Scottish Power Limited (“ScottishPower”) respects the privacy of everyone who uses our services. We are obligated by the EU General Data Protection Regulation (GDPR) to inform you about the way we use your personal information. Please read our privacy notice to understand our approach to processing your personal data.
When you submit your personal information to us, you give us your permission – where necessary and appropriate – to process it in the ways outlined in this privacy notice.
What does this privacy notice cover
The purpose of this privacy notice is to inform you of the ways in which your personal information is processed when it is provided by you via our website. From time to time, you may be directed to a different Scottish Power website, we advise you to check the privacy notice of each website you visit in case it differs from this notice.
Who controls your personal information
The Data Controller of your personal information is Scottish Power Limited (“ScottishPower”) with registered number SC193794 whose registered office is at 320 St. Vincent Street, Glasgow, G2 5AD.
Why we collect your personal information
We collect your personal information for a number of reasons. Personal information that we collect is taken from a 'Careers Trainee Programme' form, a 'Scholarships for Masters Studies in the UK' form, a 'Summer Placements' form, a mailbox to apply for our Experienced Engineer opportunities, a mailbox to apply for our Offshore Opportunities and an 'Energy Sales Advisor' form.
The 'Careers Trainee Programme' form is for interested candidates to select the ScottishPower training programme which interests them so we can contact them when the application process opens for each of these.
The 'Scholarships for Masters Studies in the UK' form is for candidates to register their interest in the Scholarship programme so we can contact them when the application process opens for the up coming academic year.
The 'Summer Placements' form is for candidates to register their interest in a 12 week summer placement so we can contact them when we have finalised our placements for the up coming year.
Candidates interested in applying for our Experienced Engineer opportunities use the mailbox to send us their CV for a dedicated position which ScottishPower will then asses for suitability. If the candidate meets the specified skill set and experience we will contact them to invite them to start the recruitment process with us.
Candidates interested in applying for our Offshore Opportunities use the 'renewablesrecruitment@scottishpower.com' email address to send us their CV for a dedicated position which ScottishPower will then asses for suitability. If the candidate meets the specified skill set and experience we will contact them to invite them to start the recruitment process with us.
The ‘Energy Sales Advisor’ form is for interested candidates to apply for an Energy Sales Advisor role to represent ScottishPower at Energy Points and Venues across the UK. In this case only, the Data Controller is ScottishPower Energy Retail. Your details will be used to assess your suitability for the position and to help answer any follow up queries you may have in relation to your application. Any queries in relation to your personal data arising from an application for the Energy Advisor role, can be made to dataprotection@scottishpower.com
We may use your personal information for direct marketing as a way of optimising the services that we provide to you. We will only do this when you are aware and, if required, we will ask for your consent prior to sending you any direct marketing materials. If you would like us to stop using your personal information at any time for any or all of the purposes outlined above, please contact us as set out in the ‘Contacts’ section below and we will consider your request in line with the GDPR and any other applicable data protection legislation.
In accordance with the GDPR, the lawful bases upon which we process your personal information are:
- Consent – you have given us clear consent to process your personal information for a specific purpose
- Legal obligation – the processing is necessary for us to comply with the law (not including contractual obligations)
Your personal information will occasionally be transferred to third party organisations, some of whom may be located outside of the European Economic Area (EEA), as part of the services that we offer to you. For example, this could happen if any of our servers that store your personal information are located in a country outside of the EEA, or when one of our service providers is located in a country outside of the EEA.
The agreements that we have with these third party organisations are such that they will not use your personal information for any other purposes other than those we have agreed with them. We explicitly request that any third party organisations with whom we share personal information implement adequate levels of protection to safeguard your personal information in accordance with the GDPR and any other applicable data protection legislation.
In line with this privacy notice, we will not share or transfer your personal information without your permission, unless we are under a legal obligation to do so (for example, for the purposes of legal proceedings or fraud/crime prevention) or where such an action is necessary to protect and/or defend our rights, property or the personal safety of our staff, customers or other individuals.
Non-personal information
In the course of interactions, we may automatically collect some of your non-personal information, such as the website from which you accessed ours or the type of internet browser you are using. We may also collect aggregated data which in itself does not personally identify you, such as your age or your city of residence. Information such as this is only used to help us provide an effective service and sometimes we may supply this non-personal information to third parties for statistical purposes.
Accuracy of your personal information
In line with this privacy notice, it is our responsibility to maintain the accuracy of the personal information we hold and process about you. If you would like to review, change or delete the personal information that you have given to us, please contact us as set out in the ‘Contacts’ section below.
Data Retention
In accordance with our Retention Schedule, personal information collected from the 'Careers Trainee Programme' form, the 'Scholarships for Masters Studies in the UK' form, the 'Summer Placements' form and emails into the Experienced Engineer and Offshore Opportunities mailboxes will be retained for no longer than 1 year. Personal information collected from the 'Energy Sales Advisor' form will be retained on file for 6 months. In all instances, once this period expires, the personal data will be securely destroyed.
Security
We have taken all appropriate technical and organisational measures in accordance with the GDPR to protect your personal information against unauthorised or unlawful processing and against accidental loss, destruction or damage. We are committed to updating these measures appropriately as new technology becomes available.
Contacts
In accordance with the GDPR, you can contact us at dataprotection_corporate@scottishpower.com to exercise any and all of the following rights that you have in relation to our processing of your personal information:
- Right of access – you have the right to obtain confirmation that your personal information is being processed and access to your personal information
- Right to rectification – you have the right to have your personal information rectified if it is inaccurate or incomplete
- Right to erasure (Right to be forgotten) – you have the right to request the deletion or removal of your personal information where there is no compelling reason for its continued processing by us
- Right to restrict processing – you have the right to request that we block or supress processing of your personal information
- Right to data portability – you have the right to obtain and reuse your personal information for your own purposes across different services as the processing is based on your consent
- Right to withdraw consent – where we process personal information based on your consent, you have the right to withdraw this consent at any time
Additionally, you have the right to lodge a complaint with our Data Protection Officer at dataprotection_corporate@scottishpower.com if you believe that your personal information is not being processed in line with this privacy notice. If you are not satisfied with the response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) by contacting:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113.
Changes to your privacy notice
We may change this privacy notice from time to time. If we do, we will post the changes on this page and detail any substantial changes to the way in which we process your personal information if applicable. We recommend that you check our privacy notice on a regular basis to stay informed of any updates.