Notice

Hydrogen Allocation Round: privacy notice

Published 20 July 2022

This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).

Your Data

We will process the following personal data:

• names and contact details of lead contacts at applicant organisations
• names and contact details of key project personnel
• names and contact details of other parties which are relevant to the project
• names, contact details, age, qualifications, and experience of employees whose CVs are submitted as part of the bid
• data relating to criminal convictions for offences listed in the online application form on the applicant

Purpose

The purpose(s) for which we are processing your personal data is to support:

• our assessment of applications for HAR2
• monitoring of successful projects
• communications about HAR2
• longer term research and evaluation related to HAR2, for example surveys
• UK Infrastructure Bank (UKIB) in contacting you regarding your financing needs (if you have provided consent in your Expression of Interest (EOI) form)
• policy development and facilitating coordination in certain areas if relevant

Should you contact the enquiries service, we will be processing your personal data so that we can continue to liaise with you and your company about your projects that may apply to HAR2 for support.

Legal basis of processing

The legal basis for processing your personal data is that processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller under Article 6 the UK GDPR, such as:

• the exercise of a function of the Crown, a Minister of the Crown, or a government department
• the exercise of a function conferred on a person by an enactment
• the exercise of a function of either House of Parliament

In this case, our assessment of applications for HAR2.

If you have provided consent in your EOI form for UKIB to contact you and/or for your EOI form to be shared with UKIB, then the legal basis for processing your personal data is that you consent to the processing of your personal data for one or more specific purposes under Article 6 of the UK GDPR. Should you change your mind, you can withdraw consent at any time by contacting HAR2@energysecurity.gov.uk.

The processing of personal data relating to criminal convictions for offences listed in the online application form is not carried out under official authority, but is authorised because it meets one of the following conditions from Schedule 1 of the DPA 2018:

• protecting the public against dishonesty etc

11(1) This condition is met if the processing—

(a) is necessary for the exercise of a protective function,
(b) must be carried out without the consent of the data subject so as not to prejudice the exercise of that function, and
(c) is necessary for reasons of substantial public interest.

(2) In this paragraph, “protective function” means a function which is intended to protect members of the public against—

(a) dishonesty, malpractice or other seriously improper conduct,
(b) unfitness or incompetence,
(c) mismanagement in the administration of a body or association, or
(d) failures in services provided by a body or association.

Recipients

Your personal data will be shared by us with Jeremy Benn Associates Limited (JBA) and other third-party contractors appointed by DESNZ for the purposes of assessment, monitoring, communication, research and/or evaluation relating to HAR2. JBA are contracted by the UK government and are operating the online platform. They will not be assessing bids. 

Personal data will be shared with UKIB if you have provided consent in your EOI form for UKIB to contact you and/or for your EOI form to be shared with UKIB.

Personal data included in the EOI form may be shared with other governmental departments, our partner organisations, and the devolved administrations for the purposes of policy development and facilitating coordination in certain areas if relevant. This is in accordance with section 6 of the Data Protection Act 2018 - the sharing of personal data is necessary for the performance of tasks in the public interest or is necessary re the exercise of a function of the Crown, a Minister of the Crown or a government department.

As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Microsoft and Amazon Web Services. 

Retention

Your personal data will be kept by us for a period of 5 years following the end of HAR2, whether or not your application is successful or unsuccessful. In this case the end of HAR2 means the date on which the final payments are made under the scheme. Data shall be retained for the purposes of evaluating and developing the scheme. This may involve contacting you to participate in surveys as part of the evaluation of HAR2.

International transfers

As your personal data is stored on our IT infrastructure and shared with our data processors Microsoft and Amazon Web Services, it may be transferred and stored securely outside the UK. Where that is the case, it will be subject to equivalent legal protection through an adequacy decision, the use of Standard Contractual Clauses or a UK International Data Transfer Agreement.

Your rights

You have the right to:

• request information about how your personal data are processed, and to request a copy of that personal data
• request that any inaccuracies in your personal data are rectified without delay
• request that any incomplete personal data are completed, including by means of a supplementary statement
• request that your personal data are erased if there is no longer a justification for them to be processed
• in certain circumstances (for example, where accuracy is contested), request that the processing of your personal data is restricted
• object to the processing of your personal data where it is processed for direct marketing purposes
• object to the processing of your personal data

To exercise your rights please contact the Data Protection Officer using the contact details below.

Contact details

The data controller for your personal data is the Department for Energy Security and Net Zero (DESNZ). You can contact the DESNZ Data Protection Officer at:

DESNZ Data Protection Officer
Department for Energy Security and Net Zero
3-8 Whitehall Place
London
SW1A 2EG

Email: dataprotection@energysecurity.gov.uk

If you are unhappy with the way we have handled your personal data, please write to the department’s Data Protection Officer in the first instance using the contact details above.

Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.  The Information Commissioner can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Tel:0303 123 1113
Make a complaint

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Updates to this notice

If this privacy notice changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. The ‘last updated’ date at the bottom of this page will also change.

If these changes affect how your personal data is processed, we will take reasonable steps to let you know.