Privacy Notices
This privacy notice applies to all personal data processed by the Electricity Supply Board (“ESB”) or an ESB subsidiary company in relation to their external stakeholders (except where governed by separate privacy notices such as Electric Ireland, ESB Networks and ESB ecars.
ESB is a diversified and vertically integrated-utility operating across the Irish and UK electricity markets from generation, through transmission and distribution to the supply of customers. For the purposes of data protection law, the Data Controller is the ESB or an ESB subsidiary company having their registered addresses at: - 27 Fitzwilliam Street Lower, Dublin 2, D02 KT92, Ireland.
Note: All personal data processed by ESB and/or ESB subsidiary companies in relation to internal stakeholders (e.g. employees or contractors) are covered by a separate privacy notice which is available internally on the HubHQ intranet site.
All data processed by ESB’s Pension Office and/or the trustees of ESB’s Pension Scheme are covered by a separate privacy notice - available here.
- Personal Identifiers and Contact Details: Provided to help us contact you and verify your identity when you get in touch (e.g. name, address, telephone number, and email address).
- Background Documentation: Requested by us on occasion when dealing with queries (e.g. proof of residence/address, marital status, and vehicle/land ownership).
- Visitor Information and CCTV Imagery: Captured by us when you enter the vicinity or visit our offices or sites.
- Land Registration Details: Provided to us by you or identified through land registry records (e.g. information about electricity infrastructure and communication network assets located on or near your land/property, and land registration details you have a controlling interest in).
- Planning Permission Data: Captured by us to comply with the requirements of planning permissions associated with our electricity infrastructure and communication network assets; or captured by us on request of relevant authorities.
- Communication Preferences: Provided to help us communicate about topics you are interested in (e.g. high river flow notifications, and project updates).
- Interaction Records and Transcripts: Captured by us when you interact with us face-to-face or via phone, email, webchat, social media, and other mediums.
- Voice/Video Recordings: Captured by us when you interact with us via phone or webchat where you have been advised these interactions will be subject to recording.
- Photography and Videography: Captured by us when you attend events organised/sponsored by us; or captured by us when recording at our offices, sites, or assets.
- Legal Data: Provided to us by you or your legal representatives in relation to a legal dispute, query, claim or other legal matters.
- Financial Data: Captured by us in relation to your financial transactions with us (e.g. transaction history, bank account details, credit/debit card details, and creditworthiness data).
- Recruitment and Selection Data: Provided to us by you or recruitment agencies acting on our behalf in relation to job applications (e.g. curriculum vitae, and employment applications); or captured by us during the recruitment and selection process (e.g. reference/background checks, health/wellbeing checks, and psychometric test results).
- Tender Responses and Service Provider Data: Provided to us by you or your employer in response to a request for tender, or in the provision of services to us (e.g. name, contact information, and skills/work experience).
- Health and Safety Incident Data: Captured by us in relation to any health or safety incidents which occur within or in the vicinity of our offices or sites.
- Application and Website Usage Data: Captured by us to help us understand and improve user experiences (e.g. information about the pages you look at and how you use them, your device type, operating system, and browser type).
- Marketing Engagement and Preferences: Captured by us to help us understand how you respond, or interact with, any direct marketing or advertising communications directed to you, including any requests for these communications to stop.
- Special Category Data: Provided to us by you through our services, forms, or surveys (e.g. medical, or biometric data).
- Managing Queries and Requests: Reviewing, discussing, and formulating a response to queries or requests.
- Talent Acquisition: Recruiting and selecting new employees.
- Asset Development: Planning and development of electricity generation infrastructure, and communication networks.
- Operational Asset Management: Managing the safe, secure, and reliable operation of electricity generation infrastructure, and communication networks.
- Security and Access Management: Managing access and security of our offices, sites, other facilities, and IT systems.
- Community Engagement: Engaging with communities; and promoting and documenting our involvement in community and corporate social responsibility projects which we sponsored or funded through the capture of imagery, personal identifiers and commentary/opinions of community group members, and publishing these on external/internal communication channels. (e.g. publications, website, and/or social media).
- Events/Programmes: Promoting and documenting events or programmes in which we participate, organise or sponsor (e.g. Recruitment or Job Fairs, Public Information or Consultation Events, and Workshops) through the capture of imagery, personal identifiers and commentary/opinions of attendees and publishing these on external/internal communication channels. (e.g. publications, website, and/or social media).
