We are the gas Performance Assurance Framework Administrator (PAFA). Our purpose is to support the Performance Assurance Committee (PAC) and administer the Performance Assurance Framework (PAF) as the PAC provide assurance that the gas settlement regime is effective for the gas industry where no party adversely impacts another party as a result of its failure to operate to the defined settlement regime.
This privacy notice sets out the basis on which we will process information through our website: thegpap.co.uk
Gemserv is appointed into the role of the Performance Assurance Framework Administrator (PAFA).
Full company details of Gemserv are as follows:
Name: Gemserv Limited, Company Number 04419878
Registered office address: 77 Gracechurch Street, London, EC3V 0AS
The Performance Assurance Framework Administrator is a role defined in the Uniform Network Code (UNC) and whose responsibilities are described in the Performance Assurance Framework (PAF). As required in the UNC, Xoserve, in its role as the Central Data Services Provider (CDSP), competitively procure the services of the PAFA and Gemserv has been appointed into the role since 2017.
For more information about how Gemserv process personal data, please see the privacy notice here: Privacy Policy – Gemserv. If you have any questions about this privacy policy or our privacy practices, please contact us at dataprivacy@gemserv.com.
We typically collect personal data from you when you use our Website, including when you:
The types of personal data collected when you do the above include your:
We will use your personal data for the purposes described to you at the time you provided your data to us. These purposes include:
We process your personal data on the following lawful bases:
We will retain your personal data for the following duration:
| Category of Data | Retention Period | Legal Basis |
| Personal data collected through contact forms | 7 years | Legitimate interest to retain your communications with us in case of future legal claims |
| Cookies Data | See retention periods below in Cookies section. | Consent |
Your personal data may be disclosed to any or all of the following:
Cookies are small files saved to your computer’s hard drive that track, save and store information about your interactions and usage of our website. Cookies allow us to store your preferences to correctly present content, options or functions throughout our website. They also enable us to see information like how many people use our website and what pages they tend to visit.
Cookies have different duration’s. Temporary cookies, such as those only valid for your browsing session, expire when you close your browser. Permanent cookies, however, will remain on your computer for a longer period until you delete them. We may also use the information gathered from Cookies to compile reports to improve the functionality and user experience of our website.
Cookies can be set by different actors. Typically, this occurs in two cases:
Cookies have different purposes. We typically use the following cookies:
Functional Cookies: Cookies that are strictly necessary to enable you to move around our websites or to provide certain basic features. This includes basic features such as playing videos, and storing information already entered (e.g. username, language, location). These include:
Statistics: Cookies that monitor the popularity of sections of our website. These include:
Marketing: These cookies may track users and display advertisements relevant to them but can also include some otherwise functional cookies. The GPAP website uses Captcha to ensure that registration and queries come from real people. This is classified as a Marketing cookie, and to use the Contact Form, Users must consent to Marketing cookies. The GPAP website makes no other use of Marketing cookies.
Your rights in relation to cookies.
We generally only place cookies with your consent when you first visit this website, apart from for Functional cookies, which are mandatory for this website to operate. If you want to avoid this website placing Statistics and Marketing Cookies on your browser, you can choose to deselect all cookies besides the Functional Cookies on visiting this website. You may also set your browser settings to attempt to reject all cookies or manually delete the Cookies and may still use this website.
We do not transfer any data, anonymous or otherwise, outside of the UK.
We use technical and organisational measures to safeguard personal information from being accidentally lost, used or accessed in an unauthorised manner, altered or disclosed. In addition, we limit access to data to those employees and third parties who have a business need to know. They will only process data on our instructions and they are subject to a duty of confidentiality.
If you follow a link to any third-party website, please be aware that these websites have their own privacy policy and that we do not accept any responsibility or liability for their policies. Please check these policies before you submit any personal data to these websites.
This website links to Egress, which facilitates secure data storage and communications. For more information about how Egress’ process personal information, please see their privacy notice here: Website Privacy Policy | Legal | Egress.
Under certain circumstances, you may have certain rights under data protection laws in relation to your personal data which are as follows:
You can exercise your rights at any time by contacting us at: dataprivacy@gemserv.com, or by writing to us at:
Performance Assurance Framework Administrator
77 Gracechurch Street
London
EC3V 0AS
We will require proof of your identity before responding to any request from you.
In addition, if you have any enquiry about this Privacy Policy or data protection practices, please write to the Legal Department at the above address.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
We keep this policy under regular review and may be amended by us at any time. Any updated version of this policy will be published on our website.
This policy was last reviewed on 31/01/2022.
If you have any specific questions related to this privacy notice, or our privacy practices, please email us at dataprivacy@gemserv.com.