The Energy & Climate Intelligence Unit (ECIU) is an independent non-profit think-tank that supports informed debate on energy and climate change issues in the UK. It is a private not-for-profit company limited by guarantee (Company Number 8863041), and the registered address is 40 Bermondsey St, London, SE1 3UD. ECIU is a ‘Data Controller’ and ‘Data Processor’ of the personal data that you provide to us.
We respect all personal data that we hold, and we will ensure it is stored safely and processed fairly and lawfully in accordance with the requirements of the Data Protection Act (1998) and the General Data Protection Regulation (from May 2018).
1) Why do we collect information about you?
We collect data to allow us to carry out our organisation’s remit of supporting and promoting evidence-based policy and discourse on energy and climate change issues.
2) What information might we collect?
We may collect the following personal data:
- Organisation and job title
- Contact information including email address, telephone number, contact details of your organisation or institution, home address
- IP address and information regarding which of our web pages are accessed and when from our website
- Photographs taken at events we organise
- Bank details (for contractors and staff)
We may also collect information about you from publicly available sources, from information published in newspapers or from your institution’s website.
We use the data to:
- Send you our daily news alert
- Pitch stories, op-eds and commentaries (for press, media, or communications contacts)
- Support stakeholders with accurate and accessible briefings on key energy and climate change issues
- Build our list of experts whom we can contact for comments or thoughts
- Invite you to events we may organise that we think would be of interest to you
- Keep a record of your relationship to us
- Pay contractors and staff
3) Lawful Basis for Processing
a) For subscribers who have signed up for our daily news alert via our website:
We hold your data under the lawful basis of processing of consent that you have given and which can be withdrawn or changed at any time. Your data will be provided by you at the point of consent, which will be specific and explicit.
b) For media contacts (such as journalists, press officers and those working within communications):
We hold your data under the lawful basis of processing of legitimate interest, as we view interaction between ECIU and media contacts as a core element of ECIU’s work and thus a necessary component of the professional activity of both parties. Your data may have been sourced from third party data provider media databases, publicly available sources such as your organisation’s website, or social media platforms.
c) For stakeholders, including parliamentarians and academics:
We hold your data under the lawful basis of processing of legitimate interest, due to ECIU’s aim of supporting these groups with accurate and accessible briefings on key energy and climate change issues.
d) For event invitees and attendees:
We will process your data under the lawful basis of processing of legitimate interest, as we believe the events will be of interest and use to you in your professional capacity. Your data may have been sourced from public websites or databases or social media platforms. We will hold your data for up to two years after the event, as there may be follow-up outputs or similar events that we think would be of interest or use to you.
We also collect data on our employees, job applicants, contractors and Advisory Board members and process this data under the lawful basis of processing of legitimate interest or contract.
Any data subject can object to the holding or processing of their data at any time and can easily opt out of receiving information from us by either unsubscribing from our newsletter or contacting us with a request to remove you and information we hold about you from our lists.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. Our website is secured using an SSL certificate. However, please note that we have no control of websites outside the www.eciu.net domain. Once you click on an external site it will be subject to that organisation’s privacy policies and not ours.
5) Sharing Personal Information
We use MailChimp to securely manage mailing lists and preferences, and to send our daily news alert and event invitations. MailChimp is headquartered outside the EEA and stores your data in the US. MailChimp is certified under the EU-US Privacy Shield Framework. We use Google Analytics to track visitors to our website. More information on this can be found in the Cookies section below.
We will not share or sell your information with any other organisations or pass your data to anyone without your consent.
6) Retention Periods
We will retain your information on our systems for as long as is necessary for the relevant activity or until you notify us that you no longer wish to receive our information. You can do this by unsubscribing from our newsletter, contacting us at email@example.com or calling us on 020 3196 6920.
Our website uses a single cookie. A cookie is a small file of letters and numbers that the website puts on your computer. The ‘analytical’ cookie we use allows us to recognise and count the number of visitors to our website and to see how visitors move around the site when they are using it. We use a third party analytics tool, Google Analytics, to track this information. It helps us to improve the way our website works, for example by making sure users are finding what they need easily. This cookie does not give us access to your computer.
8) Your Rights
We will ensure that you can exercise your rights in relation to personal data that we hold:
- You have the right to request access to the personal data we hold on you by making a subject access request in accordance with the GDPR. We may charge a reasonable fee if a request is manifestly unfounded or excessive (see Contact Details below)
- You have the right to have your personal data rectified if it is inaccurate or incomplete (see Contact Details below)
- You have the right to restrict the processing of your personal data in certain specific circumstances
- You have the right to have your personal data deleted in certain specific circumstances
- You have the right to object to the processing of your personal data in certain specific circumstances
- You can ask for a copy of your information in a machine-readable format to allow you to obtain and reuse your personal data for your own purposes across different services (the right to data portability)
- You have the right to complain to the Information Commissioner’s Office, the supervisory authority, about our collection and use of your personal data if you are not satisfied with our response. They can be contact at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or via www.ico.org.uk
9) Contact us
If you have any questions regarding this policy, please email firstname.lastname@example.org, write to us at ECIU, 40 Bermondsey St, London SE1 3UD or call us on 020 3196 6920.
This policy is effective from May 2018. ECIU may change this policy from time to time.