This Privacy Notice was last updated on 26 April 2021.
Guernsey Electricity Limited (We, Us, Our) takes the privacy of your personal information very seriously. This Privacy Notice explains how and for what purposes We use and disclose the information We collect about you and what your legal rights are. Please read this Privacy Notice carefully. By using Our website and any products and services We offer or by participating in any of Our competitions or initiatives, you are agreeing to be bound by this Privacy Notice in respect of the information We collect, use and disclose about you.
The Data Protection (Bailiwick of Guernsey) Law, 2017 (as amended) which incorporates the EU General Data Protection Regulations 2018 (together the “2017 Law”) recognises the importance of safeguarding individuals’ personal information and places legal obligations on those who collect, use and disclose such information. Personal information is “any information relating to an identified or identifiable [living] individual” and is defined as “Personal Data” under the 2017 Law. In practice, this definition is very broad and includes both factual information about individuals as well as opinions expressed about individuals and anonymised data that could identify individuals if it was combined with other information.
Some Personal Data is treated under the 2017 Law as falling within a special category if it is of a sensitive nature defined under the 2017 Law as “Special Category Data”. Special Category Data is either “Personal Data revealing an individual’s racial or ethnic origin; political opinion; religious or philosophical belief or trade union membership” and/or “genetic data; biometric data; health data; Personal Data concerning an individual’s sex life or sexual orientation or criminal data”.
The collection, use and disclosure of Personal Data and Special Category Data are included within the definitions of “processing” and “process” under the 2017 Law and for the purposes of this Privacy Notice, the term “processed” shall have the same meaning.
We are regarded as the “Controller” of Personal Data and Special Category Data under the 2017 Law in relation to Our processing of such information and so We are legally required to provide you with this Privacy Notice. You are regarded under the 2017 Law as the “Data Subject”.
Please note that We will regularly review this Privacy Notice and so its content may vary from time to time. It is important that you read this Privacy Notice together with any other privacy notice We may provide on specific occasions when We are processing your Personal Data and Special Category Data, so that you are aware of how and why We are processing such information.
If you have any questions about this Privacy Notice, please contact Our Data Protection Officer at:-
The Data Protection Officer
Guernsey Electricity Limited
Telephone: +44 (0)1481 200700.
PLEASE NOTE:- We cannot give legal advice on your rights and you should seek your own independent legal advice or contact the Guernsey Office of the Data Protection Authority (ODPA) at:-
The Office of the Data Protection Authority
St Martin's House
St. Peter Port
Telephone: +44 (0)1481 742074.
Note that you have the right to lodge a complaint with the ODPA as the supervisory authority appointed under the 2017 Law.
What Personal Data Do We Collect?
We may collect the following types of Personal Data about you when you communicate with Us for any reason or use and/or purchase Our products and Our services or participate in Our competitions or initiatives:-
PLEASE NOTE:- If you are 16 or under, you must ask your parent or guardian’s permission before entering any of Our competitions or participating in any of Our initiatives or providing any Personal Data to Us.
Details relating to Electricity Supply:-
The above lists are indicative of the type of Personal Data We may collect about you and are not exhaustive.
Personal Data may also be collected by Us from other people acting on your behalf, with your prior knowledge and approval (and as verified by Us), (e.g. by agents, professional advisers or family members).
Personal Data may also be collected about you from commercial or public third parties, (for example as part of credit control, property management, for recruitment purposes or in marketing surveys).
If you are considering seeking employment with Us, your enquiry/application will remain private and will stay on Our records for a period of 6 months if your application is unsuccessful and for the duration of your employment if successful. We shall not disclose any of your Personal Data to anyone, except the people handling submissions on Our behalf.
If you fail to provide certain information when requested, We may not be able to perform the contract We have proposed to enter or entered with you or We may be prevented from complying with Our legal obligations.
What Special Category Data Do We Collect?
We may collect the following relevant Special Category Data about you:-
Health data will be kept by Us where it is legal, reasonable and necessary to do so in respect of matters including but not limited to employment, health and safety, legal, regulatory and insurance, for example.
We also offer additional products and services for vulnerable customers (e.g. the elderly and infirm). Customers can apply to be included on Our register of vulnerable customers.
