The project 

TwinERGY is a European funded research project and the Bristol pilot will install energy technology in 12 homes who already have solar panels – to help you manage your energy use in a smarter way.  

Below we refer to the Bristol pilot as ‘the project’. 

The purpose of this document 

This document is intended to provide information to participants in the project, people whose personal data is being collected, used and shared by the organisations involved. 

The organisations are Knowle West Media Centre, Bristol City Council and University of Bristol.  

The information should help you make informed choices about whether to share your data, keep track of consent forms you are asked to complete during the project and answer questions you may have.   

If you would like further information please contact: twinergy@kwmc.org.uk  

Roles of organisations in the project  

  • Knowle West Media Centre (KWMC) is responsible for managing community engagement in the project. 
  • Bristol City Council is responsible for the project management of the project. 
  • University of Bristol is responsible for the technical aspects of the project.  

Project aim 

The project aims to  

  1. Test new technology to increase the efficiency of energy use and generation in buildings 
  2. Place citizens at the heart of the energy market 

By collecting data about participants, the organisations above will be able to contact them about taking part in the project activities and involve them in trialling the energy technology within their homes and understand more about their energy use behaviour and experiences of using the technology. 

By sharing some data about participants, the organisations will be able to coordinate the project activities and conduct the analyse the data collected in the project. 

By publishing some anonymised data (as open data) the organisations will be able to share the results and learning from this project.  

Data terms 

Below we explain what types of data are collected in the project, the access given and how data is managed in the project. 

Data types and access 

Personal data is data from which a person can be identified as defined in UK GDPR. If data can be combined with other information to identify a person, that data will still be ‘personal data’. Personal data includes sensitive data and behavioural data described below. 

Sensitive data is personal data that describes integral features of who we are e.g. reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data (where used for identification purposes), data concerning health, a person’s sex life or sexual orientation. 

Behavioural data is personal data collected about your actions and activities, which can include data collected online by technologies and websites that track, monitor or analyse your behaviour. 

Societal data is data that incorporates elements of personal data (e.g. location, health, energy use data) but does not need to include personal identifiers that link back to us as individuals, in order for it to be useful. If societal data is anonymised it can be made open data. 

Closed data is data that is only accessible to one person or organisation. 

Shared data can take multiple forms, three are: 

Named access – data that is shared only with named people or organisations 
Group-based access – data that available to specific groups who meet certain criteria 
Public access – data that is available to anyone under terms and conditions that are not ‘open’ 

Open data is data that anyone can access, use and share but it usually requires you to attribute the source. 
 

Data processes 

Data anonymisation is the process of turning data into a form which does not identify individuals and where identification is not likely to take place. 

Data aggregation is the combination of individual data records into groups to avoid individuals’ data being identified. 

Data categories 

Registration information is the data participants provide when signing up for project activities, which is necessary to take part in the project (e.g. name, email, address, etc.). 

Self-reported information is the data participants are asked to provide which is useful to the goals of the project but is not necessary for taking part in the project e.g. it can include sensitive data (such as gender and race) which will be collected anonymously.  

Project generated information is the data that is generated by or with participants during the project (e.g. home energy consumption data and behavioural data). 

Data collection and use  

Registration Information: we have asked you to complete the following forms which ask for personal data so that we can contact you participating in project activities and arrange deployment of the technology: 

Sensitive information: we have asked you to complete the following forms which asks for sensitive data so we can better understand who takes part in the activities. It is optional to complete this form. 

Project generated information: we will be installing equipment in your home and asking you to complete surveys, which will collect the following data:

  • The Acceptance Letter explains the equipment being installed in your home:
    • 2 x Equiwatt Smart Plugs + energy monitoring device (power capsule) + associated app [all homes] – the app collects personal data and energy data
    • Home energy storage battery + Passiv Systems device and app [some homes] – the app collects personal data and energy data
    • Building survey [all homes] – collects data about your home and energy use and includes some personal data
  • Data Workshop Evaluation Form (KWMC) – asks for your feedback on the workshop and asks for some personal data

Data storage and deletion  

Data collected in the project will be stored securely by the organisation’s involved and deleted a maximum of 5 years from collection. Access to personal data will be limited.   

Data sharing  

When KWMC, Bristol City Council or University of Bristol collect your personal data and this needs to be shared between these organisations and with others (e.g. other partners in TwinERGY) this will be specified in the form where you will be asked for your consent for us to collect and use that data. 

The organisation collecting the data will put in place a data sharing agreement to manage this process in a secure manner compliant with UK GDPR and the data will be transferred in a secure manner.  

Publishing open data 

This section will be updated to set out what data will be published openly, where it will be published, under what license and why – when this information is available.

Reporting concerns 

When you complete project forms that collect your personal data they will include contact details to ask for further information or to report your concerns. 

You can also report any concerns to the project Data Protection Officer  

theo.tryfonas@bristol.ac.uk Tel: 0117 428 2489 

Your data rights 

Under the UK Data Protection Act (2018) and UK General Data Protection Regulation (GDPR), you have explicit rights around data about you (personal data). To exercise these rights, you can follow the processes laid out here. 

The right to be informed 

You have the right to be informed about how personal data about you is being collected, used and shared. This document aims to provide much of the information you might want however if you have any specific questions you can contact twinergy@kwmc.org.uk  

The right of access 

You have the right to access the personal data about you held by the organisations involved in the project. Please contact twinergy@kwmc.org.uk to request this information  

The right to rectification 

You have the right to rectify or correct personal data about you which the organisations hold if it is inaccurate or incomplete.  Please contact twinergy@kwmc.org.uk  to request this.  

The right to erasure 

You have the right to erase or remove data we hold about you. Please contact twinergy@kwmc.org.uk  to request this.   

The right to restrict processing 

You have the right to restrict or ‘block’ processing of personal data about you that the organisations hold. Please contact twinergy@kwmc.org.uk to request this.   

The right to data portability 

You have the right to port or transfer the personal data about you that the organisations hold. Please contact twinergy@kwmc.org.uk to request this 

The right to object 

You have the right to object to the use of personal data about you that the organisation holds for specific purposes, including direct marketing. Please contact twinergy@kwmc.org.uk to request this  

Rights in relation to automated decision making and profiling. 

You have a set of rights around automated decision making involving the use of personal data about you that the organisations hold. Please contact twinergy@kwmc.org.uk to request this information 

Responsibilities 

This section describes the responsibilities of the participants, the organisation and third parties play in ensuring the privacy and security of participant’s personal data.   

Your responsibilities 

When completing forms that ask for your personal data, please only use trusted and secure devices.  

Take care to keep your passwords safe and secure. Only use strong passwords that include a mix of letters, numbers and symbols. 

Keep your antivirus software up to date and install the latest security updates for your device’s operating system.  

You can find more advice on protecting your data and devices here https://www.ncsc.gov.uk/section/information-for/individuals-families  

Our responsibilities 

In handling your data, KWMC, Bristol City Council and University of Bristol will ensure that we comply with any applicable data protection and privacy legislation including the UK Data Protection Act (2018) and UK GDPR.  

Your personal data will be stored securely on our servers and we have internet security procedures in place.   

If there is a data breach or privacy concerns we will contact you. 

Third party responsibilities 

The responsibilities of third-parties regarding data collection and management are outlined in the TwinERGY Acceptance Letter in the terms and conditions section.  

Updates  

We will update the data use license, including adding links to the applicable consent forms, as you are asked to make choices around the collection and sharing of your data.   

If the event of new government policy on data protection and privacy, a data breach or concerns being raised by a participant or a regulator, we will also review and update the data use license as necessary.

We will contact participants in the event of any of the above.