Home Energy Advice and Retrofit Team: Privacy Notice
This notice sets out how East Lindsey District Council will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).
This notice sets out how East Lindsey District Council will use your personal data, and your rights as Lead Administrator for the South East Lincolnshire Councils Partnership. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).
This notice relates to data collected under the Local Energy Advice Demonstrator Competition (known as Home Energy Advice and Retrofit Team) operated by East Lindsey District Council, which is funded by the Department for Energy Security and Net Zero and administered by Nottingham City Council as the accountable body for the Midlands Net Zero Hub.
YOUR DATA
We will process the following personal data:
Customers:
- Address and details of property receiving the energy advice and retrofit measures under any relevant scheme- Details about the advice given and any retrofit measures under any relevant scheme installed at the property, including type, size and cost
- Contact address (if not the property receiving the advice and retrofit measures under any relevant scheme
- Address and details of property offered, but not receiving, the advice and retrofit measures under any relevant scheme - Your name
- Household income and any other scheme eligibility information including benefits checks and evidence of council tax discounts
- Any financial contribution you make towards any retrofit measures under any relevant scheme
- Details about the expected energy, carbon and cost savings expected to be delivered by the installation, including pre- and post-installation property EPC details where appropriate
- Email address
- Phone number
Purpose
The purpose(s) for which we are processing your personal data is to support the delivery and administration of the Home Energy Advice and Retrofit scheme
Delivery and administration of the Scheme may require linking of your data to other data sets held by East Lindsey District Council or the Department for Energy Security and Net Zero (DESNZ)
DESNZ will be conducting an evaluation of the Scheme. This may include you being contacted to take part in further research. Where the research involves processing of personal data in addition to that already collected for delivery of the Scheme, you will be given the opportunity to opt-in to that research at the point of contact.
Your data may also be used for statistical, research and fraud prevention purposes.
Legal basis of processing
The legal basis for processing your personal data is:
· Article 6(1) (e) UK GDPR Public task: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. Public task processing is necessary for the performance of a task carried out in the public interest and based on legislation. For this scheme that means:
· Energy Efficiency (England and Wales) (Private Rented Property) Regulations 2015 as ELDC has authority to inspect and ensure compliance with EPC ratings in order to improve energy efficiency ratings and contribute to a reduction in climate change. ELDC is the enforcement authority for private rented properties - S.34 above Act.
· Housing Act 2004 Part 1: Housing Conditions Improvements - Section 11 & 12.
· As a local authority we also have wider responsibilities delegated to us under the Social Care Act 2012 to assist persons who are or may be in fuel poverty.
· The Localism Act 2011 provides all local authorities with a general power of competence that gives them the legal capacity to do anything that an individual can do that is not specifically prohibited (i.e. does not break other laws). This power gives implied power to the authority to share data in furtherance of its lawful public task activities.
The specific public task is the delivery, administration and evaluation of, as well as statistical, research and fraud prevention purposes relating to, the Scheme, a government funded scheme aiming to raise the energy efficiency of low energy performance homes (those rated at EPC Band E, F or G), including off-gas grid and hard to reach homes. Funding is provided to Local Authorities who offer advice to consumers and manage the delivery of retrofit measures in homes.
Consent: Use of your personal data to contact you to take part in further research will be subject to your consent. ELDC will ask you if you consent to be contacted and pass your details to DESNZ for this purpose if you agree. They will then contact you in order to carry out their research. If you do not agree to this then please tell us. If you later change your mind and no longer wish to be contacted for research then please tell us and we will inform them.
Recipients
Your personal data will be shared with:
- East Lindsey District Council
- Everwarm Ltd/ YES Energy Ltd and their subcontractors
- other relevant organisations such as but not limited to: National Energy Action (NEA), National Energy Foundation (NEF), Age UK, Lincs Digital, Citizens Advice, your own Energy Supplier.
- The Department for Energy Security and Net Zero (DESNZ) and its contractors for delivery, administration and evaluation of the scheme, statistical, research and fraud prevention purposes.
- Ofgem and delivery partners of central and local government home energy schemes such as the Energy Company Obligation, Great British Insulation Scheme, Boiler Upgrade Scheme, Smart Export Guarantee and Renewable Heat Incentive
Your personal data may also be shared with other Government departments where necessary.
Information will be shared securely using Egress.
We may share your data if we are required to do so by law, for example by court order or to prevent fraud or other crime.
As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Public Sector Partnership Services Ltd.
Personal data shared with DESNZ will be stored on their IT infrastructure and will therefore also be shared with their data processors Microsoft and Amazon Web Services.
Personal data shared with Everwarm/YES Energy Ltd will be stored on their IT infrastructure and therefore will also be shared with their data processors Sureserve Group plc/another contractors data processors.
Retention
Your personal data will be stored securely by us for a maximum period
· 10 years by ELDC
· Your personal data will be stored securely by DESNZ for a maximum period of 25 years following the close of the Scheme. DESNZ may choose to store anonymised data beyond this period. Please see their privacy policy here for details of how they use and manage your data.
Automated decision making
Your personal data will not be subject to automated decision making by ELDC.
YOUR RIGHTS
You have the right to request information about how your personal data are processed, and to request a copy of that personal data.
You have the right to request that any inaccuracies in your personal data are rectified without delay.
You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.
You have the right to request that your personal data are erased if there is no longer a justification for them to be processed. We are unlikely to be able to erase your data if you have been awarded a grant as this will be needed to comply with the grant conditions with DESNZ.
You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.
You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.
You have the right to object to the processing of your personal data.
You have the right to withdraw consent to the processing of your personal data at any time, where processing is based on your consent. For this scheme your consent is only required for further research purposes as detailed above.
HOW TO MAKE A REQUEST
If you wish to make a request associated with any of the rights listed above, contact information.management@e-lindsey.gov.uk or DESNZ using the contact details at the bottom of this notice.
INTERNATIONAL TRANSFERS
Your personal data will not be processed outside the UK and European Economic Area (EEA), or by an international organisation.
As personal data shared with DESNZ will be stored on their IT infrastructure, and shared with their data processors Microsoft and Amazon Web Services, your data may be transferred and stored securely outside the European Economic Area. Where that is the case it will be subject to equivalent legal protection. Please contact DESNZ for details of how they protect your data.
COMPLAINTS
If you consider that your personal data has been misused or mishandled, you may make a complaint to the data Protection officer at ELDC in the first instance (at the email address below). If not satisfied with the response you can complain to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Email: casework@ico.org.uk
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
CONTACT DETAILS
The data controllers for your personal data are East Lindsey District Council and the Department for Energy Security and Net Zero (DESNZ).
You can contact the East Lindsey District Council Data Protection Officer at:
Email data.protection@e-lindsey.gov.uk
You can contact the DESNZ Data Protection Officer at:
DESNZ Data Protection Officer
Department for Energy Security and Net Zero
1 Victoria Street
London
SW1H 0ET
Email: dataprotection@desnz.gov.uk