www.eco-act.com
Company registered in England. No 557 5619
Carbon Clear Limited trading as EcoAct, an Atos Company.
Registered Office: Unit A, 70-78 York Way, London N1 9AG
Copyright and Non-Disclosure Notice
The contents and layout of this report are subject to copyright owned by © EcoAct, an Atos company 2021. To the extent that we own the copyright in this report, it may not be copied or used without our prior written agreement for any purpose other than the purpose indicated in this report.
The methodology (if any) contained in this report is provided to you in confidence and must not be disclosed or copied to third parties without the prior written agreement of EcoAct. Disclosure of that information may constitute an actionable breach of confidence or may otherwise prejudice our commercial interests. Any third party who obtains access to this report by any means will, in any event, be subject to the Third-Party Disclaimer set out below.
Third-Party Disclaimer
Any disclosure of this report to a third-party is subject to this disclaimer. The report was prepared by EcoAct at the instruction of, and for use by, our client named on the front of the report. It does not in any way constitute advice to any third-party who is able to access it by any means. EcoAct excludes to the fullest extent lawfully permitted all liability whatsoever for any loss or damage howsoever arising from reliance on the contents of this report. We do not however exclude our liability (if any) for personal injury or death resulting from our negligence, for fraud or any other matter in relation to which we cannot legally exclude liability.
Contents
1. Cookies Policy
Last updated: 25/05/2021
ECOACT uses cookies on the website eco-act.com and the subdomain info.eco-act.com (the “Website”). By using the website, you consent to the use of cookies.
Our Cookies Policy explains what cookies are, how we use cookies, how third-parties we may partner with may use cookies on the Website, your choices regarding cookies and further information about cookies.
What are cookies
Cookies are small pieces of text sent by your web browser by a website you visit. A cookie file is stored in your web browser and allows the Website or a third-party to recognize you and make your next visit easier and the Website more useful to you.
Cookies can be “persistent” or “session” cookies.
How ECOACT uses cookies
When you use and access the Website, we may place a number of cookies files in your web browser.
We use cookies for the following purposes: to enable certain functions of the Website, to provide analytics, to store your preferences, to enable advertisements delivery, including behavioral advertising.
We use both session and persistent cookies on the Website and we use different types of cookies to run the Website:
- Strictly necessary cookies: These are cookies that are required for the operation of our site. They include, for example, cookies that allow you to automatically sign in to our Websites.
- Analytical/performance cookies: They allow us to recognise and count the number of visitors and to see how visitors move around our site when they are using it. This helps us to improve the way our site works, for example, by ensuring that users are finding what they are looking for easily. Examples of the analytical/performance cookies we use are for example for Google Analytics. This is a web analytics website provided by Google Inc. Google Analytics sets a cookie in order to evaluate use of those websites and compile a report for us. Google Analytics will not collect your personal information.
- Functionality cookies. These are used to recognise you when you return to our site. This enables us to remember your preferences (for example, avoiding that you need to provide your details each time you want to make a download).
List of cookies used
Third-party cookies
In addition to our own cookies, we may also use various third-parties cookies to report usage statistics of the Website, deliver advertisements on and through the Website, and so on.
List of cookies used
Any other tracking technologies you use
To be completed if applicable
What are your choices regarding cookies
If you’d like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser.
Please note, however, that if you delete cookies or refuse to accept them, you might not be able to use all of the features we offer, you may not be able to store your preferences, and some of our pages might not display properly.
Where can you find more information about cookies
You can learn more about cookies and the following third-party websites:
- Cookies definition: https://www.privacypolicies.com/blog/cookies/
- EU Cookies directive : https://www.termsfeed.com/blog/eu-cookies-directive/
- EU GDPR : https://www.termsfeed.com/blog/gdpr/
1. Cookies consent notice
For 1st connection: Banner with button I ACCEPT and link on “Cookie policy” to the related page.
We use cookies to store information on your computer. Some cookies are essential to make eco-act.com work and others help us to improve your user experience. By using the site, you consent to the placement of these cookies. Read our Cookie Policy to learn more.
2. Privacy Policy
Last updated: 25/05/2021
ECOACT is committed to ensuring that your privacy is protected. Looking after your personal data is important to us. We want you to be confident that your data is safe and secure with us, and you understand how we use it.
We are committed to doing the right thing when it comes to how we collect, use and protect your personal data, that’s why we’ve developed this privacy notice which:
- Sets out the types of personal data that we collect
- Explains how we use your data
- Explains how we ensure your privacy is maintained
- Explains the rights and choices you have when it comes to your personal data
This notice also applies to information we collect about people who use our websites and our website.
EcoAct are both a data controller and a data processor under the new General Data Protection Regulation.
