Wincanton plc, including all its group companies, ('Wincanton') is registered as a Data Controller with the UK Information Commissioners Office, registration number Z549510X.
We operate as a data controller when managing personal data that relates to the categories of data subject outlined below, our employees and internal operations. We operate as a data processor when managing personal data on behalf of our customers.
This policy applies to information we collect about:
Visitors to our website
Consumer data we hold on behalf of our customers
Professional contacts and suppliers of services to us or our customers
People who attend events
Complainants, correspondents and enquirers
If you have any questions about data protection in Wincanton, please contact us at DPO@Wincanton.co.uk or alternatively write to us at Data Protection Team, Wincanton plc, Methuen Park, Chippenham, Wiltshire, SN14 0WT.
2. The information we collect about you
When you become a customer, supply us with goods or services, complete a contact form, attend events run or supported by us or register an interest for any job vacancies we have, we may collect some or all of the following personal data about you:
Contact details (email and phone)
If you choose to submit a job application we will collect and hold the information that you provide in that application.
IP addresses (internet protocol addresses) of visitors are logged for administration purposes. The IP address indicates the location of your computer on the Internet.
We collect these to try to ensure that our site reflects the needs of our users and may be used to track your session.
We do not collect personal data directly from consumers. We may hold your personal data on behalf of our customers, under contract, in order to fulfil our contractual commitments. In these cases, we only process personal data as instructed by our customer, the data controller. This data may be held for up to 6 years after the end of our contract.
For prospective B2B customers our basis for processing is legitimate interest, based upon targeting solely potential B2B customers and opt outs to future marketing communications being provided. Where we hold any personal data on individuals, sole traders or partnerships it will be based on consent.
We may also receive information about you if you use any of the other websites we operate or the other services we provide. In this case we will have informed you when we collected the data that it may be shared internally.
We do not collect sensitive information except where legally required as part of the recruitment process. Sensitive information includes data relating to race or ethnic origin, political opinions, religious or other similar beliefs, trade union membership, physical or mental health, sexual life or criminal records.
3. How we will use the information about you
We gather this information to allow us to:
Provide contracted services.
Process any application for employment.
Improve the quality of our services.
Keep you updated as to events or information which you may find of interest.
Where necessary to verify your identity.
Maintain our records for administrative purposes (internal operations, troubleshooting, testing, security).
By completing a job application you are giving Wincanton permission to hold your data, with a view to entering into a contract if your application is successful. If you are unsuccessful we will hold your data for no longer than 6 months.
In certain circumstances we may provide you with information about any services or events we think may be of interest to you. Where we provide you with marketing information, you will be provided with an option to opt out of any future marketing communications.
We only use consent as the basis of processing for individuals, sole traders and partnerships. Where consent has been obtained it will be refreshed every 2 years.
You may withdraw your consent at any time by contacting DPO@wincanton.co.uk
6. Who we share your information with
We will only share information with third parties where necessary to conduct the services we provide. We share information with the following categories of firms:
Our customers (under contract)
Other companies in the Wincanton Group
Business and professional advisers
Third party processors
Legal and regulatory authorities
Wincanton does not share, sell, transfer or disseminate your personal data to third parties and will not do so in future, unless required by law or defined in a contract with our customers.
Wincanton may share data about prospects, customers and attendees with our contracted service providers so that they can provide services on our behalf. These service providers are authorized to use your personal information only as necessary to provide the requested services to us.
7. How we protect your information
We have put in place reasonable security measures, both technical and organisational, to protect your personal data from loss, theft, misuse, alteration, disclosure, unauthorised access or destruction. For example, we store the personal data you provide on computer systems that have limited access and that are in secure, controller facilities. In addition, we ensure that your data is secured when being transmitted and at rest.
All Wincanton employees have agreed to a confidentiality clause within their contract of employment and only authorised persons will have access to your personal data.
8. Overseas transfers
9. Accessing, updating and correcting your information
You have the following rights regarding your personal data provided to us:
a right to request to view;
correct if it is inaccurate or incomplete;
delete or otherwise modify;
object to processing; and
in certain circumstances obtains and reuse your data.
If you have questions regarding the processing of your personal data, please contact the Wincanton Data Protection Officer. The Data Protection team is also available to help with information requests, take suggestions or handle complaints and can be contacted via email at DPO@wincanton.co.uk or by sending a letter to The Data Protection Officer, Wincanton plc, Methuen Park, Chippenham, Wiltshire, SN14 0WT.
You should be aware that you also have a right to complain directly to the relevant Supervisory Authority.
You are also able to change your marketing preferences by completing a form in our preference centre (www.wincanton.co.uk/preferencecentre), from which the required changes will be made.
11. Changes to this Privacy Notice
12. Links to other websites?
Our website may contain links to third party websites . This Privacy Notice applies only to this company’s websites only and we therefore have no responsibility or liability for the content and activities of these linked sites. We encourage you to read the privacy statements on any third party websites you access, as they will govern the use of any personal data you provide when visiting those websites.
13. Cookies and other information-gathering technologies
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
A data processor is responsible for processing personal data on behalf of a data controller.
Data Protection Officer (DPO):
The data protection officer (DPO) is an enterprise leadership role reporting to the risk committee. The DPO is responsible for overseeing the Wincanton data protection strategy and implementation to ensure compliance with GDPR requirements.
Any living individual who is the subject of personal data held by an organisation.
Any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
An outward facing document that provides transparent and accessible information to individuals about how Wincanton uses their personal data. This can be found on the website.