Privacy Notice
Who this privacy notice applies to
This privacy notice covers the use of personal data relating to suppliers, consultees, stakeholders, members of the public, and website visitors by the following SSE group companies and associated joint venture companies:
· SSE Renewables Limited of Inveralmond House, 200 Dunkeld Road, Perth, PH1 3AQ
· Ossian Offshore Wind Farm Limited of Inveralmond House, 200 Dunkeld Road, Perth, PH1 3AQ
· Ossian Offshore Wind Farm Holdings Limited of Inveralmond House, 200 Dunkeld Road, Perth, PH1 3AQ
· SSE Renewables Offshore Windfarm Holdings Limited of Inveralmond House, 200 Dunkeld Road, Perth, PH1 3AQ
· SSE Services Plc of No.1 Forbury Place, 43 Forbury Road, Reading, RG1 3JH
· MC UK Offshore Wind Investment Limited (“Marubeni”) of 95 Gresham Street, London, EC2V 7AB
· CI IV Scotwind Holdco Ltd (“Copenhagen Infrastructure Partners”) of 4th Floor, 115 George Street, Edinburgh, EH2 4JN
What personal data do we process?
We collect and process the following personal data about you:
· Name, telephone number and Email address;
· Mailing address if you would like to stay in contact with you via post;
· Your interactions and correspondence with us, including but not limited to your views, opinions, response to surveys, concerns, and issues raised by you;
· Your attendance records if you attend a public consultation event in person or virtually;
· Your voice, images and photographs if you attend an in-person event where photography and videography take place or a virtual event where recording takes place;
· Bank account details for payment purpose if you are a supplier or we have a contract with you where payment is required;
· Your IP address, approximate location information and browsing information if you visit our websites;
· If you visit our offices or sites, CCTV footage and vehicle information for parking arrangement;
· Your communication preference, e.g., by telephone, email, or post;
· Details of any vulnerabilities or disabilities so that we can meet accessibility requirements;
· Details of your social media accounts if you reach out to or interact with us via social media platform;
Where do we obtain your personal data?
Most of the time, we obtain your details directly from you; other times, we obtain your details from the public domain such as Google search or land registry search.
Why do we process your personal data?
We process your personal data for the following purposes:
· Fulfil our legal and regulatory obligations such as stakeholder engagement and demonstrate compliance of such;
· Provide you with update newsletters and relevant information in relation to our activities and projects, including progress of initiatives, forthcoming developments, and opportunities to engage and consult;
· Invite you to events that may be of interest to you;
· Interact and correspond with you, obtain your feedback and views, and respond to your queries and concerns;
· Develop and construct our generation portfolio;
· Maintain, and operate our electricity generation assets;
· Enter into contracts with you and perform our contractual obligations;
· Detect, prevent, investigate, or remediate, crime, illegal or prohibited activities or to otherwise protect our legal rights, including liaison with regulators and law enforcement agencies, etc.;
· Monitor and measure browsing traffic of our websites and improve the content of our websites and services to provide enhanced and personal user experience for you;
· Conduct checks on suppliers and other third parties, which relate to activities such as anti-money laundering, countering terrorist financing and other unlawful acts (for example, illegal trafficking and environmental crime) and anti-bribery and corruption requirements;
· Conduct enquiries into land ownership and occupation (including land value/compensation and conducting land surveys); and
· Process applications, make funding decisions and manage grant awards as part of our community benefit grant funding process.
Legal bases for processing
In order to process and use your personal information lawfully, we rely on the following legal bases:
· for the performance of a contract with you or for entering into such a contract;
· to comply with our legal obligations;
· for our legitimate interests in ensuring effective business development, operational management and internal administration, document retention/storage, compliance with regulatory guidance, exercise or defence of legal claims, service improvement and communicating with you; and
· consent (where we send you updates and marketing newsletters via Email).
Who do we share it with?
We may share your information with:
· Regulatory authorities and government bodies we may be subject to for the purposes of demonstrating compliance with applicable law, regulations and/or enforcement actions;
· Our auditors for the purposes of demonstrating compliance with legal and regulatory requirements;
· Our contractors for the purposes of carrying out work on our behalf;
· Our service providers for the purposes of providing services to us, including but not limited third party providers carrying out surveys, organising engagement activities, and providing the necessary software tool;
· Our social media platforms and followers of our social media accounts; and
· Other SSE group companies for the purposes of business operation and administration, payment management and strategy development.
