Every visitor to the Zero Carbon Analytics (ZCA) website has the right to privacy.
This page explains how ZCA respects this and how we process personal data. For further queries, you can contact us at info@[at]zerocarbon-analytics.org or via the contact form.
Who is covered by this privacy policy?
Every visitor to our website, people who use our services (e.g. those who subscribe to our newsletters), and people who email us.
What information about you do we process and how long do we retain the information?
We handle the personal data described in paragraphs 1 to 4 below, which we collect directly from you or via cookies (see our cookies policy).
Website
We use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns, such as the number of visitors to the various parts of the site.
This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google Analytics to make, any attempt to find out the identities of those visiting our website. If we do wish to collect personally identifiable information through our website, we will make it clear when we do so and will explain what we intend to do with it.
This data processing is based on your consent (article 6.1.a of the EU’s General Data Protection Regulation, known as ‘the GDPR’).
You have the right to withdraw your consent at any time (see your rights, below).
Newsletters
When you sign up for newsletters, we collect and process your identification data (first name, last name and email address). This enables us to register you as a subscriber and deliver the newsletter. You may also choose to provide your organisation’s name. If you don’t provide your organisation’s name, it won’t affect your subscription to the newsletter. We use this information to better understand the job sectors we are reaching. We use service providers to manage newsletter registrations and to deliver our newsletters.
Again, this is based on your consent (article 6.1.a of the GDPR).
You may unsubscribe from our newsletters at any time. We will not keep your data once you have unsubscribed.
When you register to receive newsletters, we gather statistics around email opening and clicks using industry-standard technologies including clear gifs. This information is only processed in a way which does not identify anyone. We do not make any attempt to find out the identities of those visiting our website. This data processing is based on our legitimate interests (article 6.1.f of the GDPR). Those data are kept as long as you do not oppose it.
Contacting us
- If you email, chat with or otherwise contact us, we will process your contact details, when required, in order to provide the support requested. If you contact us through our contact form, we will collect your first name, last name and email address. This data processing is based on your consent (article 6.1.a of the GDPR).
- If you contact us to make use of your data subject rights, we will process your contact details and the proof of your identity which you send us in order to address your request. Depending on the request, we may also process other personal data we have collected to meet it. This data processing is necessary to comply with our legal obligations (article 6.1.c of the GDPR).
We will store those data for a duration of one year. This is so we have a history of the request, in case you come back with any further queries. In addition, all our emails are archived for audit purposes (for the duration of our audit obligations).
Service providers and transfer to third parties
We work with service providers, as mentioned above. Those service providers – otherwise referred to as data processors – are third parties who provide elements of support to us.
We have contracts in place with our data processors. They cannot do anything with your personal information unless we instruct them to. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
We do not transfer any of the personal data collected as described above to any third party for commercial purposes.
How do we protect your personal data?
Your personal data are handled in full confidentiality. We make every necessary effort to take technical and organisational measures to ensure the security of your personal data.
Your rights
Under the General Data Protection Regulation (GDPR), you have rights you can exercise regarding the personal information we hold about you. You have the:
- right to request access to your data and rectification (correction) of your personal data
- right to request the erasure of your data (right to be forgotten) in the cases described in article 17 of the GDPR
- right to request the restriction of the processing of your personal data in certain conditions
- right to data portability, meaning that you can request the transfer of the data that we have collected to another organisation, or directly to you, under certain conditions
- where the processing of your personal data is based on your consent, you have the right to withdraw consent at any time. Withdrawing your consent means that we will not make use of your data any longer. However, past use of your data remains valid.
Your right to object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on our legitimate interests (Article 6(1), (f) of the GDPR).
To exercise your right, please send us an email via the contact form, including proof of your identity. Please note that you always have the right to make a complaint to the Data Protection Authority of the European country of your choice.