PRIVACY STATEMENT
WHO ARE WE?
Island Power LLP, represented here as IslandPower, is a Scottish registered Limited Liability Partnership (LLP), having its registered office at 109A, The High Street, Linlithgow, West Lothian, EH49 7EQ, Scotland.
IslandPower is currently awaiting registration as a data controller with the Information Commissioner (Registration number: awaiting).
Island Power LLP company registration number is: SO307076
HOW WE USE YOUR INFORMATION
This privacy statement explains how IslandPower collects and uses personal information about you in order to provide its public services to individuals and businesses. In general terms, IslandPower collects and uses personal information about you to:
-
Verify your identity where this is required
-
Contact you by post, email or telephone
-
Understand your needs and how they may be met
-
Deliver its services and meet its legal responsibilities
-
Provide joined up services to you
-
Process financial and non-financial transactions
-
Maintain our records
-
Carry out and provide research
-
Prevent and detect crime, fraud or corruption
IslandPower may also share your personal information with its service delivery partners to enable them to do any of these things for IslandPower and also with other public-sector organisations, such as Scottish Enterprise, The Department for Business, Energy and Industrial Strategy, Innovate UK, Highlands and Island Enterprise, The Department of International Trade, Scottish Development International and others to pursue their objectives.
WITHDRAWING CONSENT
For withdrawing your consent, please refer to the relevant section below.
Further details can be found in the specific sections which follow and can be accessed through these links:
-
Businesses, Social and Community Organisations (non-account managed)
-
Individuals (including job applicants) using ISLANDPOWER’s website
-
Changes to our privacy statement
-
Code of Data Matching Practice
-
Your rights
ACCOUNT MANAGED CLIENTS
IslandPower works with many organisations to provide support in the form of advice, financial support, property and infrastructure to promote the economic, community and social development of Islanded communities globally. When an organisation enters into account management they will receive a notification and confirmation of account management, referring them to IslandPower’s privacy statement.
Categories of information processed by IslandPower
-
Information about your identity including first name, last name, title, date of birth and gender.
-
Contact information including billing address, delivery address, email address and telephone numbers.
-
Financial information including bank account details, payment card details and financial statements.
-
Transaction information includes details about payments to and from you and other details of services you have received from us.
-
Technical information including internet protocol (IP) address, your login data, passwords, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
-
Profile information includes your username and password for IslandPower accounts, your interests, preferences, feedback and survey responses.
-
Usage information includes information about how you use our website and services.
-
Marketing and Communications Data including your preferences in receiving marketing from us and our third parties and your communication preferences.
-
Personal information including information about attending events and meetings including information about dietary or access requirements.
Source(s) of personal information, including whether it comes from publicly available resources.
You give us information about your identity, contact details and financial information when you contact us or make an enquiry, when you browse our website, when you attend a seminar, webinar or event and when you become an account managed client and through the continued use of our services. This can also include information about your workforce and employees.
We may also collect information:
-
From publicly accessible sources, for example, Companies House and the Electoral Roll;
-
From other public sector organisations;
-
Directly from third parties who deliver services on our behalf;
-
Credit reference agencies;
-
From third parties with your consent;
-
Your bank or building society, another financial institution or adviser;
-
Consultants and other professionals we may engage in relation to your matter;
-
Your employer and/or trade union, professional body or pension administrators;
-
Your doctors, medical and occupational health professionals;
-
Via our website - we use cookies on our website – see the cookie section of this statement for more information;
-
Via our information technology (IT) and other systems;
-
Case management, document management, data rooms and time recording systems;
-
Door entry systems and reception logs; AND
-
Automated monitoring of our websites and other technical systems, such as our computer networks and connections, CCTV and access control systems, communications systems, email and instant messaging systems.
The purposes of the processing
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
-
Where we are carrying out our statutory functions and other functions of a public nature;
-
Where we need to perform the contract we are about to enter into or have entered into with you, for example providing you with, or receiving from you, funding or information, research and analysis;
-
Where we need to comply with a legal or regulatory obligation;
-
For our legitimate interests or those of a third party;
-
Where you have given us consent; and
-
For operational reasons, such as ensuring safe working practices, improving efficiency, training, staff assessments and quality control.
