GDPR Article 14 Privacy Notice

If we have not obtained your personal data directly from you, Article 14 of the General Data Protection Regulation (GDPR) requires us to provide you with the following information under you right to be informed:

1. The Data Controller is The Student Energy Group Ltd. (“TSEG”)
2. TSEG has not appointed a Data Protection Officer, but does have an Information Compliance Manager.
3. Your personal data has been collected for one or more of the following purposes:
   1. The purpose of fulfilling a contract to calculate an and provide a quote to supply household utilities to a property.
   2. The purpose of fulfilling a contract to supply household utilities to a property.
   3. The purpose of determining the identities of the occupants of a property on supply with us, in which we have a legitimate interest.
4. No special categories of personal data have been collected or are necessary to be collected.
5. TSEG will not transfer your personal data to a recipient in a third country or international organisation.
6. TSEG will store your personal data for the following periods depending on the nature of your final engagement with TSEG:
   1. If TSEG has calculated and provided a quote to supply household utilities to a property, but this does not result in a supply contract with TSEG, your personal data will be stored for twelve months.
   2. If you enter into a supply contract with TSEG, your personal data will be stored for the duration of your contract with TSEG plus a period of three years following (whichever is later):
      1. The end date of the contract.
      2. The date of the last payment or refund to settle the account to zero balance.
      3. The date of final settlement and/or resolution of any legal action (initiated by either you or TSEG) or complaint to the Ombudsman.
      4. The completion of any outstanding Data Subject Access Request if it was submitted before any of the above dates.
7. The legitimate interests of TSEG in processing your personal data are as follows:
   1. TSEG uses the lawful basis of legitimate interest in cases where we have a house on supply from a previous contract with a set of individuals, formed under the lawful basis of contract, which has seen that contract end and the occupants of the property have been replaced with new occupants, otherwise known as a change of tenancy.
   2. These new occupants do not have a contract with TSEG, but under UK law are still liable to pay us for the energy services provided, under a “deemed contract”, until such time they choose either to enter into a new contract with TSEG, or switch the supply or supply to a different supplier.
   3. The intervening period between the end of the contract and either of the noted subsequent events is the period under which we have a lawful basis of legitimate interest.
8. Under data protection legislation, you have rights including:
   1. Your right of access – You have the right to ask us for copies of your personal information. This process is known as a Data Subject Access Request.
   2. Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you believe is incomplete.
   3. Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances. This process is known as a Data Erasure Request.
   4. Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
   5. Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
   6. Your right to data portability – You have the right to ask that TSEG transfers the personal information you gave us to another organisation, or to you, in certain circumstances, in a suitable electronic format and using a secure transmission method.
   7. You have the right to withdraw consent at any time. However, it is not necessarily the case that by withdrawing your consent TSEG will no contact you if TSEG maintains a legitimate interest.
   8. You have the right to lodge a complain with the Information Commissioner’s Office (ICO).
9. You personal data may have originated from one of the following sources:
   1. Your landlord.
   2. Your letting agent.
   3. A provider of property occupier information.
10. TSEG does not operate an automatic decision-making or profiling system as described in Article 22(1) and (4) of the GDPR.