suitable for your needs. If a website is not linked to ours, this does not mean or imply that it is unsatisfactory. The linked websites are regularly reviewed in the light of customer usage and feedback.

We are not responsible for the content of any linked website and cannot take responsibility for the consequences of you using the information or services on linked websites. We cannot guarantee that these links will work all of the time.

Websites that we link to may have 'terms and conditions' that are different from ours. Do not assume that our privacy notice and cookie policy applies to other websites.

Other third party content

We embed external content from third-party websites such as YouTube. This content is not published on www.investni.com. It is delivered using devices and services provided by such third party sites that can be inserted into our site. We are not responsible for this content.

YouTube

Whilst we have made all reasonable efforts to display only appropriate YouTube videos through the embedded YouTube player, we are not responsible for any YouTube content accessed from our website. After a selected video clip plays, YouTube may suggest related videos, which can be played in the embedded video player. In virtually all cases, these will be directly related to the subject of the selected video. Occasionally, YouTube users may assign key words to a video by mistake. It is therefore possible that an unrelated video could be displayed. Again, we are not responsible for this content. If you are concerned about this possibility, you should avoid viewing YouTube videos from the embedded player on this website.

Security and virus protection

No data transmission over the internet can be guaranteed as totally secure. While we strive to protect such information, we do not warrant and cannot ensure the security of any information which you transmit to us. Accordingly, such transmission is at your own risk. We will not be liable for any damages or loss arising out of or resulting from any unauthorised access to, alteration to or modification of information contained on this website.

We make every effort to check and test our website during production. You must take your own precautions to ensure that the process which you employ for accessing this website does not expose you to risk of viruses, malicious computer code or other forms of interference which may damage your computer system. It is always wise for you to run an anti-virus program on anything you download from the internet.

We accept no liability for any loss, disruption or damage to your computer system or your data caused by using this website or arising as a result of having used this Website.

Cookie policy

What are cookies?

"Cookies" are small text files that are stored on your computer or mobile device when you visit a website.

They allow the website to recognise your device and remember if you have been to the website before. Cookies are widely used in order to make websites work more efficiently, as well as providing information to the owners of websites on site usage and performance.

There are different types of cookies. Necessary cookies enable a site’s core functionality - a website cannot function properly without these cookies. You can disable necessary cookies by changing your browser preferences. Analytical cookies measure the pages a customer visits on a website - website owners collect this information to make site improvements and report on site usage. Third party cookies can be used for advertising purposes. You can read about the different types of cookies that we use on investni.com on this page.

The Information Commissioner’s Office provide guidance on how to manage and delete cookies.

How are cookies used on investni.com?

Some of the cookies we use are essential for site functionality.

Other cookies help us to improve your website experience, including the content and technical performance of investni.com, by providing insights into how the site is used. For example, they allow us to count the number of visitors to specific pages, and to analyse website usage patterns and trends.

Some cookies help us to match relevant business support with your interests – this assistance may appear in the form of advertisements via websites you visit.

Ve Interactive Ireland Ltd. is a party for whom, and by whom, personal data is collected through the website, for information please see ve.com/cookies-policy and for more information about opting out, please see ve.com/privacy#opting-out

The information we collect does not enable us to identify any website visitor personally. No individual data or personal information is stored in our cookies.

Measuring website usage (Google Analytics)

We use Google Analytics software to collect information about how you use investni.com. We do this to help make sure the site is meeting the needs of its users and to help us make improvements, for example improving site search.

Google Analytics stores information about:

  • the pages you visit on investni.com
  • how long you spend on investni.com
  • how you got to the site
  • what you click on while you’re visiting the site

We do not collect or store your personal information (eg your name or address). We do not allow Google to use or share our analytics data.

Google Analytics sets the following cookies:

Cookie name Purpose of the cookie Expires
_ga This helps us count how many people visit investni.com by tracking if you've visited before 2 years
_gid This helps us count how many people visit investni.com by tracking if you've visited before 24 hours
_gat Used to manage the rate at which page view requests are made 1 minute

OpenSource analytics

Cookie name Purpose of the cookie Expires
_pk_id.xxx This helps us count how many people visit investni.com by tracking if you've visited before using PiWik analytics 1 month
_pk_ses.xxx This helps us count how many people visit investni.com by tracking if you've visited before using PiWik analytics 24 hours
__cfduid This helps us count how many people visit investni.com by tracking if you've visited before using GetClicky analytics 10 months

JavaScript detection

We measure how many people visiting investni.com are using JavaScript.

