Guidance

Consolidated System of European Registries (CSEUR) privacy notice

Updated 29 May 2019

Applies to England

CSEUR comprises the UK part of the EU Emissions Trading System Union Registry and UK Kyoto Protocol Registry. It is operated by the European Commission.

The Environment Agency is the:

  • National Administrator of the UK part of the Union Registry
  • Registry Administrator of the UK Kyoto Protocol Registry

We are the data controller for these services. A data controller determines how and why personal information is processed.

Our personal information charter explains:

  • your rights
  • what we do with your personal information

We are allowed to process your personal information because we:

  • have official authority as the environmental regulator
  • manage UK accounts in the CSEUR

We process your personal information so that we:

  • comply with our legal obligations for opening and managing accounts in the CSEUR
  • maintain the security and accuracy of the CSEUR

If you do not give us the information we ask for, you will not be able to:

  • open or maintain a fully functioning account in the CSEUR
  • hold the position of Authorised Representative or Additional Authorised Representative

What personal information we collect

Personal information we collect includes:

  • your full name
  • your date of birth
  • your residential address
  • your contact details (including business contact details)
  • any criminal record

We collect this information about:

  • the account holder or prospective account holder
  • the contact person for an account holder or prospective account holder, where applicable
  • nominated or approved account authorised representatives
  • beneficial owners and directors of the account holder

What we do with your personal information

We use your personal information to:

  • tell you about changes to law, policy or decisions that may affect you or your account
  • keep your account up to date

We do not use your personal information to make an automated decision or for automated profiling.

We must comply with the confidentiality rules in Article 110 of the Registries Regulation 2013 that apply to CSEUR accounts.

Under Article 110 we may share your personal information with:

  • the European Commission in its role as Central Administrator of the CSEUR
  • other National Administrators in the CSEUR in relation to security issues
  • credit reference or fraud prevention agencies
  • national and international law enforcement and tax authorities and agencies
  • competent national supervisory authorities

We will not share or disclose your personal information to any other party without your consent unless we are lawfully able or required to do so.

We will not put your personal information on a public register unless the account holder is a natural person, not a legal person. Where the account holder is a natural person, we will only place the natural person’s name and business details on a public register.

How long we keep your personal information

We keep your personal information for 5 years after the final account to which you were appointed is closed.

If your account was in the UK Kyoto Protocol Registry, we keep your personal information for 15 years after the account is closed or until any issue relating to the United Nations Framework Convention on Climate Change has been resolved.

Where your personal information is stored and processed

The Environment Agency and Shared Services Connected Ltd store and process your personal information on servers in the UK and within the European Economic Area.

We will not transfer your personal information outside the European Economic Area.

Contact

Our Data Protection Team gives independent advice. They monitor how the Environment Agency uses your personal information.

If you have questions or concerns about how we process personal information, or to make a complaint or request relating to data protection, please contact the Data Protection Team by post or email:

Data Protection Team
Environment Agency
Horizon House
Deanery Road
Bristol
BS1 5AH

Email: [email protected]

You can also make a complaint to the Information Commissioner’s Office (ICO).

The ICO is the supervisory authority for data protection legislation. The ICO website has a full list of your rights under data protection legislation.