Privacy Notice CPCA

9th May 2024

This notice sets out how Cambridge & Peterborough Combined Authority (CPCA) will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR). This notice relates to data collected under the Home Upgrade Grant Phase 2 Technical Assistance Facility Bridge Online Portal (HUG 2 TAF Bridge Online Portal or the Scheme). This is funded HUG 2 and run by the Department for Energy Security and Net Zero.

YOUR DATA

The data

We will process the following personal data:

Local Authority:

Name of Local Authority involved in the Home Upgrade Grant Phase 2 as listed below:
Contact name for employee responsible for application and delivery
Email address for employee responsible for application and delivery
Telephone number for employee responsible for application and delivery
Application number for funding

Combined Authority:

Name of Combined Authority involved in the Home Upgrade Grant Phase 2 as listed below:
Contact name for employee responsible for application and delivery
Email address for employee responsible for application and delivery
Telephone number for employee responsible for application and delivery
Application number for HUG 2 funding

Net Zero Hub:

Name of the Net Zero Hub involved in the Home Upgrade Grant Phase 2 as listed below:
Name of Accountable Body for the Net Zero Hub
Contact name for employee responsible for application and delivery
Email address for employee responsible for application and delivery
Telephone number for employee responsible for application and delivery
Application number fo funding

Purpose

The purpose(s) for which we are processing your personal data is to support the delivery and administration of the Home Upgrade Grant Phase 2 Technical Assistance Facility Bridge Online Portal and the effective delivery of Home Upgrade Grant Phase 2.

Delivery and administration of the Scheme may require linking of your data to other datasets held by Cambridge & Peterborough Combined Authority (CPCA) or the Department for Energy Security and Net Zero.

You may also be contacted to take part in customer satisfaction surveys and/or further research. Where the research involves processing of personal data in addition to that already collected for delivery of the Scheme, you will be given the opportunity to opt into that research at the point of contact.

Your data may also be used for statistical, research and fraud prevention purposes.

Legal basis of processing

The legal basis for processing your personal data is:

Consent: You consent to us doing so
Contract: It is necessary for the performance of a contract to which you are a party should you decide to utilise the services.
Legal obligation: It is necessary to comply with a legal obligation placed on us as the data controller should we require to use your data to instruct data processes to carry out required services as stated above, or in respect of analytics and research on the use of the website.
Public task: Processing is necessary for the performance of a task carried out in the public interest. The specific public task is the delivery, administration, reporting, and evaluation of the Home Upgrade Grant Phase 2 Technical Assistance Facility Bridge Online Portal.

Recipients

Your personal data will be shared with:

Cambridgeshire and Peterborough Combined Authority
The Department for Business, Energy and Industrial Strategy
Lead Genera Ltd (technical support)
Technical Assistance Facility (TAF) Bridge Provider, Turner & Townsend
The Department for Energy Security and Net Zero and its contractors for delivery, administration and evaluation of the scheme, statistical, research and fraud prevention purposes.
Your personal data may also be shared with other Government departments where necessary.
We may share your data if we are required to do so by law, for example by court order or to prevent fraud or other crime.
Personal data shared with the Department for Energy Security and Net Zero will be stored on their IT infrastructure and will therefore also be shared with their data processors Microsoft and Amazon Web Services.
Personal data stored by Cambridgeshire & Peterborough Combined Authority will be stored on our IT infrastructure and will therefore also be shared with our data processors.

Retention

Your personal data will be stored securely by Cambridgeshire & Peterborough Combined Authority and by the Department for Energy Security and Net Zero until March 2028 following the close of the Scheme. Cambridgeshire & Peterborough Combined may choose to store anonymised data beyond this period.

Your rights

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.
You have the right to request that any inaccuracies in your personal data are rectified without delay.
You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.
You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.
You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.
You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.
You have the right to object to the processing of your personal data.
You have the right to withdraw consent to the processing of your personal data at any time, where processing is based on your consent.

How to make a request

If you wish to make a request associated with any of the rights listed above, contact Cambridgeshire & Peterborough Combined Authority using the contact details at the bottom of this notice.

International transfers

As personal data shared with CPCA and the Department for Energy Security and Net Zero will be stored on their IT infrastructure, and shared with their data processors, your data may be transferred and stored securely outside the UK and European Economic Area. Where that is the case it will be subject to equivalent legal protection through the use of Model Contract Clauses.

Complaints

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

0303 123 1113

Email: casework@ico.org.uk

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Contact details

You can contact the Cambridgeshire & Peterborough Combined Authority Data Protection Officer at:

CPCA

72 Market Street

Ely

Cambridgeshire

CB4 7LS

Email: dpo@cambridgeshirepeterborough-ca.gov.uk