Cookie name Purpose of the cookie Expires
HasJavascript This tells us if you are browsing investni.com while running JavaScript Session cookie (when browser is closed)

Country redirection

Cookie name Purpose of the cookie Expires
InvestNICountryRedirect This tells us if you are visiting investni.com from outside Northern Ireland and allows us to redirect you to a regions specific landing page Session cookie (when browser is closed)

Chat

Cookie name Purpose of the cookie Expires
whoson This service enables websites to engage with visitors via text based chat whilst they are on the site. It stores a unique identifier to recognise visitors on return visits. 31 December 2020
ASP.NET_SessionId Session cookie (when browser is closed)

Investni.com

Cookie name Purpose of the cookie Expires
_dc_gtm_UA-xxxxxxxx Allows us to use Google Tag Manager to control and manage content for investni.com 1 day
__storejs__   1 day
AnalyticsBrowserSession   3 years
AnalyticsBrowserSessionId   3 years
AnalyticsBrowserSessionStarted   3 years
AnalyticsSessionId   3 years
iqiorderId1   1 day
MachineId   3 years
MarketPlaceSearchUrl   Session cookie (when browser is closed)
SessionId   3 years
SuccessMessage   1 month

People who avail of Invest NI support for business

Invest NI provides a variety of support for businesses (as detailed on this Website). The vast majority of data that Invest NI collects to deliver this support is commercial non personal data.

However, we need to hold the details of those who have requested access to our support (programmes and services) in order to provide them with the necessary advice or support. The data that we keep on record may include your name, company name, job title, contact details, business experience, business financial information and business details, for example, sole traders, partnerships, owners and senior management of limited companies.

When a customer is registering to become an Invest NI client we will conduct a due diligence check and will collect details about an individual’s business related activities (such as bankruptcy, court judgements, criminal or civil proceedings) and also information to verify your identity (photographic) and address.

On occasion, Invest NI may also support potential clients in their UK visa applications to assist in promotional fact finding visits to Northern Ireland. In doing so we may collect personal details (such as date of birth, home address) as these are necessary for the visa application process as determined by the UK Home Office Visa and Immigration division.

On occasion we may create a 'pen pic' profile of customers for example, to brief senior management, ministers or potential investors prior to any meetings with you. This data may have been provided by you, or it may have been obtained from social media platforms (such as LinkedIn or Facebook) or publicly available sources (such as Companies House and other business-related resources, the World-Wide-Web, publications and news articles).

Invest NI events

When you attend an Invest NI event, we will need your name, contact details and for certain events, your payment information. We will use this information solely for the purpose of administering the event. If you register for an event that is being hosted in partnership with other organisations, we will make this clear at registration and we will share your registration information with the partners. We may also include a list of attendees at the event as part of any information pack.

If you are attending an event where Invest NI is arranging travel and accommodation we will need to collect information to facilitate this (such as passport details). It is likely that this information will be shared with our contracted facilitator for travel (Select Travel).

If you are a speaker at an Invest NI event, we will publically promote your involvement through social media platforms such as Twitter, Facebook, LinkedIn, Instagram or Google+, our email newsletters to our newsletter subscribers, and on our website. This data may continue to be processed by social media platforms after the event has ended.

Marketing and promotional activities

We will only send you marketing information if you have consented for us to do so. You can withdraw your consent at any time by selecting the ‘unsubscribe’ link within each email. We will never sell your personal data.

When conducting promotional activities Invest NI will capture photographs and videos that identify people. Our legal basis for this activity is in the exercise of our official authority (the promotion of Invest NI role and remit). We will ensure that attendees are fully aware of the photography taking place and ensure that individuals have an option not to appear within a photograph. Images taken for promotional purposes will be shared with media outlets, our economic development partners, used on our websites and promoted through social media platforms. These images will be retained in line with our retention and disposal schedule however if you wish an image of you to be removed at any time please contact dpo@investni.com .

Invest NI also engages in lead generation or prospecting activity to promote Northern Ireland and attract businesses to Northern Ireland. This mainly focusses on corporations but as part of this activity we will collect information on key decision makers such as a company’s owners and senior management team, including name, job title and contact details. This may be collected from:

  • Mutual acquaintances.
  • Public sources, for example social media platforms (such as LinkedIn or Facebook) or publicly available sources (such as Companies House and other business-related resources, the World-Wide-Web, publications and news articles).
  • Business cards, promotional materials, brochures and attendee lists associated with sector specific conferences or events available for the public and businesses to participate in.

