Cambridgeshire Sustainable Warmth Scheme GDPR Privacy Notice

Privacy notice

This notice sets out how the Department for Business, Energy and Industrial Strategy (BEIS) will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (GDPR).

This notice relates to data collected under the Cambridgeshire Sustainable Warmth Scheme, operated by Cambridge City Council, which is funded by the Sustainable Warmth Scheme (the Scheme) run by BEIS.

YOUR DATA

The data Your data will be shared with BEIS by Cambridge City Council. We (BEIS) will process the following personal data:

Customers:

  • Address and details of property receiving the energy efficiency or low-carbon heating installation(s) under the Scheme
  • Details about the installation(s) installed at the property under the Scheme, including type, size and cost
  • Contact address (if not the property receiving the installation(s))
  • Address and details of property offered, but not receiving, installation(s) under the Scheme
  • Your name
  • Household income and any other scheme eligibility information
  • Any financial contribution you have made towards the installation(s) under the Scheme
  • SAP or RdSAP assessments with scores
  • Email address (optional)
  • Phone number (optional)

Installers:

  • Your name
  • Relevant accreditation and registration information
  • Contact address
  • Email address
  • Phone number
  • Details of installations delivered under the Scheme
  • Whether directly contracted or sub-contracted to install installations under the Scheme
  • The number of employees in your organisation
Purpose

The purpose(s) for which we are processing your personal data is to support the delivery and administration of the Scheme.

Delivery and administration of the Scheme may require linking of your data to other datasets held by the Department for Business, Energy and Industrial Strategy (BEIS).

BEIS will be conducting an evaluation of the Scheme. This may include you being contacted to take part in further research. Where the research involves processing of personal data in addition to that already collected for delivery of the Scheme, you will be given the opportunity to opt-in to that research at the point of contact.

Your data may also be used for statistical, research and fraud prevention purposes.

Legal basis of processing

The legal basis for processing your personal data is:

Public task: Processing is necessary for the performance of a task carried out in the public interest.

The specific public task is the delivery, administration and evaluation of, as well as statistical, research and fraud prevention purposes relating to, the Scheme, a government funded scheme aiming to raise the energy efficiency of low energy performance homes (especially those rated at EPC Band E, F or G). The Government funding is provided to Local Authorities who set up arrangements for consumer engagement and the delivery of installations in homes.

Consent: Use of your personal data to contact you to take part in further research will be subject to your consent.

Recipients

Your personal data will be shared with:

  • Cambridge City Council
  • Your installer
  • Relevant district Local Authority (If applicable)
  • The Department for Business, Energy and Industrial Strategy (BEIS) and its contractors for delivery, administration and evaluation of the Scheme, statistical, research and fraud prevention purposes.
  • Ofgem and delivery partners of central and local government home energy schemes such as the Energy Company Obligation and Renewable Heat Incentive

Your personal data may also be shared with other Government departments where necessary.

We may share your data if we are required to do so by law, for example by court order or to prevent fraud or other crime.

Personal data shared with BEIS will be stored on our IT infrastructure and may therefore also be shared with our data processors Microsoft and Amazon Web Services. As personal data shared with BEIS will be stored on our IT infrastructure, and may be shared with our data processors Microsoft and Amazon Web Services, your data may be transferred and stored securely outside the UK and European Economic Area. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.

Retention

Your personal data will be stored securely by BEIS for a maximum period of 25 years following the close of the Scheme. BEIS may choose to store anonymised data beyond this period.

YOUR RIGHTS

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.

You have the right to request that any inaccuracies in your personal data are rectified without delay.

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.

You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.

You have the right to object to the processing of your personal data.

You have the right to withdraw consent to the processing of your personal data at any time, where processing is based on your consent.

HOW TO MAKE A REQUEST

If you wish to make a request associated with any of the rights listed above, contact BEIS using the contact details at the bottom of this notice.

COMPLAINTS

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Tel: 0303 123 1113

Email: casework@ico.org.uk

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

CONTACT DETAILS

You can contact the BEIS Data Protection Officer at:

BEIS Data Protection Officer
Department for Business, Energy and Industrial Strategy
1 Victoria Street
London
SW1H 0ET

Email: dataprotection@beis.gov.uk