Trydan Gwyrdd Cymru - Privacy Notice

Created: 11 July, 2024  

Last updated: 11 July, 2024 

  1. IMPORTANT INFORMATION AND WHO WE ARE 

  1. This Privacy Notice details how we, Trydan Gwyrdd Cymru Ltd, collect and process your personal data.  

  1. This Privacy Notice relates to your personal data that is collected, processed, stored or otherwise used by us as a data controller, for example, in respect of personal data collected via your use of our website or engaging in our market research. We are registered as a data controller with the Information Commissioner’s Office.  

  1. Please read this Privacy Notice together with any other fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This Privacy Notice supplements other notices and privacy policies and is not intended to override them.  

  1. This Privacy Notice may change from time to time and, if it does, the up-to-date version will always be available on our website.  

  1. We may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.  

  1. CONTACT US AND COMPLAINTS 

  1. We have appointed a Data Protection Officer who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this Privacy Notice or our use of your information you can contact us at croeso@trydangwyrddcymru.wales  

  1. You also have the right to make a complaint to the Information Commissioner’s Office about our use of your information, you can contact the Information Commissioner’s Office at Contact us - public | ICO. 

  1. WHAT DATA WE COLLECT 

  1. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows: 

  1. Information you give to us. You may give us information about you when communicating with us by post, email, telephone, in person, via online questionnaire or via our website.  

          The information you give to us may include your name and                  your contact details, such as email address, home address                    and phone number (or business email address and business                phone number), your views on our projects, your views on                    energy citizenship, your employment, age, gender and race or            ethnicity.  

  1. Information we collect about you. Each time you visit our website, we may automatically collect the following information: 

  1. web usage information (e.g. IP address), your login information, browser type and version, time zone setting, operating system and platform; and  

  1. information about your visit, including the URL clickstream to, through and from our website (including date and time); time on page, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs).  

  1. Information we receive from other sources. We may commission third parties to help us engage with you and ask your opinion on questions pertinent to our purpose mission and vision. We may receive information about you from third parties, including technical data from analytics providers or from our third-party suppliers.​     ​ 

  1. We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate the data on how you use our website to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Notice. 

  1. We collect Special Categories of Personal Data about you (this may include details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). We do not collect any information about criminal convictions and offences.  

  1. OUR USE OF COOKIES  

  1. Our website uses cookies to distinguish you from other users, to improve your experience on our website. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.  For more information, please view our Cookies Policy here. 

  1. HOW WE USE YOUR DATA 

  1. We use your data to: 

  • respond to any queries you send us, if you have asked us for a response 

  • gather data for market research purposes to shape our work and influence our decision-making  

  • to encourage participation in our engagement activities 

  • monitor use of this site including to identify any security threats 

  • monitor the performance of our site to identify inefficiencies and errors 

  • notify you about changes to this privacy notice 

  1. OUR LEGAL BASIS FOR PROCESSING YOUR DATA 

For the purposes of site security 

Our legitimate interests, and those of our users, in ensuring the security and integrity of this site 

All other purposes 

Our legitimate interests of providing a response to a query submitted by you and gathering stakeholder information and opinions to shape our work and influence decision making and/or optioneering. 

 

Sometimes, we may need to process your data to comply with a legal or regulatory obligation.  

  1. Please note that we may process your personal data without your knowledge or consent, in compliance with the relevant rules, where this is required or permitted by law. 

  1. HOW LONG WE KEEP YOUR DATA  

  1. We will retain your personal data for as long as it is needed for the purposes set out in this notice or for as long as we are required to by applicable law.  

  1. We will:  

  • keep data relating to the planning process (including queries you send us) for the duration of the planning process which usually ranges between 2 and 10 years, depending on the project 

  • keep market research data for 5 years after which time we may anonymise your data  

  • keep data in relation to your use of our site for 100 days after which time we will securely delete it.  

  1. PROMOTIONAL CONTENT AND THIRD PARTY MARKETING  

  1. As set out above, we will use your personal data to share promotional content and encourage participation in our engagement activities.  

  1. Except as specified above, we do not rely on consent as a legal basis for processing your personal data.  

  1. HOW WE SHARE YOUR PERSONAL DATA 

  1. We may share your personal data with the parties set out below for the purposes set out in the table in paragraph 4 above: 

  1. Service providers who provide IT and system administration services. 

  1. Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.  

  1. HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom who require reporting of processing activities in certain circumstances. 

  1. Engagement contractors solely for the purposes of analysing and compiling reports for market research. 

  1. Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Notice. 

  1. We will also share data with Welsh Government, but this data will be anonymised.  ​     ​ 

  1. INTERNATIONAL TRANSFERS  

  1. We may transfer your personal data to service providers that carry out certain functions on our behalf. This may involve transferring personal data outside the UK to countries which have laws that do not provide the same level of data protection as the UK law. 

  1. Whenever we transfer your personal data out of the UK to service providers, we ensure a similar degree of protection is afforded to it by ensuring that the following safeguards are in place: 

  1. We will only transfer your personal data to countries that have been deemed by the UK to provide an adequate level of protection for personal data, namely, the European Union. 

  1. Where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.  

  1. Please contact us if you require further information on the specific mechanism used by us when transferring your personal data out of the UK.  

  1. HOW WE PROTECT YOUR DATA 

  1. Protecting your data is important to us. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality. 

  1. YOUR RIGHTS 

  1. Under certain circumstances, you have rights under data protection laws in relation to your personal data. You have the right to: 

  1. Request access to your personal data (commonly known as a "data subject access request").  

  1. Request correction of the personal data that we hold about you.  

  1. Request that your personal data is erased if there is no good reason for us continuing to process it.  

  1. Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party). 

  1. Request restriction of processing of your personal data.  

  1. Request the transfer of your personal data to you or to a third party.  

  1. Withdraw consent at any time where we are relying on consent to process your personal data.  

  1. You can exercise these rights by contacting us at croeso@trydangwyrddcymru.wales.