This information is placed on our CRM system and is kept in line with our records retention and disposal schedule (PDF).

Business support team

You can contact our Business Support Team through 0800 1814422, by live chat, e-mail or a web contact us form. If you contact this team, the details you give us which may include your name, contact details and your postcode will be added to our CRM system and kept for a period of 10 years, in line with Invest NI’s records retention and disposal schedule (PDF).

We will also make a file note of your query and add this file note to our CRM system. If you opt in to receive direct marketing during a telephone call, we will make a record of this consent within a file note, to ensure that we have evidence after the call recording is deleted.

Your telephone call may be recorded for training and quality purposes to help assist your business. These calls are kept for a period of two years and are then deleted.

Invest NI also hosts and operates a Live Chat service, which we use to handle customer enquiries in real time. If you use our Live Chat service we will collect your name, email address, telephone number, postcode and the contents of your Live Chat session. This information will be retained for 10 years and will not be shared with any other organisations except as noted below.

During a Live Chat session, you can request a transcript of the conversation when you provide your email address at the start of your session; or when prompted at the end. If the service that your enquiry relates to is provided by another public body, such as a local Council, please note that we will share your data with the relevant body to address your query.

CCTV

We are the data controller for the CCTV operated within the Invest HQ building within Bedford Square. This CCTV is maintained for security purposes and is managed under the facilities contract by Serco.

We are also the data controller for the CCTV operated on Invest NI owned business parks. The purpose is assist in the prevention and detection of crime; assist with the identification, apprehension and prosecution of offenders; prevent anti-social behaviour and nuisance (Public Safety) and protect Invest NI owned property/assets.

Images are retained for a period of 30 days or longer if Invest NI is in discussions with a law enforcement agency in respect of disclosure.

Collecting data on customer employees

In our dealings with some customers, we will likely collect details on key contacts within the company to allow us to build and maintain a relationship and deliver our services. This will include name, job role, and contact details. This information is placed on our CRM system and is kept in line with our records retention and disposal schedule (PDF).

To ensure proper governance in the use of public funds, at times, in the appraisal and payment of financial grants that include labour costs, we will require customer in receipt of financial grants to provide us with details of their employees. Depending upon the type of support, this may include name, employee reference number, national insurance number, salary, contracted hours, timesheets, training details or a CV. This information is held in line with our records retention and disposal schedule (PDF).

Data provided by others

For some collaborative programmes, one lead partner is required to complete an application form that may include some personal data of the other partners (such as name, company name, job title, contact details and business experience). On these occasions we will ask that the lead partner make the others aware of the data they are providing to us and we will also ensure that those individuals are notified of this privacy notice within one month.

Collecting data on contractors, suppliers and professional advisors

During and after the procurement process we collect data on employees within organisations who bid /deliver services for us under contract. This will include name, job title and contact details to allow us to manage the contract delivery. We may also collect relevant experience information to assess suitability for certain procurement exercises.

Invest NI uses a Finance System provided by Oracle. This system contains supplier data such as names, contact details, bank details and payment records. Oracle Consulting Services (OCS) provides technical support which on occasion involves access to the system from technicians based in India. Standard contractual clauses are implemented as an appropriate safeguard under GDPR for the international transfer of personal data.

This information is held in line with our records retention and disposal schedule (PDF).

Sharing data

To deliver a service we may need to share your information with:

  • Department for the Economy.
  • Other agencies involved in economic development activities (such as local Councils, other government bodies, public agencies).
  • Organisations that deliver our programmes (known as external delivery organisations).
  • Invest NI's professional advisers, consultants and contracted suppliers working on Invest NI's behalf, who are subject to obligations of confidence
  • Invest NI overseas offices, if required for the programme you are participating on, such as a trade mission.

For effective public governance and auditing purposes Invest NI may need to share your data with its sponsor body, the Department for the Economy, the Department of Finance and the European Commission. For business improvement (evaluation) purposes we may also share your data with Invest NI’s professional advisers, consultants and contracted suppliers working on Invest NI’s behalf, who are subject to obligations of confidence.

As required by law, we may disclose information to government bodies and law enforcement agencies for their enforcement purposes.

Invest NI will not sell your personal information.

Processing data outside Europe

To deliver a service it may be necessary to the transfer data outside the European Economic Area (EEA) to our overseas offices. To see the locations of these offices, click on this link: www.investni.com/about-us/where-we-are.

