Nottingham Energy Partnership and NEPes Privacy Policy
About this policy
Our projects help people and communities to meet real needs for both environmentally sound and affordable energy services – to be able to help these people we have to process personal data.
We’re committed to processing this data lawfully, safely and securely and have stringent data security and data protection practices in place.
This policy gives a broad overview of how the organisation as a whole processes personal data.
References to ‘we’ or ‘us’ are to the NEP, registered charity number 1091513, registered company number, 4257637. Our registered offices are at Queens Walk Community Centre, Queens Walk, The Meadows, Nottingham, NG2 2DF.
Why we process data
There are many reasons why we process personal data, including but not limited to:
· Giving advice on keeping warm at home and energy efficiency improvements.
· Administering grants, funds and loans.
· Providing mentoring or advice to groups or individuals on topics like community energy, low carbon planning and community development.
· Organising and holding events, workshops and consultations.
· Carrying out energy audits, technical assessments or measuring energy usage.
· Carrying out research such as surveys and interviews.
· Contacting others working in the energy sector and those who we work with collaboratively to influence policy.
· Updating people about the work we are doing through our e-newsletter.
· Evaluating and improving the services we offer and the work that we do.
· Supporting human resources and administrative functions – like processing payments and recruiting staff.
The lawful basis for processing
The lawful basis for processing your data will depend on how you are interacting with us and what your relationship is with us. Below is a short overview of the different lawful basis we are using to process personal data:
· Consent: In some situations we will ask for your consent to process your data.
· Contractual obligation: Because we have a contractual obligation, for example to provide you with something you have purchased from us or contracted us to provide.
· Statutory obligation: we are obliged by law to process certain types of personal data, for example, processing salary information for taxation.
· Our legitimate interests: as detailed below.
Providing comprehensive advice through the Nottinghamshire Healthy Housing Service
In order to provide comprehensive advice on energy it is necessary for us to collect certain personal information so that we are able to give accurate information and relevant support.
Maintaining relationships with relevant business contacts
This includes people working within our sector or with whom we have a professional relationship. We may process personal information in order to inform people of our work, events and activities and coordinate collaborative work.
Human resources
It’s necessary for us to process certain types of personal data in order to manage our relationships with our employees, volunteers and trustees. We also consider it in our legitimate interests to process personal data for the purposes of recruitment.
General operation and administration
This includes responding to solicited requests and enquiries, complying with internal and external governance procedures, financial reporting and communicating for purposes such as facilities management.
Carrying out research to support our charitable objectives
We consider it to be within our legitimate interests to invite people to participate in research projects that work towards achieving our charitable mission.
Contacting people to inform them about services of benefit to them
This includes contacting people to let them know about services, specific activities, projects or events which may be of direct benefit to them or where they are likely to have a professional interest e.g. contacting neighbourhood planning groups to inform them about financial support for their activities.
We have balanced our legitimate interests against the rights and freedoms data subjects have enshrined in law through the General Data Protection Regulations and consider that they have a minimal privacy impact. However, you have the right to opt out or object to our processing of your data on the basis of legitimate interests. You can do so by emailing info@nottenergy.com and we’ll respond within 30 days.
Sharing and storing data
In some situations, for some projects we will share your information with other organisations. This may include the funder or other project partners (e.g. to obtain a grant or help from them). We will make it clear whether we intend to share your data when we obtain it from you.
We take data security very seriously. We store and process most of the personal data we hold on our secure, internal system which is hosted on our servers.
When we destroy or delete your data we will do so securely.
Contact us with any questions
We’re happy to answer any questions you have about how we are using your data. You can ask us to:
· Tell you what data we have about you.
· Stop using your data in a certain way.
· Withdraw your consent for us to use your data (if consent is the lawful basis for processing).
· Object to our definition of our legitimate interests or opt out of us processing your data on this basis.
· Delete your data.
· Correct your data.
You can do any of the above by contacting us at info@nottenergy.com or ringing us on 0115 985 9057.
If you aren’t happy about how we have used your data, you can make a complaint by either calling the office on 0115 985 9057 (please ask to speak to a Senior Manager) or writing to us at info@nottenergy.com
This can also be found on our website: https://nottenergy.com/contact/privacy-policy/