Privacy Notice

Open Contracting Partnership is committed to ensuring that your privacy is protected. This privacy notice sets out how we collect and process any personal data when you use this website.

We may change this notice from time to time by updating this page. This notice is effective from 24th May 2018.

Data controller:Open Contracting Partnership, data@open-contracting.org, who are based in the USA.Contact us if would like a copy of the information held on you or if you believe that any information we are holding on you is incorrect or incomplete.

You have the following rights concerning this data:

  • Right to be informed, which is the purpose of this privacy notice
  • Right to Access, Rectification, Erasure, and to Restrict Processing. Note that the right to Erasure and Restrict Processing are balanced against our legitimate interests. Where relevant, you need to provide information to re-identify yourself from our pseudonymised data, see GDPR Article 11
  • Right to object to our processing.

Our supervisory authority is the ICO in the UK. You have the right to lodge a complaint with them.

We process personal data for the following purposes:

  • Understanding website visitor and traffic patterns
  • Understanding server behaviour

We rely on legitimate interests (GDPR Article 6(1)(f)) as the lawful basis for this processing. Details about the type of data, the purpose of the processing and legitimate interests, and the storage and retention of the data are set out below.

Understanding website visitor and traffic patterns

We collect data about your visits to the website, for the purpose of analysing how the website is used, so that we can improve it. We use Google Analytics for this.

Personal data we collect:

  • Your IP address
  • Referrer (what page you arrived at one of our web pages from)
  • Information about your device, OS and browser

We do not use this data to personally identify individuals, but it is possible that it could be used to do so, particularly if combined with other datasets.

Data processors: Google Analytics, Open Data Services Co-operative Limited

The data controller (Open Contracting Partnership) is based in the USA.

Data is transferred to Google Analytics, who may transfer data to third countries (non-EEA).

The data is kept indefinitely, in pseudonymised form.

Understanding server behaviour

We collect data about your visits to the website in server logs. This is for the purpose of debugging network issues, monitoring server usage, and identifying malicious usage.

Personal data we collect:

  • Your IP address
  • User agent (information about the OS and browser that you use)
  • Referrer (what page you arrived at one of our web pages from)

We do not use this data to personally identify individuals, but it is possible that it could be used to do so, particularly if combined with other datasets.

Data processors: Open Data Services Co-operative Limited, Bytemark.

The data controller (Open Contracting Partnership) is based in the USA.

The data is kept indefinitely.