Contact details
For ECOACT UK:
By post: Data Protection Officer, EcoAct, Unit A, 70-78 York Way, London N1 9AG
For ECOACT FRANCE & IBERICA:
By post: Data Protection Officer, EcoAct, Unit A, 70-78 York Way, London N1 9AG
For ECOACT US:
By post: Data Protection Officer, EcoAct, Unit A, 70-78 York Way, London N1 9AG
Cookies
Please see our separate Cookie Policy available on our website.
What information we collect
Personal data is any information relating to an identified or identifiable living person. EcoAct processes personal data for numerous purposes, and the means of collection, lawful basis of processing, use, disclosure, and retention periods for each purpose may differ.
When you register with us or enquire about our websites, you will provide us with personal data. Given the diversity of the websites we provide to our clients, we process many categories of personal data, including as appropriate for the websites we are providing:
- Account Information: Company name, address and logo, contact details including name, address, email, phone number or other contact information.
- Payment Information: Billing address and method of payment, such as bank details, credit, debit, or other payment information to enable invoicing and payment.
- Transaction Information: Purchases of products and websites, transactions facilitated by EcoAct, including purchases on the eco-act.com platform; Information to display on the offsetting certificate.
- Usage Data: Data about your activity on and use of our offerings, such as hyperlinks clicked within our websites, browsing history, search history, crash data, performance and other diagnostic data, and other usage data.
- Location Information: Country of location to connect to the related eco-act.com country website.
- Information you may consider relevant and necessary for us to deliver our websites
When we collect personal data we are known as the ‘controller’ and when our clients supply data we are the ‘processor’. When acting as a ‘processor’ we will manage on your behalf the personal information you require from your clients.
Processing of data
Our policy is to collect only the personal data necessary for agreed purposes and we ask our clients to only share personal data where it is needed for those purposes.
EcoAct wants to provide the best website experience; we therefore gather this data to understand your needs and personalise our website, thus providing you with a better website experience. The information may be used for:
- Providing a tailored and personalised website to clients and customers with products and websites most likely to interest you.
- Internal audit purposes.
- Improving our websites.
- Processing payments and transactions – to process and reach out to you about your purchases or your account, we must collect data such as your contact details, purchase, and payment information. From time to time, we may use your personal data to send important notices, such as communications about purchases and changes to our terms, conditions, and policies.
- Periodically send promotional or market research communications which we think you may find interesting using the contact details you have provided.
- Complying with applicable law — for example, to satisfy tax or reporting obligations, or to comply with a lawful governmental request.
EcoAct may contact you by email, phone, SMS or mail. The lawful basis on which we process data for this purpose will be different depending on the reason for the contact.
In all the below scenario’s ‘consent’ means that consent which is willingly and knowingly given having understood the terms of this privacy notice.
If you are enquiring about our websites we will use either ‘consent’ or ‘contract’ in order to fulfil your request for information.
As an active customer which means currently engaged on one or more projects we will use ‘consent’ and ‘contract’.
As an inactive customer which means no longer engaged on a project we will use ‘consent’ or ‘legitimate interest’.
Data retention
EcoAct will as a minimum keep your information for as long as we are providing you a website or are likely to provide a website due to an enquiry we have received.
We review the need to hold personal data on an annual basis. Any personal data, physical or electronic, that no longer needs to be maintained for the purposes of meeting our legal or regulatory obligations will be reviewed and when appropriate securely destroyed.
Where data is processed solely for marketing purposes, any information we use for this purpose will be kept until you notify us that you no longer wish to receive this information, or until the data is deleted following annual review, whichever is earliest.
As part of ensuring we are providing the right websites to you we may use your data to pursue our legitimate interests in a way which would reasonably be expected as part of running our business and supplying websites, this will be done in a way that does not materially impact your rights, freedom or interests. For example, we may use information on the websites and products supplied historically to you to support or make available appropriate new offerings.
We may also use your address details to post out direct marketing materials telling you about products and websites that we think may be of interest to you.
You may choose to opt out of any marketing communications at any time by any of the following methods:
- Unsubscribing from the campaign
- Emailing us at [email protected]
Should you prefer to use royal mail:
- Marketing, EcoAct, Unit A, 70-78 York Way, London N1 9AG
Note that unsubscribing does not imply the deletion of your data. To exercise your right to be forgotten and have your data deleted see the ‘How to exercise your Rights’ section at the end of this notice.
Sensitive personal data
We will not normally ask you for sensitive personal data as defined under law as ‘special category information’ and specifically in Article 9 of the GDPR.
In the event you are required to attend our site it may benefit you to notify us of any health condition or disability you have so that we are aware of these conditions and how they affect you. This will allow us to take any reasonable steps to accommodate specific needs or requirements you have when hosting you. This type of information is known under the law as ‘special category information’ (or ‘sensitive personal data’) and we require your explicit consent to process this information. This data will only be kept as long as it is required for this purpose, or until such time as you notify us you no longer consent to its processing.
