SSE Renewables Privacy Notice
How is
your personal information transferred outside the EEA?
We are SSE plc (SC117119) of Inveralmond House, 200 Dunkeld
Road, Perth, Perthshire, PH1 3AQ.
We use your information as further explained in this Privacy
Notice. We will be the “controller” of the information you provide to us.
In addition to SSE plc, for the specific business areas
outlined below, other SSE and any associated Joint Venture companies will also be
controllers of your personal information:
·
SSE
Renewables Limited of Inveralmond House, 200 Dunkeld
Road, Perth, PH1 3AQ
·
SSE
Generation Limited of No.1 Forbury Place, 43 Forbury Road, Reading, United
Kingdom, RG1 3JH
·
SSE Renewables Onshore Windfarm Holdings Limited – of Millennium House, 25 Great Victoria
Street, Belfast, Northern Ireland, BT2 7AQ
·
SSE Renewables Offshore Windfarm Holdings Limited – of Inveralmond
House, 200 Dunkeld Road, Perth, PH1 3AQ
·
SSE Renewables International Holdings Limited – of Inveralmond
House, 200 Dunkeld Road, Perth, PH1 3AQ
·
SSE Renewables Wind (Ireland) Holdings Limited – Red Oak South, South
County Business Park, Leopardstown Dublin 18, Dublin 18, Dublin, D18w688,
Ireland
·
SSE
Renewables Services (UK) Limited of Millennium House, 25 Great Victoria Street, Belfast, Northern
Ireland, BT2 7AQ
·
Beatrice Offshore
Windfarm Limited
of Inveralmond House, 200 Dunkeld Road, Perth, PH1
3AQ
·
Greater Gabbard Offshore
Winds Limited
of No.43 Forbury Road, Reading, United Kingdom, RG1 3JH
·
Clyde Wind Farm
(Scotland) Limited
of Inveralmond House, 200 Dunkeld Road, Perth, PH1
3AQ
·
Stronelairg Wind Farm Limited of Inveralmond
House, 200 Dunkeld Road, Perth, PH1 3AQ
·
Dunmaglas Wind Farm Limited of Inveralmond
House, 200 Dunkeld Road, Perth, PH1 3AQ
·
Seagreen Wind Energy Limited, of No 1. Forbury Place, 43 Forbury Road, Reading, RG1 3JH
·
Doggerbank Offshore Wind Farm
Project 1 Projco Limited, of No 1. Forbury Place, 43 Forbury Road, Reading, RG1 3JH
·
Doggerbank Offshore Wind Farm
Project 2 Projco Limited, of No 1. Forbury Place, 43 Forbury Road, Reading, RG1 3JH
·
Doggerbank Offshore Wind Farm
Project 3 Projco Limited, of No 1. Forbury Place, 43 Forbury Road, Reading, RG1 3JH
·
Doggerbank Offshore Wind Farm
Project 4 Projco Limited, of No 1. Forbury Place, 43 Forbury Road, Reading, RG1 3JH
·
SSE Viking Limited of The
Gutters’ Hut, North Ness Business Park, Lerwick, Shetland, ZE1 0LZ
·
SSE Pacifico K.K, of Roppongi Grand Tower, 3-2-1 Roppongi
Minato-ku, Tokyo 106-0032 Japan
·
Ossian Offshore Wind Farm Limited of Inveralmond
House, 200 Dunkeld Road, Perth, PH1 3AQ
Each of which are, together with SSE plc, referred to as “SSE,” “we” or “us” throughout
this Privacy Notice.
What information do
we need?
The following are types of information we may collect about
you:
·
Contact
data (such as first name, last name, any previous names, username or similar signifier,
email address, mobile number);
·
Payment
data (such as payment IDs and voucher codes);
·
Financial
data (such as bank account details (e.g. sort code, account number, name,
account type) and payment card details);
·
Transaction
data (such as details about payments to you and from you and other details of
products and services you have purchased from or provided to us);
·
When
using our website, your IP address, location information and browsing information;
·
CCTV
footage and other information obtained through electronic means;
·
Your
preferences for communications e.g., by telephone, fax, SMS, email, or post;
·
Details
of your participation in surveys;
·
Details
from your social media accounts, including your interactions with us;
·
Details
of any vulnerabilities so we can adapt our services appropriately; and
·
If
you contact us by telephone, we may record the call for training and service
improvement purposes and make notes in relation to your call.
·
As
part of our community commitments, we may need proof of your address and proof
of further education course acceptance.
