Registrations under the Reservoirs (Scotland) Act 2011
Purpose and lawful basis for processing
SEPA’s Reservoirs Regulatory Unit (RRU) collect and use personal information to enable SEPA to carry out its regulatory duties under the Reservoirs (Scotland) Act 2011 and Reservoirs (Scotland) Regulations 2016.
The lawful basis we rely on to process your personal data is article 6(1)(e) of the UK GDPR, which allows us to process personal data when this is necessary to perform our public tasks as a regulator.
What we need
During the reservoir registration process, and the notification of reservoir panel engineers, we will ask Reservoir Managers and/or engineers to provide the following personal information:
- Name
- Address, including postcode
- Email address
- Telephone, mobile and emergency contact numbers
Why we need it
We need to collect personal information in order to administer reservoir registrations and maintain registers, including the publicly available controlled reservoirs register (CRR).
What we do with it
We will use your personal data to:
- maintain our own accounts and records
- investigate reservoir non-compliance
- undertake formal enforcement action
How long we keep it
We will retain your personal information for as long as it is required to perform our statutory duties under the Reservoirs (Scotland) Act 2011. Thereafter, your data will be confidentially destroyed.
What are your rights?
As an individual, you have certain rights regarding your own personal data.
For more information on your rights, please see ‘Your data protection rights’.
Do we use data processors?
Payment of fees for reservoir registrations will be carried out via the SEPA online payments service. SEPA will not have access to, or store, any financial information relating to the payment. Payments are processed by Stripe. More information on how they use your data is available in their Privacy Policy. The information you provide will be used for the purposes of processing your payment only.
When we use data processors who are third parties to provide elements of services for us, we have contracts in place with them. This means that they cannot do anything with your personal information unless we have instructed them to do so. They will not share your personal information with any organisation apart from us, and they will hold it securely and retain it for the period we instruct.
Do we share your information?
Under Section 9(2)(f) of the Reservoirs (Scotland) Act 2011, SEPA is required to include the name of any construction engineer, inspecting engineer, other qualified engineer or supervising engineer in the controlled reservoirs register. SEPA is required to make the information on the controlled reservoirs register publicly available.
We sometimes need to share your personal information with other organisations for statutory or regulatory reasons, or because doing so is in the general public interest. Any sharing will be carried out lawfully and securely in accordance with the Data Protection Principles. Information will be sent by secure means or in encrypted format.
This privacy notice is under development and will be expanded as new content is added to our website. Further information can be found at our existing website privacy policy page.