Notice

Heat network sector: survey on the impact of COVID-19 - privacy notice

Published 13 November 2020

© Crown copyright 2020

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/heat-network-sector-survey-privacy-notice/heat-network-sector-survey-on-the-impact-of-covid-19-privacy-notice

We are seeking feedback on the impacts your business currently experiences during the pandemic as we enter the heating season. We are keen to understand how COVID-19 challenges are being managed, and how they may be placing new or enhancing existing pressures on heat networks.

This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).

Your data

We will process the following personal data:

  • name
  • email
  • contact email address

The legal bases for processing your personal data are:

  • processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, such as the exercise of a function of the Crown, a Minister of the Crown, or a government department
  • the exercise of a function conferred on a person by an enactment
  • the exercise of a function of either House of Parliament
  • or the administration of justice.

Recipients

We may share the results with the devolved administrations (the governments of Northern Ireland, Scotland, and Wales). We may also share information at an aggregated level with industry representatives without identifying individuals or organisation.

As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Microsoft and Amazon Web Services.

Retention

We will only retain your personal data for as long as it is needed for the purposes of the survey and the COVID-19 response.

In general, this means that we will only hold your personal data for a minimum of 1 year and a maximum of 7 years.

Automated decision making

Your personal data will not be subject to automated decision making.

Your rights

You have the right to request:

  • information about how your personal data are processed
  • a copy of that personal data
  • that any inaccuracies in your personal data are rectified without delay
  • that any incomplete personal data are completed, including by means of a supplementary statement
  • that your personal data are erased if there is no longer a justification for them to be processed
  • in certain circumstances (for example, where accuracy is contested) that the processing of your personal data is restricted

You have the right to object to:

  • the processing of your personal data where it is processed for direct marketing purposes
  • the processing of your personal data

International transfers

As your personal data is stored on our IT infrastructure and shared with our data processors Microsoft and Amazon Web Services, it may be transferred and stored securely outside the European Economic Area. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.

Contact us or make a complaint

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. Contact the Information Commissioner:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

0303 123 1113 casework@ico.org.uk

If you make a complaint to the Information Commissioner it doesn’t prejudice your right to seek redress through the courts.

The data controller for your personal data is the Department for Business, Energy & Industrial Strategy (BEIS).

You can contact the BEIS Data Protection Officer at:

BEIS Data Protection Officer
Department for Business, Energy and Industrial Strategy
1 Victoria Street
London
SW1H 0ET

Email: dataprotection@energysecurity.gov.uk.

Back to top