Green Heat Network Fund: privacy notice
Updated 19 April 2024
Applies to England
© Crown copyright 2024
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at https://www.gov.uk/government/publications/green-heat-network-fund-ghnf/green-heat-network-fund-privacy-notice
This Privacy Policy was updated on 19 April 2024.
This privacy notice sets out how the Green Heat Network Fund (GHNF) collects, uses and protects any information that you submit to us as part of applying for GHNF funding using the GHNF application process. It is made under Articles 13 and 14 of the UK General Data Protection Regulation (‘UK GDPR’).
It is important that you read this notice, together with any other privacy notice that is provided to you on specific occasions when we are collecting or processing your personal data, so that you are aware of how and why we are using it.
This notice does not form part of any contract. This notice can be updated at any time; we will inform you if the way we handle your personal data changes.
Personal data is any information that can be used to identify a living individual, either on its own, or in combination with other pieces of data. Examples of personal data include your name and address.
The term ‘processing’ in relation to personal data, means any operation or set of operations which is performed on personal data or on sets of personal data (whether or not by automated means, such as collection, recording, organisation, structuring, storage, alteration, retrieval, consultation, use, disclosure, dissemination, restriction, erasure or destruction).
This Privacy Policy relates to personal data processed as part of the delivery of the Green Heat Network Fund (‘GHNF’), a capital grant fund managed by a consortium of entities for the provision of funding for the commercialisation and construction of low and zero carbon (LZC) heat networks. For the avoidance of doubt, Gemserv Limited and DESNZ are the data controllers and will have full access to all data that you submit when enquiring about the GHNF, within your GHNF application form, supplementary information, the GHNF application process, GHNF communication activities and data collected through cookies on our website for the purposes set out in this privacy policy.
Gemserv and DESNZ have entered into a joint controller relationship with the parties listed in the ‘Who are we’ section for the delivery of the GHNF.
The Department for Energy Security and Net Zero (DESNZ), Triple Point Heat Investments Limited, AECOM, Amberside Advisors, Asteros Advisers and Lux Nova Partners will be able to access all information you submit when enquiring about the GHNF, within your GHNF application form, supplementary information and the GHNF application process. DESNZ, Triple Point Heat Investments Limited, and Amberside Advisors will be able to access the personal data for GHNF communication activities. The above-mentioned parties, in addition to the UKIB and BHIVE Delivery Partner, will also have access to application data, monitoring and reporting data of GHNF-funded projects.
We are committed to ensuring that your personal data is protected and will make sure to use it only in accordance with this privacy policy.
This website is not intended for children, and we do not knowingly collect data relating to children. This website is also not intended to cover personal data processed for recruitment or employment purposes.
This policy is effective from 19 April 2024.
Who are we?
Full company details of Gemserv are as follows:
Gemserv Limited
Company number: 04419878
77 Gracechurch Street
London
EC3V 0AS
If you have any questions about this privacy policy or our privacy practices, please email us at dataprivacy@gemserv.com.
Full company details of DESNZ are as follows:
Department for Energy Security and Net Zero (DESNZ, previously BEIS)
3-8 Whitehall Place
Westminster
London
SW1 2EG
If you have any questions about this privacy policy or our privacy practices, please email us at dataprotection@energysecurity.gov.uk.