- Market Research: Carrying out market research, including conducting and analysing the results of research activities (e.g. surveys, focus groups, interviews) to understand the preferences and sentiment of our external stakeholders, judge the performance of our advertising/marketing campaigns, and to maintain and improve our product or service offerings.
- Strictly Necessary Cookies: Placing essential cookies on your devices to enable you to navigate around our website and use its features. For more information on our use of strictly necessary cookies, click here.
- Archive: Archiving artefacts which showcase the contribution of ESB Group to the social, cultural, and economic development of the Irish State.
- Fraud/Theft Detection: Detecting and preventing fraud, theft and other crimes.
- Shared Services: Providing shared services across the Electricity Supply Board and ESB subsidiaries.
- Financial Management: Conducting financial transactions, preparing, and processing invoices, processing payments, monitoring payment activity, and managing debt.
- Land Management: Managing transactions involving the purchase, lease, or sale of land and assets, and processing and managing wayleave requests and notifications.
We process personal data for the following purposes in compliance with our legal obligations:
- Legal Matters: Handling and responding to legal queries, disputes, and claims.
- License Management: Providing or verifying fishing/boating licenses for waters of which we are responsible.
- Mandatory Communications: Communicating with you about events, projects, publications, and other matters we are required to tell you about.
- Court and Enforcement Requests: Responding to requests from courts and enforcement authorities.
- Rights Protection: Protecting or enforcing our rights or the rights of any third party.
- Health and Safety Management: Ensuring the health and safety of all who visit our offices and sites including compliance with incident record keeping and reporting obligations under the Safety, Health and Welfare at Work Acts and other applicable legislation.
- Legal and Regulatory Compliance: Meeting obligations imposed by industry regulators; other regulatory and supervisory authorities; planning authorities; and environmental protection agencies.
- Advertising, Direct Marketing and Other Communications: Communicating with you about events, projects, publications, and other matters that you have requested updates on.
- Events/Programmes: Promoting and documenting events or programmes in which we participate, organise or sponsor (e.g. ESB Science Blast) through the capture of imagery, personal identifiers and commentary/opinions of children, and publishing these on external/internal communication channels. (e.g. publications, website, and/or social media).
- Optional Cookies: Placing functionality, performance and/or targeting and advertising cookies on your devices to enable us to improve our website, services and/or advertising campaigns. For more information on our use of optional cookies, click here.
We may transfer your personal data with or disclose it to the following categories of third parties:
- Agents or Suppliers: We transfer or disclose your personal data with contracted individuals or companies that provide products or services necessary for our business operations, including managing our customer relationships. We will only disclose the personal data they need to provide these products or services while ensuring they adequately protect your data.
- Advertising and Marketing Partners: We may transfer or disclose your personal data with contracted individuals or companies to run advertising campaigns and conduct market research and analysis.
- Legal and Professional Advisers: We may transfer or disclose your personal data with legal and professional advisers for any reasonable business purpose, including protecting our rights.
- Third Parties Approved by You: We will transfer or disclose your personal data to another third party if you ask us to or consent to the transfer.
- Regulatory Authorities: We may be required to transfer or disclose your personal data to Irish or European regulatory authorities, including energy regulators, environmental protection agencies, or data protection supervisory authorities.
- Other External Bodies: In certain circumstances, we may be legally required to transfer or disclose your personal data to external bodies, such as local authorities, government departments, or An Garda Síochána. We will only disclose the minimum amount of information necessary to satisfy our legal obligations. However, once disclosed, we cannot control how these bodies use your data.
Personal data collected by us will be retained for as long as necessary to fulfil the purposes for which it was collected and to protect our business and our rights. We are required to keep certain types of information for specific periods to comply with legal requirements. The length of time we retain your personal data depends on the type of information and the purpose for which it was obtained. Some examples of the duration your personal data is held within our systems are as follows: CCTV Imagery may be kept for up to 30 days from the time of capture; Recruitment and Selection data may be kept for up to two years from the time of application; and Interaction Records and Telephone Recordings may be kept for up to seven and three years (respectively) from the time the interaction occurred.
We will occasionally update this privacy notice. This was last updated in March 2025.
Where updates represent a significant material change, we will post an announcement on our website prior to implementation, and where appropriate notify you via the contact information you have provided us.
We encourage you to periodically review this notice to be informed of how we use your data.