Private rented sector: Retrofit phoneline privacy notice
Published 14 April 2023
This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).
Your data
We will process the following personal data:
- your name, address, email address and phone number
- details about your property, tenancy status and household income
- your unique website reference number, where applicable
- we may also collect accessibility data where you wish to disclose it which could include special category data
Purpose
We will process your personal data for the following purpose(s):
- effectively deliver the service
- to send you the information provided by the service including measures discussed and available grant schemes
- to monitor and evaluate the success of service
- to improve the service
Legal basis of processing
The legal basis for processing your contact details, property information, unique website reference number and any other information you send us via email is that:
- the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, such as the exercise of a function of the Crown, a Minister of the Crown, or a government department
- the exercise of a function conferred on a person by an enactment
- the exercise of a function of either House of Parliament
- or the administration of justice
The public task is providing customers with free energy improvement advice.
The legal basis for processing your personal data to evaluate the service and for asking for your special category data (such as accessibility requirements) is explicit consent. Customers will be asked for their consent, at the end of the call, to be contacted by the department and its delivery partners to take part in the evaluation of the service. Whilst delivering the service, at the beginning of the call, customers will be asked whether they are happy to disclose any accessibility issues they may have.
Customers can withdraw their consent at any point by calling 0800 098 7950 or by emailing esnz@cust-serv-details.com.
Recipients
Your personal data will be shared by us with our external evaluation delivery partners, once contracted.
As your personal data will be stored on our IT infrastructure it will also be shared with our data processors.
Retention
Your personal data will be kept by us for 3 years (the current lifetime of the service) plus an additional 3 years, after the contract terminates for evaluation purposes.
Automated decision making
Your personal data will not be subject to automated decision making.
Your rights
You have the right to:
- request information about how your personal data are processed, and to request a copy of that personal data
- request that any inaccuracies in your personal data are rectified without delay
- request that any incomplete personal data are completed, including by means of a supplementary statement
- request that your personal data are erased if there is no longer a justification for them to be processed
- in certain circumstances (for example, where accuracy is contested) request that the processing of your personal data is restricted
- object to the processing of your personal data where it is processed for direct marketing purposes
- withdraw consent to the processing of your personal data at any time
- object to the processing of your personal data
- request a copy of any personal data you have provided, and for this to be provided in a structured, commonly used, and machine-readable format
International transfers
Your personal data will be processed in the UK. As your personal data is stored on our IT infrastructure (CBAS), and shared with our data processors it may be transferred and stored securely outside the European Economic Area. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.
To exercise your rights contact the Data Protection Officer using the contact details below.
Complaints
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an UK independent regulator. The Information Commissioner can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Email: casework@ico.org.uk
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
Contact details
The data controller for your personal data is the Department for Energy Security and Net Zero (DESNZ). You can contact the DESNZ Data Protection Officer at:
Data Protection Officer
Department for Energy Security and Net Zero
1 Victoria Street
London
SW1H 0ET
Email: dataprotection@beis.gov.uk