Marketing
Unless you have asked us not to, we may contact you in writing, by phone and (where you have consented) via email with information on products, services, and rewards that we, other companies within the SSE group, and occasionally our carefully selected partners identified at the time we collect your information, offer. We may use third parties to send marketing communications.
Unless you have asked us not to, we may also use your email address to show you digital advertisements via search engine results pages or on other websites.
If you have opted into our targeted advertising cookies when visiting our websites, we may profile your data to provide you with marketing and offers that are relevant to you. To opt out of target advertising, you can change your cookie settings using the cookie consent banner displayed on our websites.
To opt out of receiving marketing messages, please contact us at any time verbally, by email or in writing using the details in the “Contacting Us” section below.
How long will we keep it?
We store your personal data securely and will keep your data only for as long as necessary depending on the purpose for which it was provided. At the end of the such retention period, we will dispose of it by a secure method.
When determining the relevant retention periods, we will take into account factors including:
· duration of our projects for which your data is collected;
· legal obligation(s) under applicable law to retain data for a certain period of time;
· potential or actual disputes; and
· guidelines issued by relevant data protection authorities.
Otherwise, we securely erase your information once this is no longer needed.
International Data Transfers
Your personal data may be transferred to or processed in a country which is outside your resident country (this includes outside of the United Kingdom and European Economic Area (“EEA”)). This may include transfers to other companies within the SSE group, and to third parties.
We take organisational, contractual, and legal measures to ensure that adequate levels of protection have been implemented to safeguard your personal data such as:
Where the country has been granted an adequacy decision by the European Commission and/or the Information Commissioner in the UK. This means that the destination country provides an adequate level of protection which is equivalent to the UK, and the EEA; or
Put in place a contract with the third party receiving the personal data, which incorporates the Standard Contractual Clauses (“SCCs”) which has been issued by the European Commission (in relation to transfers of European residents’ personal data) and the UK addendum to the SCCs which has been issued by the ICO (in relation to transfers of UK residents’ personal data), that means the third party who receives the personal data must protect it to the same standards set out in the GDPR; or
Where an appropriate derogation as set out in Article 49 of the GDPR applies; or
Where the US/EU data protection framework arrangements apply.
Your Rights
You have the following rights regarding your information:
1. Right to be informed
You have the right to be provided with clear, transparent, and easily understandable information about how we use your personal data and your rights. This is why we are providing you with the information in this Privacy Notice.
2. Right of access
You have the right to obtain access to your personal data (if we’re processing it) and certain other information (similar to that provided in this Privacy Notice). This is so you are aware and can check that we’re using your personal data in accordance with data protection law.
3. Right to rectification
You are entitled to have your personal data corrected if it’s inaccurate or incomplete.
4. Right to erasure
This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there’s no compelling reason for us to keep it. This is not a general right to erasure; there are exceptions.
5. Right to restrict processing
You have rights to ‘block’ or suppress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further.
6. Right to data portability
You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.
7. Right to object to processing
You have the right to object to certain types of processing in certain circumstances. In particular, the right to object to the processing of your personal data based on our legitimate interests or on public interest grounds; the right to object to processing for direct marketing purposes (including profiling); the right to object to the use of your personal data for scientific or historical research purposes or statistical purposes in certain circumstances.
8. Right to withdraw consent
If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for direct marketing.
For more information on your rights or if you would like to exercise any of your rights, you are welcome to get in touch using the details in the “Contacting Us” section below.
CONTACTING US
If you would like to contact us in relation to your rights or if you are unhappy with how we’ve handled your information, you may contact us by sending an email to: renewablesdps@sse.com
If you would like to contact our Data Protection Officer, you may do so using the following details:
Email: GroupDPO@sse.com
Address: Data Protection Officer, No. 1 Forbury Place, 43 Forbury Road, Reading, RG1 3JH
If you’re not satisfied with our response to any complaint or believe our processing of your information does not comply with data protection law, you can make a complaint to the relevant Data Protection Office:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Notice updated 19 June 2024