Generally, the information we collect is only used for any purpose for which you submitted it to us, for any purpose made clear to you at the point it was collected or here in this Privacy Policy. These purposes may include:
-
When we assess your application for and provide grants and funding, the personal data you give us is used to process your application and to assess eligibility for grants and funding. This information may be shared with third parties;
-
When we or third parties host events we will use your personal data to provide you with details, tickets and entry information and to provide the organisers with information to verify your attendance;
-
When providing you with reports and research information we use your contact details;
-
When we prepare research and statistical information about the economic, community and social wellbeing of Islanded communities;
-
When you subscribe to receive communications and other updates from us we use your personal data to provide communications and information about topics that you have expressed an interest in;
-
When you contact us through our website or contact your account manager/adviser, your information is used in order to respond to your enquiry;
-
If you have a complaint we use your personal information as part of dealing with that complaint; and
-
When marketing our own services to you.
Where you submit personal data to IslandPower, you may also be given the option (through a tick box or otherwise) to have information used for an activity or service different from the ones that you received from us. If you choose to have your information used for another activity or service in this way, we will use your information to provide the service or carry out the activity.
We may also use your email address to send you communications such as confirmation emails when you sign up for or unsubscribe from a specific registration or activity. We may also use it to update you about changes to this privacy statement.
We may also use your personal data for segmentation, analysis and demographic studies. This helps us to constantly improve, personalise, and customise the service we provide.
When you attend events or meetings, we may also collect information about you. We use this information for monitoring the equality and diversity of those attendees.
ISLANDPOWER - PRIVACY STATEMENT
There are a number of lawful reasons for us to process your personal data. These include:
-
Where we require to process personal data in to perform a contract with you, such as providing services and funding.
-
Where we are required to comply with a legal or regulatory obligation such as reporting on European or other forms of funding.
-
Where we are processing data for a legitimate reason other than performing our tasks as a public authority.
Legitimate Interests: In relation to a number of uses of Personal Data we refer to above we are doing this on the basis that it is in our legitimate interests – or those of a third party – for us to do so. A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. These interests cover a number of aspects of our business operations, namely:
-
Information, system, network and cyber security purposes, including the monitoring and protection of our IT systems;
-
System development and enhancement;
-
Website analytics to determine web traffic and patterns of navigation;
-
Internal analysis of clients for the purpose of planning strategy and growth;
-
Defending legal claims;
-
Anti-fraud purposes;
-
“Know Your Customer” checks;
-
Postal marketing;
-
Analysing your personal data for the purpose of profiling or direct marketing;
-
Ensuring that we are as efficient as we can be so we can deliver the best service for you at the best price;
-
To allow us to provide bespoke services where requested by you;
-
Protecting our commercially valuable information and also our intellectual property;
-
Preventing and detecting fraud and/or criminal activity that could be damaging for us and for you;
-
For credit control purposes and to make sure our clients can pay for the services we provide;
-
To maintain our accreditation's so we can demonstrate we operate to the highest standards; and
-
Ensuring we are able to keep up to date with our clients and contacts and developments in their organisations.
Consequences of not providing information where the information is required by statute, contractual requirement or to perform public tasks.
Where we need to collect personal data by law, or under the terms of a contract we have with you or to provide funding or to perform our public tasks, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with services or support) or we may be unable to provide funding to perform our public task. In this case, we may have to cancel a service you have with us but we will notify you if this is the case at the time.
The recipients of data/data sharing with named third parties, including named service delivery partners
We may have to share your personal data with the categories set out below for the purposes set out in this notice:
-
External third parties including Government Agencies;
-
Third party product and service providers;
-
Financial and non financial intermediaries;
-
Third sector support agencies;
-
Educational institutes;
-
Research organisations; and
-
Funding bodies.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Is your personal data sent to recipients in other countries and why?
IslandPower works with international partners and your personal data may be transferred across international borders. It may be transferred to countries that have different data protection laws from the country from where you submitted your personal data.
We will, however, ensure the transfer complies with data protection law both during transit and at the storage location and all personal data will be secure.
Data retention information
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can access those purposes through other means, and the applicable legal requirements.
BUSINESSES, SOCIAL AND COMMUNITY ORGANISATIONS (NON-ACCOUNT MANAGED)
IslandPower works with many individuals and organisations to provide support in the form of advice, financial support, property and infrastructure in order to promote the economic, community and social development of Islanded communities.
Categories of information processed by IslandPower
-
Information about your identity including first name, last name, title, date of birth and gender.