Gemserv and DESNZ are joint data controllers with the following parties:
- Triple Point Investment Management LLP – company number OC321250 located at 1 King William St, London EC4N 7AF
- AECOM Ltd – company number 1846493 located at Aldgate Tower, 2 Leman Street, London E1 8FA
- Amberside Advisors Ltd – company number 6078852 located at Clubfinance House, 64-66 Queensway, Hemel Hempstead, Hertfordshire, HP2 5HA
- Asteros Advisors Ltd – company number 11914766 located at 20-22 Wenlock Road, London, England, N1 7GU
- Lux Nova Partners LLP – company number 5510349 located at The Stanley Building, 7 Pancras Square, Kings Cross, London N1C 4AG
As part of these joint data controller arrangements, the parties process personal data in relation to the delivery and management of the GHNF. The arrangements cover the following processing activities:
- the processing of names and business contact details of staff of applicants and prospective applicants to GHNF to deliver GHNF funding and to undertake contract and performance management
- the processing of names and business contact details of interested individuals to provide send news, updates, invites to events or other communications
- the processing of names and business contact details of individuals responding to surveys for evaluation and research purposes
With these arrangements, the following responsibilities will apply:
- delivery and maintenance of privacy notice referenced in the GHNF Application Form and provided on the GHNF website: DESNZ and Gemserv
- due diligence of software providers which parties use to process the GHNF personal data locally and appropriate contractual data processing arrangements in place: DESNZ and Gemserv
- maintaining a single point of contact for data subject requests: Gemserv
- notification of a personal data breach originating from or affecting the usage of GHNF databases to the Information Commissioner’s Office and, if appropriate, data subjects: DESNZ and Gemserv
- establishing retention periods for personal data processed for GHNF purposes: DESNZ and Gemserv
- conducting data protection impact assessments on relevant GHNF databases: DESNZ and Gemserv
The data we collect
The data to be collected will include different types of personal information that is defined as personal data under the UK General Data Protection Regulation and Data Protection Act 2018 and any other relevant legislation (together ‘Data Protection Legislation’).
It does not include aggregated data where your identity details have been removed and the data cannot be attributed to you any longer.
We may collect the following personal information from you, either via your application for GHNF funding for your project, through information gathering channels deployed at events and online, as collected through the GHNF website, as provided through enquiries, or as otherwise voluntarily provided:
| Purpose of processing | Data types | Retention period | Lawful basis |
|---|---|---|---|
| To process your GHNF application (including storing and scoring applications) | Name Salutation Role and organisation Email address Physical address Phone number |
7 years from the end of the GHNF project | Performance of a task in the public interest (processing applications for GHNF funding within the UK’s decarbonisation policy) |
| To respond to enquiries in relation to the GHNF | Name Salutation Email address Company name Phone number Details of your query |
7 years from the end of the GHNF project | Performance of a task in the public interest (responding to enquiries and claims in relation to GHNF funding within the UK’s decarbonisation policy) |
| To provide information to subscribers to GHNF press releases, newsletters and invites to attend events | Name Salutation Email address Company name Phone number Details of your preferences |
Duration of the GHNF project (unless you opt-out) | Performance of a task in the public interest (supporting applications for GHNF funding within the UK’s decarbonisation policy) Consent (separate subscribers) |
| To conduct surveys and for evaluation and research purposes | Name Salutation Email address Company name Phone number |
1 year from the end of the GHNF project | Consent (as received from each party) |
| Fulfilling reporting obligations on the GHNF project | Name Salutation Company name Email address Physical address Phone number |
Duration of the GHNF project | Performance of a task in the public interest (supporting applications for GHNF funding within the UK’s decarbonisation policy) |
| To ensure the security and operation of the GHNF website | IP address Device ID Browsing time |
Up to 2 years (see cookie notice below) | Performance of a task in the public interest (supporting applications for GHNF funding within the UK’s decarbonisation policy) |
| To assess projects that may be suitable for debt support from the UKIB | Name Salutation Role and organisation Email address Physical address Phone number |
Duration of the GHNF project | Consent (received from applicants in writing) |
We may also conduct data processing to comply with a legal obligation, when for example, we need to retain your data for a certain time for financial obligations, or where requested by law enforcement or other public authorities.
We will neither collect, nor process any special categories of personal data in the GHNF application form.
Should you provide any special category data to us through any additional information supplied either to support your application, or for the purpose of accessing our events and resources it will only be processed for the specific purpose that it was supplied.
We may also collect personal data through cookies. Please see the Cookie notice for more information, as well as our cookie banner.
