1. Privacy Statement
Joint Allocation Office S.A. (“JAO”) is a service company that facilitates the electricity market by organizing auctions for cross border transmission capacity. On the 1st of October 2018, JAO became the Single Allocation Platform (SAP) for all European Transmission System Operators (TSOs) that operate in accordance to the EU legislation on forward capacity allocation, since it is able to implement and fulfil all regulatory obligations and requirements.
JAO is committed to treat personal data with utmost care and confidentiality. You share these personal data with us when you register as a market participant, sign a contract with us, fill any form in the course of our business relationship, use our Website, use our service desk platforms or contact us by email or post.
- What personal data do we collect?
- What do we do with your personal data and who we share it with?
- How do we keep it secure?
- What are your rights as a data subject?
- How long do we store your personal data?
A. What personal data do we collect
- Identification Data: this includes your name, signature, your email address, your address, date of birth, place of birth, nationality and IP address when you visit our Website.
- Transaction and Financial Data: this includes bank details, social security details, auction bid details, and invoices.
- Online Data: aside from the identification data collected when you visit, we will also collect the time and date of the visit.
- Contact Information: we collect company contact information that could include some personal data to enable us to contact you and for survey purposes or even sending operational messages.
B. What do we do with your personal data and who we share it with?
We collect personal data as we need them to properly verify your identity, carryout due diligence procedures, on-board you on the auction platform and allow you to trade on the auction platform.
The personal data will be used to create and maintain a user access for your business account.
The personal data will also be shared with our banking partner as they will create the access to a bank account and could also be shared with any regulatory authority who JAO is legally bound by or obliged to disclose such personal data.
C. When you use our Website
When you use our website to browse our products and services and view the information we make available, a number of cookies are used by us and by third parties to allow the Website to function.
Some of the cookies we use are strictly necessary for our Website to function, and we do not ask for your consent to place these on your computer. These cookies are shown below.
D. Use of our service desk platforms
Upon registration for the use of any our service desk platforms as detailed in 1., we collect your personal data which may include identification data such as your name and email address. This data is used to identify each user and create a user profile.
The service desk platforms allow users to create tickets, share information and upload documents and display certain content (the“Comments”). Comments made are seen by active users within your company and internally by JAO.
For service desk platform underhttps://servicedesk.jao.eu; the tickets created can only be shared within your company.
We retain these information and they continue to be linked to the user account that created them unless an application is made for the removal of the user then it is anonymized in accordance with European General Data Protection Regulation (EU) 2016/679(GDPR)principles.
We also store the Comments and information you share on these platforms.
E. Websites of third parties
F. How do we keep it secure
Your personal data is classified as strictly confidential in JAO and it is only accessible to authorized staff. We operate a robust internal security framework to ensure that we keep personal data safe. We periodically assess our cyber security framework to ensure that they are up to date with our industry standard and applicable regulations.
G. How long we keep your personal data
The law only requires us to keep your personal data for as long as it is still necessary for the reason we require it. After this we delete the personal data.
H. Your rights as a data subject
By law, you can ask us what information we hold about you, and you can ask us to correct it if it is inaccurate. If we have asked for your consent to process your personal data, you may withdraw that consent at any time.
If we are processing your personal data for reasons of consent or legitimate interest, you can request that your data will be erased.
You have the right to ask us to stop using your information for a period of time if you believe we are not doing so lawfully.
Finally, in some circumstances you can ask us not to reach decisions affecting you using automated processing or profiling.
To submit a request regarding your personal data by email or post, please use the contact information provided at the bottom of this policy.
We will update the version number and date of this document each time it is changed.
3. How to contact us
Compliance and Data Officer
2 rue de Bitbourg, L – 1273