-
Contact information including billing address, delivery address, email address and telephone numbers.
-
Financial information including bank account details, payment card details and financial statements.
-
Transaction information includes details about payments to and from you and other details of services you have received from us.
-
Technical information including internet protocol (IP) address, your login data, passwords, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
-
Profile information includes your username and password for ISLANDPOWER accounts, your interests, preferences, feedback and survey responses.
-
Usage information includes information about how you use our website and services.
-
Marketing and Communications Data including your preferences in receiving marketing from us and our third parties and your communication preferences.
-
Personal information including information about attending events and meetings including information about dietary or access requirements.
Source(s) of personal information, including whether it comes from publicly available resources
You give us information about your identity, contact details and financial information when you contact us or make an enquiry, when you browse our website, when you attend a seminar, webinar or event and through the continued use of our service. This can also include information about your workforce and employees.
We may also collect information:
-
From publicly accessible sources, for example, Companies House and the Electoral Roll;
-
From other public sector organisations;
-
Directly from third parties who deliver services on our behalf;
-
Credit reference agencies;
-
From a third parties with your consent;
-
Your bank or building society, another financial institution or adviser;
-
Consultants and other professionals we may engage in relation to your matter;
-
Your employer and/or trade union, professional body or pension administrators;
-
Your doctors, medical and occupational health professionals;
-
Via our website - we use cookies on our website – see the cookie section of this statement;
-
Via our information technology (IT) and other systems;
-
Case management, document management, data rooms and time recording systems;
-
Door entry systems and reception logs; and
-
Automated monitoring of our websites and other technical systems, such as our computer networks and connections, CCTV and access control systems, communications systems, email and instant messaging systems.
The purposes of the processing
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
-
Where we are carrying out our statutory functions and other functions of a public nature;
-
Where we need to perform the contract we are about to enter into or have entered into with you, for example providing you with funding or information, research and analysis;
-
Where we need to comply with a legal or regulatory obligation;
-
For our legitimate interest or those of a third party;
-
Where you have given us consent; AND
-
For operational reasons, such as ensuring safe working practices, improving efficiency, training, staff assessment and quality control.
Generally, the information we collect is only used for any purpose for which you submitted it to us, for any purpose made clear to you at the point it was collected or here in this Privacy Policy. These purposes may include:
-
When we assess your application for and provide grants and funding, the personal data you give us is used to process your application and to assess eligibility for grants. This information may be shared with third parties such as the Big Lottery Fund;
-
When we or third parties host events we will use your personal data to provide you with details, tickets and entry information and to provide the organisers with information to verify your attendance;
-
When providing you with reports and research information we use your contact details;
-
When we prepare research and statistical information about the economic, community and social wellbeing of islanded communities;
-
When you subscribe to receive communications and other updates from us we use your personal data to provide communications and information about topics that you have expresses an interest in;
-
When you contact us through our website or contact your account manager/adviser, your information is used in order to respond to your enquiry;
-
If you make a complaint we use your personal information as part of dealing with that complaint; and
-
When marketing our own services.
Where you submit personal data to IslandPower, you may also be given the option (through a tick box or otherwise) to have information used for an activity or service different from the ones that you received from us. If you choose to have your information used for another activity or service in this way, we will use your information to provide the service or carry out the activity.
We may also use your email address to send you communications such as confirmation emails when you sign up for or unsubscribe from a specific registration or activity. We may also use it to update you about changes to this privacy statement.
We may also use your personal data for segmentation, analysis and demographic studies. This helps us to constantly improve, personalise, and customise the service we provide.
When you attend events we may also collect information about you. We use this information for the purpose of monitoring the equality and diversity of those attendees.
The legal basis for processing
There are a number of lawful reasons for us to process your personal data. These include:
-
Where we require to process personal data in order to perform a contract with you, such as providing services and funding.
-
Where we are required to comply with a legal or regulatory obligation such as reporting on European funding.
-
Where we are processing data for a legitimate reason other than performing our tasks as a public authority.