How we use your data
We require the information covered in The data we collect for the following purposes:
- evaluating projects for GHNF funding
- processing GHNF applications
- evaluation, development and continuous improvement of GHNF and heat network policies, such as the application process, assessment process, engaging with third party investors etc
- sending press releases, news and invites to events in relation to GHNF and DESNZ heat decarbonisation policy
- providing reporting to DESNZ
- fulfilling statutory and regulatory reporting obligations
- responding to your enquiries and assisting with handling them
- creating sampling frameworks and contacting for further evaluation and research purposes
- evaluating or researching the effectiveness of the GHNF as a whole
- carrying out surveys in relation to GHNF funding and application process
Legal basis for processing
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use it for a new purpose, we will notify you and we will explain the legal grounds which allows us to do so.
We will only use your personal data when the law allows us to. We process the data covered in The data we collect primarily to allow us:
- to perform a task carried out in the public interest or in the exercise of the official authority given to us; or
- with your consent
Automated decision making
We will not make any automated decision making (making a decision solely by automated means without any human involvement) or profiling (automated processing of personal data to evaluate certain conditions about an individual) that would have a ‘legal or similarly significant effect’ for individuals.
When we will share your personal data
We will share your personal data information with third-party service providers, where they are contracted by us to provide specific services in order to facilitate delivery of our services for the purposes set out in How we use your data.
We will allow the following third parties to process your personal data:
- back-office service providers for data storage services, including Microsoft SharePoint and Microsoft Dynamics
- the web hosting provider for the GHNF website
- email management providers for assisting with email queries, including Microsoft
- research organisations for research, evaluation and statistical archiving purposes – including for the construction of sample frames
- the GHNF organisations and entities, which include Gemserv Limited, the Department for Energy Security and Net Zero (DESNZ), Triple Point Heat Investments Limited, AECOM, Amberside Advisors, Asteros Advisers, Lux Nova Partners
- the UKIB for the purpose of assessing GHNF applications for UKIB loan eligibility
- BHIVE Delivery Partner for the purpose of assessing GHNF applications for third-party funding
We take steps to ensure our partners protect your personal data in keeping with the UK GDPR, including:
- we do not allow our service providers to use your personal data for anything else besides delivering the service they provide to us
- other partners, including the other GHNF organisations and entities and the UKIB, are responsible for the use of your personal data for their own purposes. You will need to review their privacy notices separately
We may also need to share your personal data with Public Authorities (e.g. the police) or to otherwise comply with the law, which are separately responsible for how they use your personal data.
We will only store your personal data within the UK. We will take steps to ensure your privacy rights are protected and your personal information is treated in a way that is consistent with and which respects Data Protection Legislation, by putting in place appropriate measures, including requiring appropriate security measures.
We may also need to share your personal data with Public Authorities (such as the police) or to otherwise comply with legal requests.
How long do we retain your personal information?
We will only retain your personal information as for as long as necessary to fulfil the purposes we collected it for, including for the purpose of satisfying any legal or reporting requirements.
These retention periods are provided in accordance with The data we collect.
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
Your rights over your personal information
It is important that the personal information we hold about you is accurate and current. If you believe that any information, we are holding about you is incorrect or incomplete, please email dataprivacy@gemserv.com or dataprotection@energysecurity.gov.uk.
In accordance with the data protection legislation, under certain circumstances, you have the right to:
- request access to your personal data: this enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it
- request correction of your personal data: this enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us
- request erasure of your personal data: this enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it
- object to processing of your personal data: this enables you to object to the processing of your personal data in certain circumstances, including where data is processed under public task or legitimate interests
- request restriction of processing your personal data: this enables you to ask us to suspend the processing of your personal data in specific circumstances
- request transfer of your personal data to you or to a third party: we will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format
- right to withdraw consent, where consent has been given to the processing
You have the right to withdraw your consent being contacted by the UKIB. To do so, please contact enquiries@tp-heatnetworks.org.
