BEIS Privacy Statement

Last updated: 22 July 2020

This notice sets out how BEIS (the Authority) and OVO Energy Limited (the Delivery Contractor) will use the personal data they collect and process as joint data controllers, and the rights of the data subjects identified in Schedule 1 of the Agreement for Joint Controllers. It is made under Articles 13 and/or 14 of the General Data Protection Regulation (GDPR).

Your Data

The data

OVO Energy Limited will process the following personal data

  • Name, date of birth, postal address, telephone number, email address, previous heating system, number of household occupants, household tenure, household floor space, number of rooms, property archetype and images of prospective participants and participants. Data will also be collected on the participants heat usage.
  • Contact details and addresses of members of the public may also be processed during use of the Home Suitability Model and for the awareness raising events.
  • Names, business telephone numbers and email addresses and office location of staff at BEIS and OVO Energy Limited will be processed as necessary to deliver the services outlined in the ITT and to undertake contract and performance management. The Contract itself will include the names and business contact details of staff of both BEIS and OVO Energy Limited involved in managing the Contract. BEIS will process the following personal data
  • Names, business telephone numbers and email addresses and office location of OVO Energy Limited and their subcontractors will be processed by the Authority to undertake contract and performance management.
  • Anonymised Personal Data will be transferred from OVO Energy Limited name to BEIS at the end of the Project.

BEIS will process the following personal data

  • Names, business telephone numbers and email addresses and office location of OVO Energy Limited and their subcontractors will be processed by the Authority to undertake contract and performance management.
  • Anonymised Personal Data will be transferred from OVO Energy Limited name to BEIS at the end of the Project.

Purpose

The purposes for which OVO Energy Limited is processing personal data are:

Personal Data on prospective participants and participants will be processed for research, recruitment, installation, system design, quality assurance, monitoring, preparation of project outputs.

Personal Data from members of the public may be processed during the dissemination phase to provided tailored responses from the Home Suitability Model and to contact attendees for awareness raising events.

Personal Data on members of staff from BEIS, the OVO Energy Limited and its subcontractors will be processed by OVO Energy Limited for contract and performance management.

BEIS will process data for the following purposes:

Personal Data on members of staff working for the Contractor and their subcontractors will be processed for contract and performance management.

Lawful basis of processing

The legal basis for processing your personal data is:

BEIS will rely on the following legal bases for processing:

a) Consent: BEIS will rely on consent as the relevant legal basis of processing of prospective participant and participant data. b) Contract: BEIS will use the “contract” legal basis for processing to process Personal Data of members of staff of OVO Energy Limited and their subcontractors for the purpose of contract and performance management.

OVO Energy Limited will use the following legal bases for processing Personal Data:

a) Consent: OVO Energy Limited must ensure that all communications requesting the provision on Personal Data allow for the data subject to provide clear, affirmative, informed, freely given and unambiguous consent, which requires a positive ‘opt-in.’ OVO Energy Limited will have mechanisms in place to ensure that consent is recorded and shown through an audit trail. OVO Energy Limited will also use consent as the basis for processing data from members of the public using the Home Suitability Model or attending the awareness raising events. b) Contract: OVO Energy Limited will use the “Contract” legal basis for processing Personal Data form members of their own staff, of their subcontractors and BEIS. This data will be processed for the purpose of contract and performance management of the Electrification of Heat Demonstration Project Management Contractor contract.

Recipients

Personal Data will be collated from OVO Energy Limited by Energy Systems Catapult (the Management Contractor). The data as well as being shared with Energy Systems Catapult and subcontractors it will also be shared with ICF Consulting Services Limited (the Evaluation Contractor) who will have access to the data as part of its Electrification of Heat project evaluator role. Personal Data will be shared by OVO Energy Limited with BEIS in an anonymised format at the end of the project. As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Microsoft and Amazon Web Services.

Retention

Anonymised data may be stored by HM Government for up to five years, after which point it will be destroyed. Personal Data will be stored by OVO Energy Limited in accordance with its Privacy Policy a copy of which may be found at https://www.ovoenergy.com/privacy-policy.

Automated Decision Making

Your personal data will be subject to the following automated decision making: N/A. Where personal data has not been obtained from the data subject Anonymised Personal Data will be transferred from OVO Energy Limited to BEIS at the end of the Project. Anonymised data may be stored by HM Government for up to five years, after which point it will be destroyed.

Data Subject Rights

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.

You have the right to request that any inaccuracies in your personal data are rectified without delay.

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.

You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.

Where the personal data is processed on the basis of consent, you have the right to withdraw consent to the processing of your personal data at any time.

Where the processing is based on consent, or where it is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the data subject’s request prior to entering into a contract:

You have the right to request a copy of any personal data you have provided, and for this to be provided in a structured, commonly used and machine-readable format.

International transfers

As your personal data is stored on our IT infrastructure and shared with our data processors Microsoft and Amazon Web Services it may be transferred and stored securely outside the European Economic Area. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.

Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner's Office 

Wycliffe House Water Lane 

Wilmslow Cheshire SK9 5AF 

0303 123 1113 

Email: [email protected] 

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Contact Details

The data controller for your personal data is the Department for Business, Energy & Industrial Strategy (BEIS) and OVO Energy Limited.

You can contact the BEIS Data Protection Officer at:

BEIS Data Protection Officer Department for Business,

Energy and Industrial Strategy 1 Victoria Street London

SW1H 0ET

Email: [email protected]

You can contact the OVO Energy Limited Data Protection Officer at:

Data Protection Officer

OVO Energy Limited

Temple Quay

1 Rivergate

Bristol

BS1 6ED

Email: [email protected]