Who are Plastic Green Power Ltd
Plastic Green Power Ltd (“we”, “our” and “us”) Plastic Green Power (PGP) is a UK based commercial project developer for low carbon solutions.
Plastic Green Power Ltd is the data controller of your personal information and our registered office is: 71-75 Shelton Street, London, WC2H 9JQ
If you have a question or concern about how your personal information is being handled then please contact our DPO. You also have a right to raise issues with the Information Commissioner’s Office: https://ico.org.uk/concerns/ We would, however, appreciate the chance to deal with your concerns before you approach the Information Commissioner’s Office, so please contact us in the first instance.
Our data protection policy
Plastic Green Power Ltd understands the importance of protecting personal information and is committed to complying with data protection law, including the Data Protection Act 2018. It is committed to fostering a culture of transparency and accountability by demonstrating compliance with the data protection principles.
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where their identity has been removed or sufficiently obscured as to make them unidentifiable.
What kinds of personal data do we process about you?
When we ask you for personal data, we will:
- tell you why we need it
- only ask for relevant information
- look after it and make sure it is only accessible to those within PGP who need to see it
- only keep it for as long there is a business, statutory or legal obligation (see our retention policy below)
- not to make your personal information available for commercial use without your permission.
In return, we ask you to:
Give us accurate information, and tell us as soon as possible if there are any changes
Across our organisation, we may collect the following types of personal information about you (this does not necessarily apply to you if taking part in research – see below for more information):
- Personal contact details
- Date of birth
- Your nationality
- Bank account information
- Equality, Diversity & Inclusion information
- Information about your career / workplace / employer / research / innovation
- Dietary and / or accessibility needs
Why we process personal information
We use the following lawful grounds for processing personal information to support our work.
When we carry out processing in pursuit of our purposes in the most part, our lawful basis for processing your personal information falls.
Public task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law, but we also make use of: contractual, legitimate and consent based processing.
Depending upon the relationship you have with us, we have outlined the purposes for which we might process your personal information.
Users of the Plastic Green Power Ltd websites
We may collect and process the following information:
- information that you provide by filling in forms or surveys
- information in correspondence that you send us
- details of your visits to our website including, but not limited to, traffic data, location data, weblogs and other communication data, and the resources that you access
We may use personal data we collect to:
- ensure that content from our website is presented in the most effective way for you
- provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes
- allow you to participate in interactive features on our website of our service, when you choose to do so
- notify you about changes to our website or services.
Information we provide to third parties:
If you are a member of Plastic Green Power Ltd
We capture and process personal information for the following reasons using public task as a lawful basis:
- To manage funding applications and awards
- To alert you to funding opportunities
- To operate the peer review process (including Portfolio Analysis)
- To undertake portfolio analysis and support theevaluation of our strategy and policy
- To investigate the effectiveness of our programmes, thismay include evaluations of Equality, Diversity & Inclusion
- To undertake Research outcomes collection, monitoring and evaluation
- To support participation in events and workshops; thismay include surveys and collecting information or accessibility requirements
- To ensure our terms and conditions of funding are met, including audit and assurance processes, research integrity and misconduct processes
- To operate our complaints policy (research conduct)
- To manage access to research services, data and facilities
- To facilitate commercialisation and technology transfer
We may share your personal information for the purposes associated with the above reasons, where we need to engage with third parties in order to carry out those public tasks.
If you are a member of the Plastic Green Power Ltd
We capture and share personal information to manage our governance processes for our public task purposes.
If you are a peer reviewer
We capture and share personal information so you can participate as a peer reviewer for our public task purposes, which may also be used to report participation statistics.
