Document Version Control

Version	Date	Author	Rationale
1.0	24/05/2019	VG	Document issued in line with GDPR introduction.

 

1. Who we are and how to contact us

REAL is a company limited by guarantee. It is a wholly-owned subsidiary of Renewable Energy Association (REA). REAL carries out a range of certification and consumer protection activities all of which promote sustainable energy. Renewable Energy Assurance Ltd's activities fall under two headings: consumer codes and certification schemes. You can find full details about the schemes REAL runs at www.realschemes.org.uk/. Our address is: York House, 23 Kingsway, London WC2B 6UJ. Our telephone number is: 020 7981 0850. The company number is: 05720606.

RECC's Data Privacy Contact is Virginia Graham. You can contact us at privacy@renewableenergyassurance.org.uk . Please note that all data about individuals captured will be used and held in accordance with the requirements of the General Data Protection Regulation and the Data Protection Act 2018.

2. The data we hold about individuals and the purposes for which we hold it

REAL does not hold any data about individuals. However, in certain circumstances, the individual schemes REAL runs hold data about individuals. These circumstances are set out in each scheme's Privacy Policy Statement. You can find these here:

www.recc.org.uk/privacy
www.greengas.org.uk/privacy
www.biofertiliser.org.uk/privacy
www.qualitycompost.org.uk/privacy

We occasionally issue session cookies when strictly necessary for the operation of the website. You can find out more about what cookies are, how to control them and delete them here: www.aboutcookies.org .  You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website. (Third party services such as Google Maps, Twitter and Facebook may also issue cookies.)

We use Google Analytics, which will issue cookies to help track how visitors use our website, this helps us monitor which pages you find useful and which you do not, and help us provide a better website. These do not hold any personal information. Further information on Google Analytics and Privacy can be found here: www.google.co.uk/intl/en/analytics/privacyoverview.html .

The REAL website may contain links to other websites of interest. Once you have used these links to leave our site, you should note that we do not have any control over the other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

3. The purpose for which we hold data about individuals

The purpose for which REAL, through the Schemes we run, holds data about individuals is set out in the Schemes' Privacy Policy Statements which you can find here:

www.recc.org.uk/privacy
www.greengas.org.uk/privacy
www.biofertiliser.org.uk/privacy
www.qualitycompost.org.uk/privacy

4. The lawful bases for processing data about individuals

REAL, through the Schemes we run, are permitted to process your data only in certain, very specific circumstances set out in Article 6 of the GDPR. At least one of these must apply whenever we process personal data:           

• Consent: you have given clear consent for us to process your personal data for a specific purpose.
• Contract: the processing is necessary for carrying out a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
• Vital interests: the processing is necessary to protect someone's life.
• Public task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
• Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect your personal data which overrides those legitimate interests.

5. The rights of individuals about whom we hold data

As an individual about whom REAL holds data (data subject), through one of the Schemes we run, you have the right to ask us:

• whether we are holding any data about you and if so what data we are holding
• for a copy of any data we are holding about you
• to rectify any incorrect data we are holding about you
• to delete the data we are holding about you if you no longer want us to hold it
• not to use your data other than for the purpose you provided it to us for
• to change the details of any consent you may have given at any time in writing for us to share your data with a specified third party.

To ask us any of these things you can send an email to privacy@renewableenergyassurance.org.uk . We will respond to your email within 14 days of receiving it.

Finally, you have the right to complain to the Information Commissioner's Office should you have reason to consider that RECC has breached the policy set out in this statement or the regulations which underpin it in any way, here: https://ico.org.uk.

6. The circumstances in which we share and transfer the data we hold about individuals

We will not under any circumstances transfer your data outside the European Economic Area (EEA) or an expressly permitted country¹. Given that, holding data about individuals on the internet, which is a global environment, means that it may be processed outside the EEA. If this were to be the case, the data will always be held securely and in line with the requirements of UK data protection legislation.

7. The basis on which we hold and protect data about individuals

REAL, through the Schemes we run, will delete any data we hold about individuals after ten years unless you request us in writing within that time to continue to hold your data. Our systems all have a high level of security. We are committed to ensuring that your data is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

8. How individuals will know if we decide to change this Privacy Policy

Should any of the Schemes that REAL runs decide to change their Privacy Policy Statements in any way we will put a notice on the relevant website to inform you of the changes and what their significance could be for you. We will also make this information available in any emails we send out to individuals who could be affected.

The date on which this Privacy Policy Statement was adopted is 24.05.2019. There is also a Version Control number at the start of the document so that you can easily trace any amendments which have been made to it and when.

9. The Information Commissioner's Office

You can contact the Information Commissioner's Office using the following details:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow
Cheshire SK9 5AF
Tel: 0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number
Further contact details are available on the website: https://ico.org.uk/ .

24.05.2019

Please click here to download a copy of this privacy policy.

1. These are: Andorra, Argentina, Canada (only commercial organisations), Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay and USA (if the receiver belongs to the Privacy Shield).