It may also be necessary to transfer data to allow attendance at overseas trade missions in other territories where we do not have an office.

Overseas offices have restricted access to Invest NI’s CRM system. This allows access to high level details of all companies on the system (such as name, address and contact details). Further access to business information is only granted on a case by case basis when a business requirement has been identified.

In order to deliver a service in a country outside the EEA we may engage the services of an external contractor in that area. In doing so, Invest NI will ensure that the contract in place will include the model EU clauses to enable the compliant transfer of any personal data required to deliver the service.

Invest NI uses a Finance System provided by Oracle. This system contains supplier data such as names, contact details, bank details and payment records. Oracle Consulting Services (OCS) provides technical support which on occasion involves access to the system from technicians based in India. Standard contractual clauses are implemented as an appropriate safeguard under GDPR for the international transfer of personal data.

Retaining personal data

Invest NI will not retain data longer than is necessary to fulfil the purposes for which it was collected or as required by applicable laws or regulations. Information will be stored and then destroyed in line with our records retention and disposal schedule (PDF).

Your rights

Your rights

This section details your rights and the circumstances in which they apply in relation to the personal information we process about you.

To exercise any of these rights please send an email to dpo@investni.com . To learn more about these rights, please visit the ICO website.

Right to be informed

Transparency is a key requirement of data protection law. You have the right to be informed about the collection and use of your personal data. This privacy notice is designed to provide you with the information needed to allow you to see how and why Invest NI uses your personal data. Further details of specific uses of your data may also be supplied in online forms, frequently asked questions and physical application forms where the information is being collected.

Right to access the data we hold on you

You also have the right to ask for the personal data that we hold about you to increase your awareness of and allow you to verify the lawfulness of the processing. To protect your privacy we may ask you to verify your identity.

Right to have your data rectified if it is inaccurate

If you believe that personal data we hold on you is inaccurate or misleading then you have the right to request that it is rectified.

Right to erasure

In some circumstances you can ask for your personal information to be deleted, for example:

  • Where your personal information is no longer needed for the reason it was collected in the first place.
  • Where you have removed your consent for us to use your information, where there is no other legal reason for Invest NI to use it.
  • Where there is no legal reason for the use of your information.

Please note that we cannot delete your information where:

  • We are required to have it by law.
  • It is necessary to perform our functions as a public body.
  • It is necessary for legal claims

It is envisioned that the right to erasure will be limited due to the legal reason the vast majority of personal data is processed by Invest NI is in the exercise of its 'official authority' i.e. following the requirements of legislation.

Right to have your data restricted or blocked from processing

In certain circumstances if you raise a complaint on how we have handled your personal data, you may also request that we 'restrict processing', meaning that the data will be preserved from further processing 'as evidence' either while we investigate your complaint or to support your complaint to the ICO.

Right of data portability

In some circumstances, where you have provided your personal data directly to us that is processed by automated means and is done so purely on the basis of your consent, you will have the right to obtain and reuse your personal data in an electronic format for your own purposes across different services.

Right to object to direct marketing

You have an unconditional right to object to direct marketing at any time. As noted within this privacy notice, Invest NI will not send you direct marketing without your consent and you can withdraw your consent at any time selecting the 'unsubscribe' link that appears in the footer of every email newsletter we send.

Right to object to processing of your personal data

You have an unconditional right to object to direct marketing at any time. As noted within this privacy notice, Invest NI will not send you direct marketing without your consent and you can withdraw your consent at any time selecting the 'unsubscribe' link that appears in the footer of every email newsletter we send.

Contacting us

To contact Invest NI with a data protection query regarding the processing of your personal data, or to exercise any of your rights noted above, please send an email to dpo@investni.com or write to:

Data Protection Officer
Information Governance Team
Invest NI
Bedford Square
Bedford Street
Belfast
BT2 7ES

Making a complaint about how your data is processed

If you are dissatisfied with any aspect of how Invest NI processes your personal data you can complain to the Information Commissioner's Office

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
 
T: 0303 123 1113 (local rate) or 01625 545 745
F: 01625 524 510
E: casework@ico.org.uk
W: https://ico.org.uk/

If you require a copy of this notice in an alternative format (including braille, disk, audio cassette or in minority languages to meet the needs of those who are not fluent in English), then please contact the Equality Team on:  
 
T: 028 9069 8273
E: equality@investni.com
Text phone: 028 9069 8273