NetRegs
Purpose and lawful basis for processing
NetRegs is a partnership between the Scottish Environment Protection Agency (SEPA) and the Northern Ireland Environment Agency (NIEA). Day-to-day management of NetRegs is undertaken by SEPA on behalf of the partners.
This privacy notice explains how we collect and use personal information when you:
Contact us through the NetRegs website.
Register and use the NetRegs e-learning dashboard.
Subscribe to the NetRegs newsletter.
Register to attend a NetRegs event.
For data protection purposes, SEPA acts as the Data Controller for personal information collected through the NetRegs website, online services and events.
The lawful basis for processing your personal information is consent under article 6(1)(a) of UK GDPR.
Where special category information is collected for event management purposes, such as dietary or accessibility requirements, the lawful basis is your explicit consent under article 9(2)(a) of the UK GDPR.
What we need
Depending on the service you use, we may collect the following personal information:
Registering on the e-learning dashboard or contacting us by email, you will be asked for the following personal information
Your name
Your email address
Registering for the newsletter, you will be asked for the following personal information
Your name
Postcode
Your email address
When registering to attend a NetRegs event, you may be asked for the following personal information
Your name
Your email address
Dietary requirements
Accessibility needs
Your personal information and the content of your message will be held securely on SEPA systems.
Why we need it
We use your personal information to:
Respond to enquiries submitted through the Contact Us service.
Create and manage e-learning dashboard accounts.
Deliver newsletters and updates you have requested.
Administer and manage NetRegs events.
Arrange any appropriate dietary or accessibility requirements for event attendees.
What we do with it
Your personal information is stored securely and is only accessed by authorised staff where necessary.
We use the information you provide solely for the purpose for which it was collected. Information is processed in accordance with applicable data protection legislation.
How long we keep it
We retain personal information only for as long as necessary to fulfil the purpose for which it was collected and to deal with your request or participation in NetRegs services.
What are your rights
Where we use your personal information with your consent, you may withdraw that consent at any time, and we will stop using your personal information for the purpose(s) for which consent was given. You can request that we remove your information by contacting us netregs@sepa.org.uk
For more information on your rights, please see ‘Your data protection rights’.
Do we use data processors
Yes, NetRegs uses service providers and event management providers to support the delivery of services and events.
When you sign up for the NetRegs Newsletter, we use Mailchimp to deliver the service to you. They provide us with the platform we use to issue the Newsletter.
We use eNetLearn, who provide us with the platform we use to deliver our e-learning service.
When we organise a NetRegs event, we may use Eventbrite or another event registration platform.
Where third parties process personal information on our behalf, they are required to do so securely, lawfully and in accordance with data protection legislation and contractual requirements.
Do we share your information
We will only share your personal information where necessary and for legitimate service delivery purposes.
This may include:
Forwarding enquiries and contact details to the appropriate team within SEPA or NIEA where the subject matter relates to their area of responsibility.
Sharing event attendee information, including dietary requirements and accessibility needs, with event venues or event management providers to facilitate attendance and support requirements.
Your personal information collected through the e-learning dashboard or newsletter registration process will not routinely be shared with third parties.
Any information sharing will be carried out securely and in accordance with data protection legislation.