As a renewable generator, SSE works closely with
third-parties, sub-contractors, and other regulatory bodies.
Why do we need it?
We need to know your basic personal data
to be able to develop and construct our generation portfolio, maintain, and
operate our electricity generation assets and process applications to our
community funds. In particular, to communicate and
conduct business with you. We may also collect specific information in order to enter into legal contracts with you.
Legal basis for
processing
To process and use your personal information lawfully, we
rely on the following legal basis:
•
for
the performance of a contract with you or to take steps at your request prior
to entering into such a contract;
•
to
comply with our legal obligations;
•
for
our legitimate interests in ensuring effective business development, operational
management and internal administration, document retention/storage, compliance
with regulatory guidance, exercise or defence of legal claims, service improvement
and communicating with you; and
•
consent
(where we market to you via email or SMS, or where we store vulnerability
information).
The personal data is processed by our staff to:
·
To
enable us to make payments, issue refunds and/or return credit balances to you;
·
To
check and verify your bank account details;
·
To
engage with stakeholders, manage and build relationships, and communicate
effectively while recording engagements. For example, receiving and providing
insights on SSE’s position in the energy market, understanding stakeholders'
views on issues related to SSE, and communicating with them regarding campaigns
and events, including on social media;
·
Perform
our obligations under any contract we have with you;
·
Manage
our relationship with you through support activities;
·
Provide
you with any information that we are required to send you in accordance with
our regulatory or legal obligations;
·
Detect,
prevent, investigate, or remediate, crime, illegal or prohibited activities or
to otherwise protect our legal rights, including liaison with regulators and
law enforcement agencies, etc.;
·
Communicate
with you by telephone, mail, email, or other electronic means and obtain
feedback on how we can improve our services;
·
Monitor,
measure, improve and protect the content of our websites and services to
provide enhanced and personal user experience for you;
·
Deliver
joint content and services with third parties with whom you have a separate relationship;
·
For
the purposes of conducting checks on suppliers and other third parties, which
relate to activities such as anti-money laundering, countering terrorist
financing and other unlawful acts (for example, illegal trafficking and
environmental crime) and anti-bribery and corruption requirements;
·
Conduct
enquiries into land ownership and occupation (including land value/compensation
and conducting land surveys);
·
Communicate
with landowners and occupiers in regard to developments;
·
To
communicate with you in connection with development consultations (including
report generation);
·
Process
applications, make funding decisions and manage grant awards as part of our
community benefit grant funding process.
Who do we share it with?
We may share your information with:
·
External
third parties – such as third-party suppliers (including but not limited to
payment providers, payment system companies, technology providers), banks,
regulators.
·
Regulatory
authorities we may be subject to for the purposes of demonstrating compliance
with applicable law and regulations;
·
Our
Corporate Auditors for the purposes of demonstrating compliance with financial
and regulatory frameworks;
·
Our
sub-contractors for the purposes of carrying out work on our behalf;
·
Our
service providers for the purposes of providing services to us;
·
Other
SSE group companies for the purposes of account administration, payment
management and strategy development; and
·
Debt
collection agencies for the purposes of debt management.
·
The
Planning Inspectorate or any other relevant planning authority in order for us to comply with applicable laws in regard to
land developments.
·
Such
organisations and individuals may include the community advisory panel, local
authority or an organisation employed by SSE to evaluate grant applications. We
may also share information with other organisations providing matched funding.
·
We
may include names and photos, or videos of groups or individuals funded by our
community benefit grant funding process.
Marketing
Unless you have asked us not to, we may contact you in
writing, by phone and (where you have consented) via email or SMS with
information on products, services, and rewards that we, other companies within
the SSE group, and occasionally our carefully selected partners identified at
the time we collect your information, offer. We may use third parties to send
marketing communications.
Unless you have asked us not to, we may also use your email
address to show you digital advertisements via search engine results pages or
on other websites.
Unless you have asked us not to, we may profile your data
to provide you with marketing and offers that are relevant to you. If you opt
out of profiling, we will still run analysis that includes your data, but any
decisions or marketing output that result from that analysis will not be used
to market to you. You will be sent generic marketing that may not be relevant
to you.
Where you partially complete and/or abandon any information
inputted into our website and/or other online forms, we may use this
information to contact you to remind you to complete any outstanding
information and/or for marketing purposes.
To opt out of receiving marketing messages, or to object to
our use of profiling for direct marketing purposes, please contact us at any
time verbally, by email or in writing using the details in the “Contacting Us” section below.
