Notice

Hospital and Small Emitters / Ultra-Small Emitters survey for the UK ETS evaluation: privacy notice

Published 19 June 2023

© Crown copyright 2023

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/hospital-and-small-emitters-hse-and-ultra-small-emitters-use-survey-privacy-notice/hospital-and-small-emitters-ultra-small-emitters-survey-for-the-uk-ets-evaluation-privacy-notice

This notice is provided to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 (DPA) to provide transparency in how we process and use personal data collected for the ‘Hospital and Small Emitters (HSE) and Ultra-Small Emitters (USE) survey for the UK ETS evaluation’, and your rights. It is made under Articles 13 and 14 of the UK GDPR.

The data covered relate to individuals, who are listed as the point of contact for their employer in their employer’s application for HSE or USE status for any UK ETS installations they may operate.

As a representative for a UK ETS covered HSE or USE, this privacy notice only relates to how the Department for Energy Security and Net Zero (DESNZ) uses your data in connection with facilitating a survey of HSE and USE opt-out scheme participants.

DESNZ and the national environmental regulators are the independent data controllers for your data. The national environmental regulators are:

  • Environment Agency (EA)
  • Scottish Environment Protection Agency (SEPA)
  • Natural Resources Wales (NRW)
  • Northern Ireland Department for Agriculture, Environment and Rural Affairs (DAERA)

This privacy notice does not cover regulators and how they use your data. You should also read your regulator’s privacy notice to understand how they use your data. They are also required to manage your personal data in a way that meets the UK GDPR and DPA.

Your data

We will process the following personal data:

  • first name and surname (middle name optional)
  • email address (business or personal)
  • contact information (business or personal)

No special category data will be collected or processed.

These are data which you supplied to the regulators are part of your application process for the HSE or USE scheme. These data have been shared with DESNZ by the regulators for the purpose of running the HSE and USE survey only.

Purpose

The purpose for which we are processing your personal data is to run a representative survey of participants of the UK ETS HSE and USE opt-out schemes. The purpose of this research is to gather information on the experiences and perspectives of HSE and USE scheme participants in order to support the ongoing evaluation of the performance of the UK ETS by the UK ETS Authority.

This is to allow DESNZ and other UK ETS Authority members to evaluate the scheme to understand its impact and to inform future government policy.

For the purpose of UK ETS evaluation research, the legal basis of processing your personal data is:

Public task: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, such as the exercise of a function of the Crown, a Minister of the Crown, or a government department; the exercise of a function conferred on a person by an enactment; the exercise of a function of either House of Parliament; or the administration of justice. For the purposes of this project, the public task relates to collecting evidence on the performance of the UK ETS to create a better evidence base for policy decision-making in DESNZ and the wider UK ETS Authority.

Recipients

For the purpose of evaluation research your personal data will be shared with CAG Consultants, which has been commissioned by DESNZ to conduct UK ETS evaluation research, and their subcontractor, Winning Moves. DESNZ is the data controller of your personal data. CAG Consultants and Winning Moves are the data processors.

Please refer to the CAG Consultants Privacy Notice and the Winning Moves Privacy Notice for further information on how they process data.

As your personal data will be stored on our IT infrastructure it will also be shared with our data processors Microsoft and Amazon Web Services.

Retention

We will only keep your personal data for as long as required to facilitate the survey research.

Data processed for survey and research sampling purposes will be retained for up to 3 months following the conclusion of the evaluation project in March 2026 and subsequently destroyed.

Automated decision making

Your personal data will not be subject to automated decision making.

Updates to this notice

If this privacy notice changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. The ‘last updated’ date at the bottom of this page will also change and the revision to the Privacy Notice will be recorded alongside the date of change. If these changes affect how your personal data is processed, we will take reasonable steps to let you know.

Your rights

You have the right to:

  • request information about how your personal data are processed, and to request a copy of that personal data
  • request that any inaccuracies in your personal data are rectified without delay
  • request that any incomplete personal data are completed, including by means of a supplementary statement
  • request that your personal data are erased if there is no longer a justification for them to be processed
  • in certain circumstances (for example, where accuracy is contested) request that the processing of your personal data is restricted
  • object to the processing of your data
  • object to the processing of your personal data where it is processed for direct marketing purposes

International transfers

We design, build and run our systems to make sure that your data is as safe as possible at all stages, both while it’s processed and when it’s stored.

As your personal data is stored on our IT infrastructure and shared with our data processors Microsoft and Amazon Web Services, it may be transferred and stored securely in the UK and European Economic Area. Where it is the case that your personal data is stored outside the UK and EEA it will be subject to equivalent legal protection through the use of Model Contract Clauses.

Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113)
Email: casework@ico.org.uk

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Contact details

The data controller for your personal data is the Department for Energy Security and Net Zero (DESNZ).

Contact the DESNZ DPO:

DESNZ Data Protection Officer
Department for Energy Security and Net Zero
3-8 Whitehall Place
London
SW1A 2EG

Back to top