We at Sliabh Bawn Power DAC (the “Company”) are committed to complying with the General Data Protection Regulation (“GDPR”) and the Data Protection Act 2018. Looking after the personal information you share with us is very important, and we want you to be confident that your personal data is kept safely and securely and to understand how we use it to offer you a better and more personalised experience.
What are the key changes for you?
GDPR sets out the following rights:
- The right to access the personal information the Company holds on you
- The right to have personal information sent directly to yourself or another organisation
- The right to have inaccuracies corrected
- The right to object, including in relation to direct marketing
- The right to restrict the processing of information
- The right to have information erased
- The right to complain to the Data Protection Commission if you feel your data protection rights have been infringed.
To exercise these rights, please follow the Contact Us directions at the bottom of this Policy. Note that the above rights are subject to various restrictions and conditions which will be explained to you of applicable.
We may collect personal identification information from you in a variety of ways, including, but not limited to, when you visit our Site, register on the Site, engage in our community engagement schemes, subscribe to our newsletter, respond to a survey, fill out a form, and in connection with other activities, services, features or resources we make available on the Site or through other Company endeavours.
Typically you may be asked for, as appropriate, name, email address, mailing address or phone number and we only collect this information where you provide it to us or where another person such as a family member provides it on your behalf (in which case we rely on the consent you have provided for this purpose).
While you are using our Site, our webserver also recognises your IP address and associated domain name. We also collect aggregate information on what pages on our Site are visited. However we will not actively track you while you are on the Site. This type of information is collected to improve the content of our website and its operation, but it is not shared with other organizations for commercial purposes. See “Web Browser Cookies” below for further information.
Non-Personal Identification Information
We may collect non-personal identification information about users of our Site whenever they interact with our Site. Non-personal identification information may include the browser name, the type of computer and technical information used to connect to our Site, such as the operating system and the Internet service provider’s utilized and other similar information.
Web Browser Cookies
How We Use Collected Information
When you provide us with your personal information, we endeavour to make it clear to you how we will use the information. In many cases, such as direct marketing contact, we will ask for your consent which you are free to give or withdraw as you wish. In other cases we need to process your personal information in order to deliver a service to you. For other purposes, we rely on the “legitimate interest” basis under data protection laws which requires us to balance our legitimate interests in using your personal information against your individual rights and interests. Examples of the types of uses and the legal bases we rely upon are below:
|Type of Use||Lawful Basis|
|Delivery of electricity services||Contract necessity|
|Provide service updates, respond to customer service enquiries and provision of customer support||Contract necessity|
|To contact you for marketing purposes||Consent (you will be asked to provide your consent which you can give or withhold at the time or subsequently withdraw by contacting us).|
|To contact you in relation to newsletters, promotions, surveys, competitions etc.||Legitimate interests. You can opt-out at any time.|
|To improve and personalise your experience on the Site||Legitimate interests. We use aggregate information to improve the layout and content of our Site. Where we offer personalised content you will be able to log in to avail of it.|
|Safety, security, health, training, administrative and legal purposes||Legal necessity or legitimate interests depending on the context. For example, we may need to process data to deal with an emergency (relying on legal necessity and protecting the vital interests of individuals) or we could use data to ensure that appropriate health and safety standards are in place (which is a legitimate interest).|
|CCTV||Legitimate interests – the safety of our staff and the public and the security of our equipment and premises.|
|Community engagement schemes||Legitimate interests – for example, we will process information relating to participants in our Near Neighbour Scheme (“NNS”) and keep a record of those who choose not to participate or to stop participating.|
We do not engage in automated decision making about you that produces legal effects or similarly significantly affects you.
How We Protect Your Information
We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password and data stored on our Site.
Sensitive and private data exchange between the Site and its Users happens over a SSL secured communication channel and is encrypted and protected with digital signatures.
The servers where we store personal information are located in a secure facility and any access to your personal data is strictly controlled and limited only to persons who are authorised and have appropriate security clearance to access the servers
How long will we keep your data?
Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected. For example, if you are a customer we will typically keep your personal information for the duration of your customer relationship plus a period of 7 years to deal with any evidential, legal, regulatory, tax or audit issues that may arise in connection with your account.
At the end of that retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
Sharing Your Personal Information
We do not sell, trade, or rent your personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding our customers or Site users with our business partners, trusted affiliates and advertisers for the purposes outlined above. We may use third party service providers to help us operate our business for example:
- IT companies who support our website and other business systems and Operational companies such as delivery couriers. Direct marketing companies who help us manage our electronic communications with you.
- Every now and again, we receive requests for information from government departments, An Garda Síochána and other enforcement agencies. If this happens, and there is a proper legal basis for providing your personal information, we will provide it to the organisation asking for it.
- Coillte Teoranta (“Coillte”), who own and manage the servers where we store personal information pursuant to a services agreement with us.
We do not currently send personal information outside of the European Economic Area. However should we do so we will adopt “model contract clauses” or another mechanism approved by EU law to ensure the data is adequately protected.
Sliabh Bawn Power DAC
County Wicklow A63 DN25
Or Telephone: (01)2011111 : LoCall: 1890 927836 (Monday to Friday)