Legitimate Interests: In relation to a number of uses of Personal Data we refer to above we are doing this on the basis that it is in our legitimate interests – or those of a third party – for us to do so. A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. These interests cover a number of aspects of our business operations, namely:
-
Information, system, network and cyber security purposes, including the monitoring and protection of our IT systems;
-
System development and enhancement;
-
Website analytics to determine web traffic and patterns of navigation;
-
Internal analysis of clients for the purpose of planning strategy and growth;
-
Defending legal claims;
-
Anti-fraud purposes;
-
“Know Your Customer” checks;
-
Postal marketing;
-
Analysing your personal data for the purpose of profiling or direct marketing;
-
Ensuring that we are as efficient as we can be so we can deliver the best service for you at the best price;
-
To allow us to provide bespoke services where requested by you;
-
Protecting our commercially valuable information and also our intellectual property;
-
Preventing and detecting fraud and/or criminal activity that could be damaging for us and for you;
-
For credit control purposes and to make sure our clients can pay for the services we provide;
-
To maintain our accreditation's so we can demonstrate we operate to the highest standards; and
-
Ensuring we are able to keep up to date with our clients and contacts and developments in their organisations.
Consequences of not providing information where the information is required by statute, contractual requirement or to perform public tasks. Where we need to collect personal data by law, or under the terms of a contract we have with you or to perform our public tasks, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with services or support) or we may be unable to provide funding to perform our public task. In this case, we may have to cancel a service you have with us but we will notify you if this is the case at the time.
The recipients of data/data sharing with named third parties, including named service delivery partners
We may have to share your personal data with the categories set out below for the purposes set out in this notice:
-
External third parties including Government Agencies;
-
Third party product and service providers;
-
Financial and non financial intermediaries;
-
Third sector support agencies;
-
Educational institutes;
-
Research organisations; and
-
Funding bodies, for example, the Scottish National Bank.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Is your personal data sent to recipients in other countries and why?
IslandPower works with international partners and your personal data may be transferred across international borders. It may be transferred to countries that have different data protection laws from the country from where you submitted your personal data.
We will, however, ensure the transfer complies with data protection law both during transit and at the storage location and all personal data will be secure.
Data retention information
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can access those purposes through other means, and the applicable legal requirements.
INDIVIDUALS (INCLUDING JOB APPLICANTS) USING ISLANDPOWER’S WEBSITE
IslandPower works with many individuals and organisations to provide support in the form of advice, financial support, property and infrastructure in order to promote the economic, community and social development of islanded communities.
Categories of information processed by IslandPower
-
Information about your identity including first name, last name, title, date of birth and gender.
-
Contact information including billing address, delivery address, email address and telephone numbers.
-
Financial information including bank account details, payment card details and financial statements.
-
Transaction information includes details about payments to and from you and other details of services you have received from us.
-
Technical information including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
-
Profile information includes your username and password for IslandPower accounts, your interests, preferences, feedback and survey responses.
-
Usage information includes information about how you use our website and services.
-
Marketing and Communications Data including your preferences in receiving marketing from us and our third parties and your communication preferences.
-
Personal information including information about attending events and meetings including information about dietary or access requirements.
Source(s) of personal information, including whether it comes from publicly available resources
You give us information about your identity, contact details and financial information when you contact us or make an enquiry, when you browse our website, when you attend a seminar, webinar or event or when you use our services.
We may also collect information:
-
From publicly accessible sources, for example, Companies House and the Electoral Roll
-
From other public sector organisations
-
Directly from third parties who deliver services on our behalf
-
Credit reference agencies
-
From a third parties with your consent
-
Your bank or building society, another financial institution or adviser
-
Consultants and other professionals we may engage in relation to your matter
-
Your employer and/or trade union, professional body or pension administrators
-
Your doctors, medical and occupational health professionals
-
Via our website - we use cookies on our website (for more information on cookies, please see our [insert link] cookies policy)
-
Via our information technology (IT) and other systems
-
Case management, document management, data rooms and time recording systems
-
Door entry systems and reception logs
-
Automated monitoring of our websites and other technical systems, such as our computer networks and connections, CCTV and access control systems, communications systems, email and instant messaging systems.
The purposes of the processing
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
-
Where we are carrying out our statutory functions and other functions of a public nature;
-
Where we need to perform the contract we are about to enter into or have entered into with you, for example providing you with funding or information, research and analysis;
-
Where we need to comply with a legal or regulatory obligation;
-
For our legitimate interests or those of a third party;
-
Where you have given us consent; and
-
For operational reasons, such as ensuring safe working practices, improving efficiency, training, staff assessments and quality control.