If you are a current or past employee, visiting worker, student or third party agency worker
We capture and process personal information for the following reasons using contractual, legal obligation and legitimate interest as lawful bases:
- Equality and diversity
- Personnel files
- Rewards and Benefits
- Training and development
- Management Information
- Pension Scheme Administration
- Accidents, incidents and general health and safety atwork
- Occupational Health
- Non-pay staff benefits
- Information Systems Management & Delivery
- Legal casework – grievances, disciplinary, anddismissal
We may share your personal information for the above purposes with:
Other governmental departments and regulatory bodies as a statutory requirement, such as:
- Information Commissioner’s Office
Business partners, such as:
Administration of non-pay staff benefits by the provider
If you are a member of the Public (see further below if you are taking part in Research)
We capture and process personal information for the following reasons using public task and/or consent as a lawful basis:
- Communications and public engagement activities: Surveys, Events, newsletters, communications, websites and social media
- Queries and complaints
- Evaluation and recording
We may share your personal information for the following purposes:
- To send you information about our work
- To manage your attendance at meetings outside of our own sites
If you are a supplier
We capture and process personal information for the following reasons using contractual and
legitimate interest as a lawful basis:
- Site management (building access, car parking)
- Health and Safety
- Dietary and accessibility requirements
- Equality reporting
- Service provision and management
If you are taking part in Research
This general information supplements the specific information you have already seen if you are taking part in research studies managed by Plastic Green Power Ltd.
PGP researchers capture and process personal information for the purposes of scientific research using public task as a lawful basis. Where researchers are using special categories of personal data (this includes data about your health, ethnicity, political opinions, religious beliefs, etc), the added condition of ‘necessary for scientific research in accordance with safeguards’ is used.
The research team undertaking the project will provide you with information on the types of personal data used in the study.
It is common for personal data for research to be kept for a long time with periodical reviews for the need to keep it, and the law allows for this. It is also common for research to be undertaken jointly with other research organisations. Data may be shared with other credible research teams in universities, commercial companies, health or social service providers, etc, in the UK and abroad. Most of the time the data will be depersonalised so you won’t be identified. If it is personal, there are security, legal and ethical safeguards in place to protect your interests.
If you have any questions about the particular research study you are participating in, please use any contact details that have already been provided.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
How long do we keep your personal information?
We may retain your personal information based upon business requirements, legal obligation, statutory or regulatory obligations and transactional purposes.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
Sharing personal information outside of the UK
We are based in the UK, but we also have international representation across the globe. Where we share personal information outside of the UK, we’ll make sure we put in place suitable safeguards to ensure compliance with data protection law, such as: technical measures, contractual agreements or data sharing agreements.
If you want to know how long we keep your information, please write to our Data Protection Officer.
Media and images
We process images and recordings for the purposes of CCTV, security, communication and broadcast, general public engagement and health & safety in accordance with the Information Commissioner’s Code of Practice.
What are your rights as a data subject?
Under data protection law, you can exercise your rights according to the lawful basis used for processing. All individuals have the right to:
- Be informed about how your information is being processed;
- Access a copy of the personal information we hold about you;
- Rectification if your personal information is inaccurate or changes
- Restrict processing
- Withdraw consent at any time, where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain of our services to you. We will advise you if this is the case at the time you withdraw your consent;
- Object to the processing of your data;
- Have your personal data in a commonly-used portable format;
- Not be subject to a decision based on automated processing, including profiling.
When you contact us to exercise your right, we will:
Respond to acknowledge your request has been received
If we cannot comply with your request, or can only comply with part of it, we will write to tell you of this whilst providing the reasons why.
We will provide / have acted on your request within the time period as per the current data protection law
Should we need to extend the period of time required to respond due to the complexity, we will write to inform you of this
There are exemptions to most of these rights in research, depending on the circumstances. These will be discussed with you upon making contact. The law does not allow any research exemption to your right to be informed or your right to restrict processing.
No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Time to respond
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
How and when can you withdraw consent?
Where consent has been used as the lawful basis for processing your information, you have the right to withdraw said consent. You can do this, by contacting our Data Protection Officer using the details given above.
When you have provided consent to take part in research, it is unlikely to be the lawful basis for processing personal data, but this consent can still be withdrawn or amended. If you wish to do so, you need to contact the study team directly.
Do we make use of automated decision making, or profiling?
No Changes to this privacy notice
We may change this privacy notice and we encourage you to check this privacy notice from time to time.
Current version: 1.2
Published on: 07 July 2020