Privacy Policy
Your Privacy
Our website (“the Website”) provides general information on our products and services which are mainly aimed at a business audience, and we hope that you find your visit informative and interesting.
We also provide a contact form for candidates to apply for vacancies and upload their cover letters, CVs, and other information in relation to job vacancies that we may advertise, or where an application is speculative.
What is the purpose of this Privacy Policy?
The Website is operated by BSR Group Holdings Limited for itself and its subsidiaries (“BSR Group”) whose registered address is at 35 and 35A The Maltings, Lower Charlton Trading Estate, Shepton Mallet, Somerset, BA4 5QE. BSR Group Holdings Limited is the controller of your personal information. One subsidiary, British Solar Renewables Limited (“BSR”), carries out all data processing responsibilities for the subsidiaries and is therefore a processor of your personal information.
We use the Website to provide you with information about our products and services and to allow you to contact us if you wish to discuss your requirements with us.
We may also collect personal information from you if you submit a CV or other information to apply for a job or enquire as to whether we have any vacancies.
We may also collect personal information from you in connection with proposed development projects where it is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering a contract.
If you have any queries about the Website, this Privacy Policy or how we use your personal information, please contact GDPR@britishrenewables.com.
This Privacy Policy tells you:
- What personal information we collect about you;
- How we collect your personal information;
- How we use your personal information;
- Who we may share your personal information with;
- Any transfer of personal information outside of the UK and the EEA;
- How long we keep your personal information;
- What we do to protect your personal information; and
- What choices you have in relation to your personal information.
We last updated this Privacy Policy on 05/08/21
Personal Information
What Personal Information we may process about you
We may collect the following information about you:
- your name and address;
- your mobile phone number;
- your email address;
- Job applicants – CV including training, employment history, hobbies, interests.
Personal Information you give us
We collect personal information from you if you contact us via:
- the Website;
- our online contact forms;
- an email link;
- participation in an online chat;
- email, phone, or written correspondence.
Personal Information we collect automatically.
When you use the Website, we may collect certain information automatically such as:
- IP addresses (the name and internet address your device uses to identify itself to us); and
- Your activity on the Website including times and dates of visits.
If you want to know more about how we use cookies, please see our cookies statement.
How we use your Personal Information
Our legal basis for using your information
The law only allows us to use your personal information in certain limited circumstances.
Example 1
If you submit a CV or a job application via the Website, we will only process that information to comply with your request for further information regarding your application for a job.
If you submit a CV or a job application, then we may keep your CV on file for up to a year. We believe that our legitimate interests in ensuring that we have access to suitable candidates for future roles does not override your interests and fundamental rights. You can request us to delete your information at any time.
Example 2
If you provide us with contact details in connection with a proposed development project, we will only process that information to perform our contractual obligations or to take steps at your request prior to entering a contract.
If you provide us with contact details for this purpose, then we may keep your details on file for the duration of any such contractual (or pre-contractual) relationship. If that relationship comes to an end or the development project in question does not proceed, then all but the most basic information (e.g., name and address) would be deleted.
Sharing your Personal Information
Within the BSR Group
As stated above, BSR carries out the data processing function on behalf of all members of the BSR Group. Accordingly, your personal information will be processed by that company.
Each of the companies in the BSR Group have their own specific remit. We will pass your personal information to the relevant subsidiary so that it can be actioned appropriately. All members of the BSR Group abide by this Privacy Policy.
Our Business Partners
Your information may be accessible and stored by our electronic communications providers and our analytics and search engine providers.
The following are used by us:
- Microsoft (EU Cloud Services);
- AWS (EU Cloud Services) and;
- Google Analytics.
Legal Requirements and Law Enforcement
We may also disclose your personal information to third parties in the following circumstances:
- If we sell our business, in which case the personal information that we hold will be part of the transferred assets.
- If we are required to by law, or to enforce the Website terms of use. This includes exchanging information with other organisations for the purposes of fraud protection and credit risk reduction and law enforcement agencies.
Third Party Privacy Policies
The Website may contain links to websites owned by other organisations. If you follow a link to another website, these websites will have their own privacy policies. We suggest that you check the policies of any other websites before giving them your personal information as we cannot accept responsibility for any other website.
Keeping your Personal Information
How we store your personal information
The security of your personal information is important to us. We use appropriate technical and organisational measures to safeguard personal information. We use encryption technology where appropriate to enhance privacy and help prevent information security breaches. We use industry standard measures and processes for detecting and responding to inappropriate attempts to breach our systems.
We may transfer personal information from the UK to a country outside of the EEA. If we do, we will ensure that we enter into a data transfer agreement which gives you enforceable rights and legal remedies and provides adequate levels of protection for any personal information that is transferred outside of the UK and the EEA.
All third parties who provide services to the Website are required to sign a contract requiring them to have appropriate technical, administrative, and physical procedures in place to ensure that your information is protected against loss or misuse.
All information you provide to us is stored on our secure servers or on secure servers operated by third-party providers. Information on our third-party providers can be found above.
Retention of information
We only hold your personal information for as long as necessary for the purposes for which we collected your information.
We have a company retention policy which lays down timescales for the retention of information.
We have set these timescales in accordance with applicable legislation and where none exist, then we will keep your information for a period of 7 years after which time it will be deleted.
Emails
If you choose to send us information via email, we cannot guarantee the security of this information until it is delivered to us.
Your Rights
Access to information
You have the right to access information that we hold about you. If you wish to receive a copy of the information that we hold, please contact us at GDPR@britishrenewables.com or write to us at the address above.
Changing or deleting your information
You can ask us at any time to change, amend or delete the information that we hold about you or ask us not to contact you with any further marketing information. You can also ask us to restrict the information that we process about you.
You can use the check boxes on the forms we use to collect your information, or you can also request that we change, amend, delete your information or restrict our processing by emailing us at GDPR@britishrenewables.com or writing to us at the address above.
Right to prevent Automated decision making
You have a right to ask us to stop any automated decision making. We do not intentionally carry out such activities, but if you do have any questions or concerns, we would be happy to discuss them with you and you can contact us at GDPR@britishrenewables.com.
Transferring Personal Information
You have the right to request that your personal information is transferred by us to another organisation (this is called “data portability”). Please contact us at GDPR@britishrenewables.com with the details of what you would like us to do, and we will try our best to comply with your request. If may not be technically feasible, but we will work with you to try and find a solution.
Complaints
If you make a request to us under this Privacy Policy and you are unhappy with the response, you can ask for the request to be reviewed under our internal complaints procedure. Our internal complaints procedure allows your request to be reviewed by our Legal Team who will do their best to try and resolve the issue.
If you have been through the internal complaints procedure and are still not happy with the result, then you have the right to complain to the Information Commissioner’s Office. They can be contacted as follows:
Website: www.ico.org.uk
Telephone: 03031231113
Address: Information Commissioners Office
Wycliffe House
Water Lane
Wilmslow
CheshireSK9 5AF
Changes to our Privacy Policy
We review our Privacy Policy on a frequent basis to check that it accurately reflects how we deal with your information and may amend it if necessary. You should check this page regularly to see the most up to date information.
How to Contact us
We welcome questions, comments and requests regarding this Privacy Policy which can be sent to GDPR@britishrenewables.com.