Sharing your personal data
EcoAct works with several agencies and carefully selected website providers that carry out certain functions on our behalf to support the websites we provided to you. These include, for example, companies that help us with technology websites and also payment processing. We only share personal data that enables the agencies and our website providers to provide their websites and it will always be shared in a secure and appropriate manner.
We may share personal data with other organisations in the following circumstances:
- If the law or a public authority says we must share the personal data.
- If we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of preventing fraud and reducing credit risk).
- To an organisation we sell or transfer (or enter into negotiations to sell or transfer) any of our businesses or any of our rights or obligations under any agreement we may have with you to. If the transfer or sale goes ahead, the organisation receiving your personal data can use your personal data in the same way as us; or to any other successors in title to our business.
Protection of personal data
This section sets out some of the measures we have in place to secure personal data:
- Access to personal data is provided only to those employees who require access to perform their job function.
- Access to our computer systems is protected by robust security measures which include firewall, email and file encryption at rest and in transit, anti-virus and anti-ransomware, 24×7 security monitoring to detect unusual network activity
- Our staff are trained and tested on data protection and cyber security awareness
- We use the websites of a specialist computer security websites provider to ensure our systems remain secure using the latest technologies applicable for companies of our size and in our industry sector
- We have robust procedures and policies in place that are adhered to by our staff
- All physical instances of personal data are treated with the same strict security as electronic data.
- Physical data is kept secure at all times when not being processed.
- Policy and procedures exist for the safeguarding of any personal data in physical form that, by necessity, leaves the office environment including electronic data being carried in physical form such as DVD or USB
Your rights and choices relating to your personal data
Under data protection legislation, you have several rights regarding the use of
your personal data, as follows:
The right of confirmation and access
As a data subject you have the right to obtain confirmation from the data controller as to whether or not personal data concerning you is being processed. You also have the right to obtain from us free information about your personal data stored at any time, and a copy of this information. Furthermore, you have the right to obtain information as to whether personal data is transferred to a third country or to an international organisation. Where this is the case, you also have the right to be informed of the appropriate safeguards relating to the transfer.
Right to rectification and to be forgotten
You have the right to ask us to rectify inaccurate data or to complete any incomplete personal data that we hold. You have the right to ask us to erase your personal data without delay where one of the statutory grounds applies, so long as the processing is not necessary. If you request us to erase your personal data, then this means that our business relationship will end as we cannot provide our website without processing your data.
If you exercise your ‘Right to be Forgotten’, then all personal data stored will be deleted. This means that you may be contacted again in the event that you re-connected with us via web, phone or email and/or your details are given to us by a third party.
Right to object
You have the right to restrict the processing of your personal data under certain circumstances, including if you have contested its accuracy and while this is being verified by us, or if you have objected to its processing and while we are considering whether we have legitimate grounds to continue to do so. You have the right to object, on grounds relating to your particular situation, at any time, to the processing of personal data concerning you.
Right of data portability
You also have the right for certain data you have given us to be provided to you in a structured and commonly used electronic format (for example, a .csv file), so that you can move, copy or transfer this data easily to another data controller. You may also request that we transmit this data directly to another organisation where it is practical for us to do so.
Automated individual decision-making, including profiling
You have the right not to be subjected to a decision based solely on automated processing, including profiling. EcoAct do not process any personal data in this way.
How to exercise your Rights
If you wish to contact us in respect of any of the Rights described above, please use the contact details below.
For EcoAct UK:
Post:
Data Protection Officer, EcoAct, Unit A, 70-78 York Way, London N1 9AG
Email: [email protected]
For EcoAct France & Iberica:
Post:
Data Protection Officer, EcoAct, Unit A, 70-78 York Way, London N1 9AG
Email: [email protected]
For EcoAct US:
Post:
Data Protection Officer, EcoAct, Unit A, 70-78 York Way, London N1 9AG
Email: [email protected]
For EcoAct US:
Post:
Data Protection Officer, EcoAct, Unit A, 70-78 York Way, London N1 9AG
Email: [email protected]
We will normally respond to your request free of charge and within 30 days’
How to complain about the use of your data
If you wish to raise a complaint about how we have handled your personal data, including in relation to any of the rights outlined above, you can contact us on the details at the start of this notice and we will investigate the matter for you. If you are not satisfied with our response, or believe we are processing your data unfairly or unlawfully, you can complain to your national supervisory authority:
For EUROPE: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
For UK: https://ico.org.uk/make-a-complaint/
For US: https://reportfraud.ftc.gov/#/
GDPR compliant data collection statement.
EcoAct uses the information you provide to contact you about similar products and websites. You may unsubscribe from these communications at any time.