You also have the right to withdraw your consent to data sharing with the UKIB. To do so, please contact enquiries@tp-heatnetworks.org. If you wish to limit the information in your application submission that should be shared with UKIB (for example, commercially sensitive information relating to third parties), please contact apply@tp-heatnetworks.org.
You can opt out of receiving marketing from us by:
- contacting us at dataprivacy@gemserv.com or dataprotection@energysecurity.gov.uk
- using the ‘unsubscribe’ link in emails
You will not have to pay a fee to exercise any of your rights. However, we may charge a ’reasonable fee’ for the administrative costs of complying with a request if it is manifestly unfounded or excessive, or if an individual requests further copies of their data. If we refuse your access to personal data, we will explain the reasons in our response to you.
If you wish to exercise any of your rights, please contact us using the details in the ‘Contact details of the Data Controllers’ below.
Additionally, you can opt-out to emails from us at any time by contacting dataprivacy@gemserv.com or dataprotection@energysecurity.gov.uk.
Contact details of the data controller
The data controllers for your personal data are Gemserv Limited and the Department for Energy Security (DESNZ).
Gemserv Limited
If you have any questions about this privacy policy or our privacy practices, please email us at dataprivacy@gemserv.com.
You can also contact us at:
Gemserv Limited
77 Gracechurch Street
London
EC3V 0AS
020 7090 1000
Department for Energy Security (DESNZ)
If you have any questions about this privacy policy or our privacy practices, please email us at dataprotection@energysecurity.gov.uk.
You can also contact us at:
DESNZ Data Protection Officer
Department for Energy Security and Net Zero
3-8 Whitehall Place
London
SW1A 2EG
Complaints
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.
Contact the ICO:
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
Changes to this privacy notice
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial changes. We will also notify you in other ways from time to time about the processing of your personal data.
We keep this privacy policy under regular review to make sure it is up to date and accurate. We may change it at any time and will inform you if any substantial changes take place.
Change of purpose
We will process your personal data for the purpose for which we collected it. If we process your personal data for another purpose that we reasonably consider to be compatible with the original purpose, we will notify you and explain the legal basis which allows us to do so.
Cookie notice
Use of cookies in connection with the websites and our cookie policy
Cookies are small files saved to your computer’s hard drive that track, save and store information about your interactions and usage of our website. Cookies allow us to store your preferences to correctly present content, options or functions throughout our website. They also enable us to see information like how many people use our website and what pages they tend to visit.
Cookies have different durations. Temporary cookies, such as those only valid for your browsing session, expire when you close your browser. Permanent cookies, however, will remain on your computer for a longer period until you delete them. We may also use the information gathered from cookies to compile reports to improve the functionality and user experience of our website.
Cookies can be set by different actors. Typically, this occurs in 2 cases:
- first-party cookies: these are cookies set by this website for our visitors
- third-party cookies: these which are typically set by other websites whose features run on our website (such as social media plugins). We do not use third party cookies on the GHNF website
Cookies have different purposes. We typically use the following cookies:
- functional cookies: cookies that are strictly necessary to enable you to move around our websites or to provide certain basic features. This includes basic features such as playing videos, and storing information already entered (for example username, language, location, consent preferences). These include:
- complianz cookies (cmplz_stats, cmplz_choice, cmplz_id, cmplz_marketing, cmplz_policy_id): these record which cookies you consent to. Max duration: 365 days
- statistics: these are cookies that monitor the popularity of sections of our website. We do not deploy statistics cookies on the GHNF website
- marketing: these cookies may track users and display advertisements relevant to them but can also include some otherwise functional cookies. We do not deploy marketing cookies on the GHNF website
Your rights in relation to cookies
We generally only place functional cookies, which are mandatory for this website to operate. We conduct this under the performance of a task in the public interest, for the website to function. You may also set your browser settings to attempt to reject all cookies or manually delete the cookies and may still use this website.