Wincanton plc, including all its group companies, ('Wincanton') is registered as a Data Controller with the UK Information Commissioners Office, registration number Z549510X.
We operate as a data controller when managing personal data that relates to the categories of data subject outlined below, our employees and internal operations. We operate as a data processor when managing personal data on behalf of our customers.
This policy applies to information we collect about:
If you have any questions about data protection in Wincanton, please contact us at DPO@Wincanton.co.uk or alternatively write to us at Data Protection Team, Wincanton plc, Methuen Park, Chippenham, Wiltshire, SN14 0WT.
When you become a customer, supply us with goods or services, complete a contact form, attend events run or supported by us or register an interest for any job vacancies we have, we may collect some or all of the following personal data about you:
We do not collect personal data directly from consumers. We may hold your personal data on behalf of our customers, under contract, in order to fulfil our contractual commitments. In these cases, we only process personal data as instructed by our customer, the data controller. This data may be held for up to 6 years after the end of our contract.
For prospective B2B customers our basis for processing is legitimate interest, based upon targeting solely potential B2B customers and opt outs to future marketing communications being provided. Where we hold any personal data on individuals, sole traders or partnerships it will be based on consent.
We may also receive information about you if you use any of the other websites we operate or the other services we provide. In this case we will have informed you when we collected the data that it may be shared internally.
We do not collect sensitive information except where legally required as part of the recruitment process. Sensitive information includes data relating to race or ethnic origin, political opinions, religious or other similar beliefs, trade union membership, physical or mental health, sexual life or criminal records.
We gather this information to allow us to:
By completing a job application you are giving Wincanton permission to hold your data, with a view to entering into a contract if your application is successful. If you are unsuccessful we will hold your data for no longer than 6 months.
In certain circumstances we may provide you with information about any services or events we think may be of interest to you. Where we provide you with marketing information, you will be provided with an option to opt out of any future marketing communications.
We only use consent as the basis of processing for individuals, sole traders and partnerships. Where consent has been obtained it will be refreshed every two years.
You may withdraw your consent at any time by contacting DPO@wincanton.co.uk
We will only share information with third parties where necessary to conduct the services we provide. We share information with the following categories of firms:
Wincanton does not share, sell, transfer or disseminate your personal data to third parties and will not do so in future, unless required by law or defined in a contract with our customers.
Wincanton may share data about prospects, customers and attendees with our contracted service providers so that they can provide services on our behalf. These service providers are authorized to use your personal information only as necessary to provide the requested services to us.
We have put in place reasonable security measures, both technical and organisational, to protect your personal data from loss, theft, misuse, alteration, disclosure, unauthorised access or destruction. For example, we store the personal data you provide on computer systems that have limited access and that are in secure, controller facilities. In addition, we ensure that your data is secured when being transmitted and at rest.
All Wincanton employees have agreed to a confidentiality clause within their contract of employment and only authorised persons will have access to your personal data.
You have the following rights regarding your personal data provided to us:
If you have questions regarding the processing of your personal data, please contact the Wincanton Data Protection Officer. The Data Protection team is also available to help with information requests, take suggestions or handle complaints and can be contacted via email at DPO@wincanton.co.uk or by sending a letter to The Data Protection Officer, Wincanton plc, Methuen Park, Chippenham, Wiltshire, SN14 0WT.
You should be aware that you also have a right to complain directly to the relevant Supervisory Authority.
You are also able to change your marketing preferences by completing a form in our preference centre (www.wincanton.co.uk/preference-centre), from which the required changes will be made.
Our website may contain links to third party websites. This Privacy Notice applies only to this company’s websites only and we therefore have no responsibility or liability for the content and activities of these linked sites. We encourage you to read the privacy statements on any third party websites you access, as they will govern the use of any personal data you provide when visiting those websites.
|Data Controller||The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.|
|Data Processor||A data processor is responsible for processing personal data on behalf of a data controller.|
|Data Protection Officer (DPO)||The data protection officer (DPO) is an enterprise leadership role reporting to the risk committee. The DPO is responsible for overseeing the Wincanton data protection strategy and implementation to ensure compliance with GDPR requirements.|
|Data Subject||Any living individual who is the subject of personal data held by an organisation.|
|Personal data||Any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.|
|Privacy Notice||An outward facing document that provides transparent and accessible information to individuals about how Wincanton uses their personal data. This can be found on the website.|