How long
will we keep it?
We will keep your information only for as long as necessary
depending on the purpose for which it was provided.
When determining the relevant retention periods, we will take into account factors including:
• legal
obligation(s) under applicable law to retain data for a certain period of time;
• (potential)
disputes; and
• guidelines
issued by relevant data protection authorities.
Otherwise,
we securely erase your information once this is no longer needed.
International Data
Transfers – How is your personal data transferred outside of the European
Economic Area (EEA)?
We, or a third party who we share personal information
with, may transfer, host, store and/or handle your personal information outside
of the EEA. For example, where we and/or our service providers (including
servers) are based outside of the EEA.
The EEA consists of countries in the European Union,
Iceland, Liechtenstein, and Norway and are all considered to have equivalent
laws in data protection and privacy. During the Brexit transition phase and
adequacy assessment, the UK including Northern Ireland, are also considered to
have equivalent laws in data protection and privacy.
We will only permit this to happen if adequate
safeguards have been put in place to protect your personal information. For
countries outside the UK, this means that we will:
(a)
ensure that the country in which your personal information will be handled has
been deemed “adequate” by the European Commission under Article 45 of the
General Data Protection Regulation (GDPR); or
(b)
include standard data protection clauses approved by the European Commission
for transferring personal information outside the EEA and the UK into our
contracts with those third parties (these are the clauses approved under
Article 46.2 of the GDPR).
Your rights
You have the following rights regarding your information:
|
Rights |
What
does this mean? |
|
1. Right
to be informed |
You have
the right to be provided with clear, transparent, and easily understandable
information about how we use your personal data and your rights. This is why we
are providing you with the information in this Privacy Notice. |
|
2. Right of access |
You have the right to obtain access to your
personal data (if we are processing it) and certain other information (similar to that provided in this Privacy Notice). This is
so you are aware and can check that we are using your personal data in
accordance with data protection law. |
|
3. Right
to rectification |
You are
entitled to have your personal data corrected if it is inaccurate or
incomplete. |
|
4. Right to erasure |
This is also known as ‘the right to be
forgotten’ and, in simple terms, enables you to request the deletion or
removal of your personal data where there is no compelling reason for us to
keep it. This is not a general right to erasure; there are exceptions. |
|
5. Right
to restrict processing |
You have
rights to ‘block’ or suppress further use of your personal data in certain
circumstances. When processing is restricted, we can still store your
personal data, but may not use it further. |
|
6. Right to data portability |
You have the right to obtain and reuse your
personal data in a structured, commonly used, and machine-readable format in
certain circumstances. In addition, where certain conditions apply, you have
the right to have such information transferred directly to a third party. |
|
7. Right
to object to processing |
You have
the right to object to certain types of processing in certain circumstances. In
particular, the right to object to the processing of your personal data based
on our legitimate interests or on public interest grounds; the right to
object to processing for direct marketing purposes (including profiling); the
right to object to the use of your personal data for scientific or historical
research purposes or statistical purposes in certain circumstances. |
|
8. Right to withdraw consent |
If you have given your consent to anything we
do with your personal data, you have the right to withdraw your consent at
any time (although if you do so, it does not mean that anything we have done
with your personal data with your consent up to that point is unlawful). This
includes your right to withdraw consent to us using your personal data for
direct marketing. |
For more information on your rights or if you would like to
exercise any of your rights, you are welcome to get in touch using the details
in the “Contacting Us” section below.
Contacting us
If you would like to contact us in relation to your rights
or if you are unhappy with how we’ve handled your information, you may contact us
by sending an email to: renewablesdps@sse.com.
If
you would like to contact our Data Protection Officer, you may do so using the
following details:
Email:
GroupDPO@sse.com
Address: Data Protection Officer, No. 1 Forbury Place, 43 Forbury Road, Reading, RG1
3JH
If you are not satisfied with our response to any complaint
or believe our processing of your information does not comply with data
protection law, you can make a complaint to the relevant Data Protection
Office:
Data Protection
Commissioner
Dublin Office
21 Fitzwilliam Square
Dublin 2
D02 RD28
Data Protection
Commissioner
Portarlington Office
Canal House
Station Road
Portarlington
R32 AP23 Co. Laois
Information
Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire,
SK9 5AF
Personal Information Protection Commission
Kasumigaseki Common
Gate West Tower 32nd Floor,
3-2-1, Kasumigaseki,
Chiyoda-ku,
Tokyo, 100-0013,
Japan