This information will be kept by Us where it is legal, reasonable and necessary to do so, including but not limited to such areas as “pre-recruitment vetting”, investigating and handling of any crime or suspected crime, insurance claims, vandalism to property or damage to the electricity network or fraud.
Biometric data is Personal Data resulting from specific technical processing relating to the physical, physiological or behavioural characteristics of an individual, which allows or confirms the unique identification of that individual, such as facial images or fingerprint data.
Your biometric data may also be processed by Our CCTV which is in operation on Our premises. This is to ensure the security and safety of Our staff, customers, premises and systems against criminal activity or damage or anti-social behaviour, for example.
We may ask you to provide Photo ID when signing up to a Third Party Finance agreement. This will only be used in your application and will not be stored by us.
The above lists are indicative of the type of Special Category Data We may collect about you and are not exhaustive.
For the purposes of this Privacy Notice, Personal Data and any relevant Special Category Data shall together be regarded below as “Data”.
The Purposes of Our Processing
Provided We are lawfully permitted to, the purposes for which We process your Data will be made clear to you at the point We collect that Data from you. Provided We are lawfully permitted to, We will not process your Data for purposes that are not made clear by Us when it is collected by Us.
Generally, the Data you provide Us is processed by Us in order to:-
The above lists are indicative of the type of purposes for which We may process your Data and are not exhaustive.
In some cases, We are required to process (including retain) your Data in order to meet all legal, regulatory and ethical obligations incumbent upon Us and We may not always be lawfully permitted to notify you of such processing or comply with your legal rights.
We will process Data We hold about you to help Us confirm your identity and ensure such information is protected from unlawful disclosure and to also ensure such Data is not changed so far as possible without your prior knowledge and approval.
If necessary, your Data may be processed in the preparation of training materials for Our staff although We will use fictional data where possible.
We may use your Data for modelling statistics, for example to model usage enabling Us to develop and maintain the electricity network for all Our customers. However, such statistical data will usually be anonymised so you will not be identifiable.
You may provide your consent for Us to process your Data for direct marketing, to allow Us to keep you informed of products and/or services that We offer, or in promotional activity, (such as competitions and initiatives). We cannot process your Data for these purposes without your explicit and freely given consent to the processing of such Data for such purposes, which We will request before We process such Data for such purposes. You have the legal right to withdraw your consent to direct marketing and promotional activity at any time and can do so by contacting Our Communications team by email at firstname.lastname@example.org.
The Lawful Basis for Our Processing
The 2017 Law requires that We have a lawful reason for processing your Data. We will therefore only process your Data where the 2017 Law allows Us to.
Generally, the lawful basis upon which We may process your Data are as follows:-
We rely upon this lawful basis where We need to process your Data in order to deliver a contractual service to you or because you have made an enquiry before entering into a contract with Us (e.g. in providing a quote), for example.
In some cases We need to process your Data to comply with a legal or regulatory obligation. As part of Our legal obligations, We may be obliged to disclose your Data to public and regulatory authorities, law enforcement agencies and similar official bodies, for example.
As Guernsey’s public electricity supply licensee, We perform a function that is of a public nature. For the purposes of the 2017 Law, We may therefore be regarded as a “public authority” and as of consequence, this may be used in some cases by Us as a lawful basis for processing your Data.
This is a wide-ranging lawful basis which covers the processing of your Data which you would reasonably expect to happen, where that processing is necessary for Our legitimate interests, or those of a third party, and your interests do not override those legitimate interests.
When We ask you for consent to process your Data, that consent must be freely given, explicit and with a positive action to opt-in. It must be clear to you as to what purposes your Data will be processed by Us you are consenting to. We may require your consent to be confirmed in writing.
We will keep records of your consent and, as stated above, you have the legal right to withdraw your consent at any time.
Some of the above lawful grounds for processing your Data will overlap and there may be several grounds which justify Our processing of your Data.
You should note that the lawful basis We rely upon will affect the legal rights that are available to you.
What Are Your Legal Rights?
Depending on the lawful basis relied upon by Us to process your Data, the 2017 Law provides that you have or may have the following legal rights in respect of your Data:-
There are two other rights you have which have already been mentioned above:-
Where you have given your specific consent to Us for your Data to be processed and this is Our lawful basis of processing your Data, you have the right to withdraw such consent. If it is not obvious as to how you can withdraw your consent, please email email@example.com or use Our other contact details above.