Generally, the information we collect is only used for any purpose for which you submitted it to us, for any purpose made clear to you at the point it was collected or here in this Privacy Policy. These purposes may include:
-
When we assess your application for and provide grants and funding, the personal data you give us is used to process your application and to assess eligibility for grants. This information may be shared with third parties such as the Scottish National Bank;
-
When we or third parties host events we will use your personal data to provide you with details, tickets and entry information and to provide the organisers with information to verify your attendance;
-
When providing you with reports and research information we use your contact details;
-
When we prepare research and statistical information about the economic, community and social wellbeing of the islanded communities;
-
When you subscribe to receive communications and other updates from us we use your personal data to provide communications and information about topics that you have expresses an interest in;
-
When you contact us through our website your information is used in order to respond to your enquiry;
-
If you make a complaint we use your personal information as part of dealing with that complaint; and
-
When marketing our own services to you.
Where you submit personal data to IslandPower, you may also be given the option (through a tick box or otherwise) to have information used for an activity or service different from the ones that you received from us. If you choose to have your information used for another activity or service in this way, we will use your information to provide the service or carry out the activity.
We may also use your email address to send you communications such as confirmation emails when you sign up for or unsubscribe from a specific registration or activity. We may also use it to update you about changes to this privacy statement.
We may also use your personal data for segmentation, analysis and demographic studies. This helps us to constantly improve, personalise, and customise the service we provide.
When you attend events we may also collect information about you. We use this information for the purpose of monitoring the equality and diversity of those attendees.
The legal basis for processing
There are a number of lawful reasons for us to process your personal data. These include:
-
Where we require to process personal data in order to perform a contract with you, such as providing services.
-
Where we are required to comply with a legal or regulatory obligation.
-
Where we are processing data for a legitimate reason other than performing our tasks as a public authority.
Legitimate Interests: In relation to a number of uses of Personal Data we refer to above we are doing this on the basis that it is in our legitimate interests – or those of a third party – for us to do so. A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. These interests cover a number of aspects of our business operations, namely:
-
Information, system, network and cyber security purposes, including the monitoring and protection of our IT systems;
-
System development and enhancement;
-
Website analytics to determine web traffic and patterns of navigation;
-
Defending legal claims;
-
Postal marketing;
-
Analysing your personal data for the purpose of profiling or direct marketing;
-
Ensuring that we are as efficient as we can be so we can deliver the best service for you at the best price;
-
To allow us to provide bespoke services where requested by you;
-
Protecting our commercially valuable information and also our intellectual property;
-
Preventing and detecting fraud and/or criminal activity that could be damaging for us and for you;
-
For credit control purposes and to make sure our clients can pay for the services we provide;
-
To maintain our accreditation's so we can demonstrate we operate to the highest standards; and
-
Ensuring we are able to keep up to date with our clients and contacts and developments in their organisations.
Consequences of not providing information where the information is required by statute, contractual requirement or to perform public tasks where we need to collect personal data by law, or under the terms of a contract we have with you or to perform our public tasks, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with services or support) or we may be unable to perform our public task. In this case, we may have to cancel a service you have with us but we will notify you if this is the case at the time.
The recipients of data/data sharing with named third parties, including named service delivery partners
We may have to share your personal data with the categories set out below for the purposes set out in this notice:
-
External third parties including Government Agencies;
-
Third party product and service providers;
-
Financial and non financial intermediaries;
-
Third sector support agencies;
-
Educational institutes;
-
Research organisations; and
-
Funding bodies, for example, the Scottish National Bank.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
DATA RETENTION INFORMATION
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can access those purposes through other means, and the applicable legal requirements.
SUPPLIERS AND BIDDERS
IslandPower works with many organisations that provide goods and services. As part of our procurement process we collect personal data about bidders and suppliers and their employees.
Categories of information processed by IslandPower
-
Information about your identity including first name, last name, title, date of birth and gender.
-
Contact information including billing address, delivery address, email address and telephone numbers.
-
Financial information including financial standing, bank account details and financial statements.
-
Transaction information includes details about payments to and from you and other details of goods and services you have provided to us.
-
Technical information including internet protocol (IP) address, your login data, passwords, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
-
Profile information includes your username and password for IslandPower accounts.
-
Usage information includes information about how you use our website.
-
Personal information including information about attending events and meetings including information about dietary or access requirements.
