Expressions of interest for funding support are now closed.
Privacy Notice
This privacy notice describes how SP Energy Networks ("SPEN") processes your personal data collected above in this EOI Form for the Net Zero Fund application process. In this Policy, references to "we", "us", and "our" (and other similar terms) means SPEN and "you" and "your" (and other similar terms) mean applicant, main contact and second contact.
Under Data Protection Legislation our lawful bases for processing your personal data are:
- Legitimate Interest of SPEN to process applicants and invites to knowledge sharing sessions.
- Contractual as applications must be submitted in line with our Terms and Conditions and due diligence is necessary step to be undertaken before awarding the funding and entering the contract.
SPEN will share your personal data with the fund administrator, Energy Saving Trust (EST) as part of the application process to organise sessions, process application and complete diligence for the funding process. For more information on how EST process your personal data please see their privacy notice here.
When SPEN engage with data processors who are third parties i.e. consultants, contractors, and suppliers, we have agreements in place with our data processors that restrict the purposes for which they can process the personal data and we will only share personal data that is required to enable them to perform these services. However, the personal data will not be shared with any other third-parties unless we are required to do so by law. When we are required to share personal data, we will take appropriate measures to ensure we have a lawful basis to share the data, that we provide only the personal data which is required for the purpose and to provide this data securely.
We have in place appropriate technical and organisational security measures to protect your personal data against unauthorised or unlawful use, and against accidental loss, damage, or destruction. We have put in place strict confidentiality agreements (including data protection obligations) with our third-party service providers and processors. We will process and retain your personal data for the duration of the fund and the contractual period in line with our retention schedule.
Your personal data will be processed and stored within the UK or the European Economic Area (“EEA”). In any instances where this data is to be transferred out with these areas, we will implement appropriate safeguards and security measures. SPEN are part of the Iberdrola Group and as such any data transfers that occur within the group are carried out
in accordance with the applicable data protection laws and our Binding Corporate Rules (“BCRs”). The Iberdrola Group’s BCRs reflect European legislation on data protection (General Data Protection Regulation) which means that all companies in our Group must comply with the same internal rules. You can download a copy of the Iberdrola BCR here.
In accordance with Data Protection Legislation you can exercise any of the following rights by contacting us at DP@spenergynetworks.co.uk
- Right of access – you have the right to obtain confirmation of what personal data is being processed and to receive a copy of this personal data
- Right to rectification – you have the right to have your personal data rectified if it is inaccurate or incomplete
- Right to erasure (Right to be forgotten) – you have the right to request the deletion or removal of your personal data where there is no legal basis for its continued processing
- Right to restrict processing – you have the right to request that we block or suppress processing of your personal data
- Right to object to processing – you have the right to object to the processing of your personal data, under certain circumstances
- Right to data portability – you have the right to obtain and reuse your personal data for your own purposes across different services
For more information on how SPEN process personal data please see our full privacy notice here.
Additionally, if you believe that your personal data is not being processed in line with this privacy notice you have the right to lodge a complaint with our Data Protection Officer, by contacting: dataprotection_corporate@scottishpower.com or Data Protection Officer, Scottish Power UK, 320 St Vincent Street, GLASGOW, G2 5AD.
If you are not satisfied with the response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) by contacting: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or 0303 123 1113.