Consolidated System of European Registries (CSEUR) privacy notice
Updated 29 May 2019
Applies to England
CSEUR comprises the UK part of the EU Emissions Trading System Union Registry and UK Kyoto Protocol Registry. It is operated by the European Commission.
The Environment Agency is the:
- National Administrator of the UK part of the Union Registry
- Registry Administrator of the UK Kyoto Protocol Registry
We are the data controller for these services. A data controller determines how and why personal information is processed.
Our personal information charter explains:
- your rights
- what we do with your personal information
We are allowed to process your personal information because we:
- have official authority as the environmental regulator
- manage UK accounts in the CSEUR
We process your personal information so that we:
- comply with our legal obligations for opening and managing accounts in the CSEUR
- maintain the security and accuracy of the CSEUR
If you do not give us the information we ask for, you will not be able to:
- open or maintain a fully functioning account in the CSEUR
- hold the position of Authorised Representative or Additional Authorised Representative
What personal information we collect
Personal information we collect includes:
- your full name
- your date of birth
- your residential address
- your contact details (including business contact details)
- any criminal record
We collect this information about:
- the account holder or prospective account holder
- the contact person for an account holder or prospective account holder, where applicable
- nominated or approved account authorised representatives
- beneficial owners and directors of the account holder
What we do with your personal information
We use your personal information to:
- tell you about changes to law, policy or decisions that may affect you or your account
- keep your account up to date
We do not use your personal information to make an automated decision or for automated profiling.
We must comply with the confidentiality rules in Article 110 of the Registries Regulation 2013 that apply to CSEUR accounts.
Under Article 110 we may share your personal information with:
- the European Commission in its role as Central Administrator of the CSEUR
- other National Administrators in the CSEUR in relation to security issues
- credit reference or fraud prevention agencies
- national and international law enforcement and tax authorities and agencies
- competent national supervisory authorities
We will not share or disclose your personal information to any other party without your consent unless we are lawfully able or required to do so.
We will not put your personal information on a public register unless the account holder is a natural person, not a legal person. Where the account holder is a natural person, we will only place the natural person’s name and business details on a public register.
How long we keep your personal information
We keep your personal information for 5 years after the final account to which you were appointed is closed.
If your account was in the UK Kyoto Protocol Registry, we keep your personal information for 15 years after the account is closed or until any issue relating to the United Nations Framework Convention on Climate Change has been resolved.
Where your personal information is stored and processed
The Environment Agency and Shared Services Connected Ltd store and process your personal information on servers in the UK and within the European Economic Area.
We will not transfer your personal information outside the European Economic Area.
Contact
Our Data Protection Team gives independent advice. They monitor how the Environment Agency uses your personal information.
If you have questions or concerns about how we process personal information, or to make a complaint or request relating to data protection, please contact the Data Protection Team by post or email:
Data Protection Team
Environment Agency
Horizon House
Deanery Road
Bristol
BS1 5AH
Email: dataprotection@environment-agency.gov.uk
You can also make a complaint to the Information Commissioner’s Office (ICO).
The ICO is the supervisory authority for data protection legislation. The ICO website has a full list of your rights under data protection legislation.