-
Bid information including financial standing and information, professional/trade memberships and enrolments, CVs, educational and professional qualifications, work examples, quality assurance/compliance certificates, references, evaluation of bids and feedback following evaluation.
-
Supply information includes, reviews, reports, supply history.
Source(s) of personal information, including whether it comes from publicly available resources
You give us information about your identity, contact details and financial information when you contact us or provide a quote or a bid, when you browse our website, when you attend a seminar, webinar or event and when you become a supplier. This can also include information about your workforce and employees.
WE MAY ALSO COLLECT INFORMATION:
-
From publicly accessible sources, for example, Companies House and the Electoral Roll;
-
From other public sector organisations;
-
Directly from third parties who deliver services on our behalf;
-
Supplier due diligence providers;
-
Credit reference agencies;
-
From third parties (e.g. references);
-
Your bank or building society, another financial institution or adviser;
-
Your employer and/or trade union, professional body;
-
Via our website - we use cookies on our website (for more information on cookies, please see our [insert link] cookies policy);
-
Via our information technology (IT) and other systems;
-
Case management, document management, data rooms and time recording systems;
-
Door entry systems and reception logs; and
-
Automated monitoring of our websites and other technical systems, such as our computer networks and connections, CCTV and access control systems, communications systems, email and instant messaging systems.
THE PURPOSES OF THE PROCESSING
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
-
Where we are carrying out our statutory functions and other functions of a public nature;
-
Where we need to perform the contract we are about to enter into or have entered into with you;
-
Where we need to comply with a legal or regulatory obligation;
-
For our legitimate interests or those of a third party;
-
Where you have given us consent; and
-
For operational reasons, such as ensuring safe working practices, improving efficiency, training, staff assessments, supplier management and quality control.
Generally, the information we collect is only used for any purpose for which you submitted it to us, for any purpose made clear to you at the point it was collected or here in this Privacy Policy. These purposes may include:
-
When we assess your quote or bid, the personal data you give us is used to process and evaluate your quote or bid. This information may be shared with third parties for evaluation purposes;
-
To manage and facilitate the provision of goods and/or services from you to us;
-
When we prepare research and statistical information about the economic, community and social wellbeing of the islanded communities;
-
When you subscribe to receive communications and other updates from us we use your personal data to provide communications and information about topics that you have expresses an interest in;
-
When you contact us through our website or contact our personnel, your information is used in order to respond to your enquiry;
-
If you have a complaint or feedback we use your personal information as part of dealing with that feedback or complaint; and
-
When we contact you to place an order.
We may also use your personal data for analysis and demographic studies. This helps us to constantly improve our business.
We may also use your email address to send you communications such as confirmation emails when you sign up for or unsubscribe from a specific registration or activity. We may also use it to update you about changes to this privacy statement.
When you attend events we may also collect information about you. We use this information for the purpose of monitoring the equality and diversity of those attendees.
THE LEGAL BASIS FOR PROCESSING
There are a number of lawful reasons for us to process your personal data. These include:
-
Where we require to process personal data in order to perform a contract with you.
-
Where we are required to comply with a legal or regulatory obligation such as procurement rules.
-
Where we are processing data for a legitimate reason other than performing our tasks as a public authority.
Legitimate Interests: In relation to a number of uses of Personal Data we refer to above we are doing this on the basis that it is in our legitimate interests – or those of a third party – for us to do so. A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. These interests cover a number of aspects of our business operations, namely:
-
Information, system, network and cyber security purposes, including the monitoring and protection of our IT systems;
-
System development and enhancement;
-
Website analytics to determine web traffic and patterns of navigation;
-
Internal analysis of suppliers for the purpose of planning strategy and growth;
-
Defending legal claims;
-
Anti-fraud purposes;
-
Due diligence checks;
-
Ensuring that we are as efficient as we can be;
-
Protecting our commercially valuable information and also our intellectual property;
-
Preventing and detecting fraud and/or criminal activity that could be damaging for us and for you;
-
To maintain our accreditations so we can demonstrate we operate to the highest standards; and
-
Ensuring we are able to keep up to date with our suppliers and contacts and developments in their organisations.
Consequences of not providing information where the information is required by statute, contractual requirement or to perform public tasks where we need to collect personal data by law, or under the terms of a contract we have with you or to provide funding or to perform our public tasks, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to pay you).