As described in the ‘Contact Details’ section above, you have the right to make a complaint to the ODPA if you are unhappy about how your Data is being processed by Us or you think it is not in keeping with the 2017 Law.
The ODPA will consider your complaint and may carry out an investigation should it consider that your complaint has reasonable grounds and is generally appropriate.
Should you wish to exercise any of the above rights then you may do so either verbally or in writing to Us. Provided We are lawfully permitted to, We will respond to you without undue delay and at the latest within one month (which may be extended if the request is complex) of confirming your identity.
No fee is usually required. You will not have to pay a fee to access your Data (or to exercise any of the other rights). However, We may charge a reasonable fee if your Data Subject Access Request is clearly unfounded or excessive.
However, We can also refuse any request (a Data Subject Access Request or otherwise) you make if a lawful exemption or restriction (whether under the 2017 Law or otherwise) applies, or if the request is manifestly unfounded or excessive.
Existence of Automated Decision Making
We use automated decision making in the following ways:-
We will only retain your Data for as long as necessary to fulfil the purpose(s) We processed it for. Provided We are lawfully permitted to, We will notify you when We no longer retain your Data and the reasons why.
In many cases your Data will be kept for 6 years after the last date of Us processing your Data as this is the general legal limitation/prescription period under Guernsey law in which a legal claim can be brought by you in respect of such processing. However, in some cases, other laws (legislation or otherwise) may require Us to keep your Data for longer periods depending on what that law provides and what type of Data is processed by Us. Provided We are lawfully permitted to, We will notify you if We do retain your Data for a period longer than 6 years and the reasons why.
We will periodically review the Data We hold about you and, if lawful, delete anything We do not need. Provided We are lawfully permitted to, We will notify you if We do delete any or all of your Data and the reasons why.
Where possible and lawful We will anonymise your Data so that it can no longer be associated with you. As you will no longer be identifiable from such Data, We may process such Data without further notice to you.
We may share your Data with third parties where there is a legal basis upon which to do so. We require third parties to respect the security of your Data and to treat it in accordance with the 2017 Law subject to any other overriding law (legislation or otherwise).
We will not share or sell your Data with anyone outside of Guernsey Electricity Limited except as set out below:-
Linking to Third Party Websites
We cannot be responsible for the privacy policies and practices of other websites even if you access them using links from Our website and recommend that you check the policy of each website you visit and contact its owner or operator if you have any concerns or questions.
In addition, if you linked to Our website from a third party website, We cannot be responsible for the privacy policies and practices of the owners or operators of that third party website and recommend that you check the policy of that third party website and contact its owner or operator if you have any concerns or questions.
Transfers to Other Countries or International Organisations
We may transfer and store Data We collect about you with organisations based in the European Union and with other countries which are “authorised jurisdictions” as defined and permitted under the 2017 Law to process your Data and includes the UK.
We prefer to use services which store their data in the EU or other authorised jurisdictions. However, there will be cases where it is necessary to store your Data in other jurisdictions. In these cases, We will do so only where the EU’s Standard Contractual Clauses can be agreed between Us and the third party processing your Data or where your prior written consent is obtained.
The EU’s Standard Contractual Clauses ensure that the third party handles your Data in the same way as expected by the 2017 Law.
We have implemented technology and polices to safeguard your Data from unauthorised access and improper use.
The details within this Privacy Notice do not nor are intended to be a definitive statement of the law of data protection as applied in Guernsey and should not be taken as legal advice. Nor are We able to give you any legal advice on any matter referred to in this Privacy Notice.
We do not make any warranties or guarantees in relation to the content of this Privacy Notice and We do not accept any liability for any reliance you may place upon its content for legal advice.
Appendix: Website Cookies
Cookies are small files that are sent for storage on your computer when you access a web page.
These services may also collect your IP address(es).
Please see the following links for information on how these cookies work:-
Cookies may also be used to temporarily store your Data when you use Our online services, such as in making a payment.
We never store Credit Card information. To process card information, you will be temporarily redirected to a third party to collect your payment.
You can disallow cookies at any time by amending your web browser settings, by using a private browsing tab or by using a privacy browser such as DuckDuckGo (https://duckduckgo.com). Although if you do decline cookies, you may find some features of Our website may not work.