The recipients of data/data sharing with named third parties, including named service delivery partners
We may have to share your personal data with the categories set out below for the purposes set out in this notice:
-
External third parties including Government Agencies;
-
Third party product and service providers;
-
Financial and non financial intermediaries;
-
Third sector support agencies;
-
External evaluators of bids and quotes;
-
Educational institutes;
-
Research organisations; and
-
Funding bodies, for example, the Scottish National Bank.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
IS YOUR PERSONAL DATA SENT TO RECIPIENTS IN OTHER COUNTRIES AND WHY?
IslandPower works with international partners and your personal data may be transferred across international borders. It may be transferred to countries that have different data protection laws from the country from where you submitted your personal data.
We will, however, ensure the transfer complies with data protection law both during transit and at the storage location and all personal data will be secure.
DATA RETENTION INFORMATION
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can access those purposes through other means, and the applicable legal requirements.
NATURAL GRID
Natural Grid is a subsidiary of IslandPower. Their privacy policy is available at www.natural-grid.com
DATA RETENTION INFORMATION
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can access those purposes through other means, and the applicable legal requirements.
COOKIES
A SUMMARY OF WHY WE USE COOKIES
This site places small files, known as ‘cookies’, onto your computer to collect information about how you browse.
These cookies aren’t used to identify you personally.
You will normally see a message on the site before we store a cookie on your computer.
Find out more about cookies.
MEASURING SITE USAGE
We use Google Analytics to collect information about how you use our site, www.island-power.net. We do this to help make sure the site is meeting your needs and to help us make improvements.
We store information about:
-
The pages you visit and how long you spend on each page
-
How you get to www.island-power.net
-
What you click on while you’re using www.island-power.net
Any information we get is received in a way that we can’t identify anyone by it. For example, we never receive your name or address.
We don't make any attempt to find out the identities of people visiting www.Island-Power.net through the use of cookies, and we don't allow Google to do this either.
All information we get through cookies and analytics is treated in confidence. We will never sell, trade or give your details to third parties, unless we're required to do so by law.
Find out more about security and privacy in Google Analytics.
OPT-OUT
You can opt out of Google Analytics cookies.
VISITORS TO OUR WEBSITES - WEBSITE USAGE DATA
Our website keeps track of standard internet log information and details of visitor behaviour patterns to better understand website usage and to help us to improve our services for users. This information is collected by what are called cookies. The cookies used do not identify individual users and we do not make any attempt to find out identities of those using our websites.
WHAT COOKIES DO - IN MORE DETAIL
Most websites you visit will use cookies to help to improve your experience by enabling that website to ‘remember’ you, either for the duration of your visit (using a ‘session cookie’) or for repeat visits (using a ‘persistent cookie’).
Cookies do lots of different jobs, like letting you navigate between pages efficiently, storing your preferences, and generally improving your experience of a website. Cookies make the interaction between you and the website faster and easier. If a website doesn’t use cookies, it will think you are a new visitor every time you move to a new page on the site – for example, when you enter your login details and move to another page it won’t recognise you and it won’t be able to keep you logged in.
COOKIES SET BY THIRD PARTY SITES
Please note that during your visits to IslandPower’s websites you may notice some cookies that are not related to IslandPower or IslandPower’s contractors. When you visit a page with content embedded from, for example, YouTube or Vimeo, you may be presented with cookies from these websites. IslandPower does not control the dissemination of these cookies. You should check the third party websites for more information about these.
Check your browser's 'Help' for details, or visit the About cookies website for more information. Most browsers will give you the option to accept cookies from websites while blocking those from third parties.
Below is a list of Cookies on IslandPower web pages:
Provider
Name
Purpose
More info
Google Analytics
_utma
_utmb
_utmc
_utmz
These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.
Lockerz
_utma
_utmb
_utmc
_utmz
+ some others
This is the service that operates the Add To Any social bookmarking and sharing buttons. Cookies will have the domain a2a.lockerz.com We use social buttons by Lockerz / Add To Any on some pages of the site to allow users to easily share content with your social networks such as Facebook or Twitter and to bookmark pages for future reference. These sites may set a cookie and your usage including the pages users visit. Users should check privacy or cookie policy for this service to find out more about these and how to opt-out or delete this information
Internal system
ASP.NET_SessionId
The web platform the website is built on uses technology provided by the ASP.NET Framework. This cookie is often used to store internal system information such as the last page visited and the status of any online forms. It's completely anonymous and expires once the user leaves the website. The website won't work properly without it.
HOW TO CONTROL AND DELETE COOKIES
IslandPower will not use cookies to collect personally identifiable information about you. However, if you wish to restrict or block the cookies which are set by IslandPower’s website, or indeed any other website, you can do this through your browser settings. Please be aware that restricting cookies may impact on the functionality of the IslandPower’s website(s). The Help function within your browser should tell you how to restrict or block cookies.
Alternatively, you may wish to visit the About cookies website, which contains information on how to do this for a variety of browsers. You will also find details on how to delete cookies from your computer as well as more general information about cookies. For information on how to do this on the browser of your mobile phone you will need to refer to its manual.
USING THE WEBSITE
IslandPower operate 2 websites and support two subsidiary websites. They are:
By accessing any of the above listed sites (the “websites”) or otherwise providing information to us, you agree to our privacy practices as set out in this Privacy Notice.
YOUR RIGHTS
Access to your information – you have the right to request a copy of the personal information about you that IslandPower holds.
Correcting your information – IslandPower wants to make sure that your personal information is accurate, complete and up to date and you may ask IslandPower to correct any personal information about you that you believe does not meet these standards.
Deletion of your information – you have the right to ask IslandPower to delete personal information about you where:
-
you consider that IslandPower no longer requires the information for the purposes for which it was obtained
-
IslandPower is using that information with your consent and you have withdrawn your consent – see Withdrawing consent to using your information below
-
you have validly objected to IslandPower 's use of your personal information – see Objecting to how we may use your information below
-
IslandPower’s use of your personal information is contrary to law or IslandPower’s other legal obligations.
OBJECTING TO HOW WE MAY USE YOUR INFORMATION
You have the right at any time to require IslandPower to stop using your personal information for direct marketing purposes. In addition, where IslandPower uses your personal information to perform tasks carried out in the public interest or in exercising official authority vested in it then, if you ask it to, IslandPower will stop using that personal information unless there are overriding legitimate grounds to continue.
RESTRICTING HOW WE MAY USE YOUR INFORMATION
In some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to IslandPower use of your information. The right might also apply where IslandPower no longer has a basis for using your personal information but you don't want IslandPower to delete the data. Where this right to validly exercised, IslandPower may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.
AUTOMATED PROCESSING
If IslandPower uses your personal information on an automated basis to make decisions which significantly affect you, you have the right to ask that the decision be reviewed by an individual within IslandPower to whom you may make representations and contest the decision. This right only applies where IslandPower uses your information with your consent or as part of a contractual relationship with you.
Withdrawing consent using your information
Where IslandPower uses your personal information with your consent you may withdraw that consent at any time and IslandPower will stop using your personal information for the purpose(s) for which consent was given.
Organisations in account management will have received a notification of engagement. You do not need to respond to accept terms of engagement, terms are accepted by default when a notification is issued by IslandPower.
If an organisation is in account management and you withdraw your consent, we reserve the right to withdraw your organisation from account management (exceptions may apply and this should be discussed with your account manager).
Please contact IslandPower in any of the ways set out in the Contact information and further advice section if you wish to exercise any of these rights or discuss in further detail.
CHANGES TO OUR PRIVACY STATEMENT
IslandPower keeps this privacy statement under regular review and will place any updates on this website. Paper copies of the privacy statement may also be obtained using the contact details below. This privacy statement was last updated in January 2021.
CONTACT INFORMATION AND FURTHER ADVICE
If you have any questions, complaints or comments about this Privacy statement, or how we collect and manage your personal data, please contact us in the first instance by post, email or telephone at
Data Protection Officer, IslandPower, PO BOX or sending an email to dataprotectionofficer@island-power.net or phoning 000000.
COMPLAINTS
IslandPower seeks to resolve directly all complaints about how it handles personal information.
You can complain to any of IslandPower offices, by phone, in writing, or by email. Our contact details are:
Business Improvement
IslandPower
PO BOX
e-mail: customer.service@island-power.net
Tel: +44 (0)000000
If you are not satisfied with the resolution proposed, you also have the right to lodge a complaint with IslandPower initial response to your concerns through the Information Commissioner's Office whose contact details are as follows:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113 (local rate) or 01625 545 745
Website: https://ico.org.uk/concerns