1 – Who we are
GENeco
is a trading name of Wessex Water Enterprises Limited, a company owned by
Wessex Water Limited. Our registered office is at Wessex
Water Operations Centre,
Claverton Down Road, Claverton Down, Bath BA2 7WW. Wessex
Water Enterprises Limited as the company responsible for your personal
information is the Data Controller. We
are registered with the Information Commissioner’s Office under registration ZA043152.
This Notice applies to
customers, contractors, employees of contractors, prospective employees,
referees and other third parties.
2 - Why we need you to give us information
This
Privacy Notice lets you know how and why we collect and use your personal
information. This includes what you tell
us about yourself and what we might learn about you from others. This Privacy
Notice explains how we do this and tells you about your rights.
We are required to have a legal basis
for the various reasons we may process personal information we hold about you
that we explain
in more detail in the rest of this Notice which we hope you’ll read carefully.
3 - What personal data do
we collect about you?
We may collect and
process your personal data in the following ways:
Information you give us.
You
may give us personal information by filling in forms on our website
www.geneco.uk.com (our site), at our sites or by corresponding with us by
phone, e-mail or otherwise. This includes, for instance, information you
provide when you, sign up as a customer, transfer waste to and from our waste
treatment sites, subscribe to a service, participate in discussion boards or
other social media functions on our site, and enter a competition, promotion,
survey or request a product or information from us. The information you give us
may include your name, address, e-mail address and phone number, vehicle
registration number, date of birth, financial and payment card information.
Information we collect
about you when you use our website.
With
regard to each of your visits to our site we may automatically collect the
following information: technical information, including the Internet protocol
(IP) address used to connect your computer to the Internet, your login
information, browser type and version, time zone setting, browser plug-in types
and versions, operating system and platform; information about your visit,
including the full Uniform Resource Locators (URL) clickstream to, through and
from our site (including date and time); products you viewed or searched for;
page response times, download errors, length of visits to certain pages, page
interaction information (such as scrolling, clicks, and mouse-overs), and
methods used to browse away from the page and any phone number used to call our
customer service number.
Information we receive
from other sources.
We
work closely with a number of trusted third parties (including, for example,
business partners, sub-contractors in technical, payment and delivery services,
advertising networks, analytics providers, search information providers, credit
reference agencies) and may receive information about you from them. We also
collect information about you from publicly available sources that includes,
but not limited to your website, social media platforms, or professional or
public press or events. Our offices and sites
(including car parks) may be monitored by CCTV and your image may be recorded
for security purposes if you visit any of our sites. We use signs to confirm
where a CCTV system is used. Images are retained for 28 days and then deleted.
Cookies
Our website uses cookies to distinguish you from
other users of our website. These are data files which hold small amounts of
data that are transmitted from our website to your browser to record
information that allows us to distinguish you from other users of our website.
This helps us to provide you with a good experience when you browse our website
and helps us to improve our site.
You can decide to accept
or reject our cookies by amending the cookies setting in your browser, but
please be aware that doing this could hinder your user experience on our
website.
For detailed information on the cookies we use and
the purposes for which we use them see our cookie notice.
4 - How do we use your personal data
We may use your personal
data in the following ways:
- to process and respond
to requests, enquiries and complaints received from you;
- to provide products and
services requested by you;
- to carry out credit
checks where appropriate (for more information please see the credit check
section below);
- to communicate with you
about services provided to you;
- to process payments;
- to update our records;
- to analyse trends and
profiles;
- to carry out customer
satisfaction research;
- to improve our products
and services;
- to stop
someone committing fraud or to help authorities investigate fraud;
- to resolve unpaid bills;
- to help us
establish or defend legal claims;
- where you have agreed
that we may do so, to recommend products and services that we believe will be
of interest to you or contact you about offers or other marketing promotions;
- to enable third parties to
carry out any of the purposes above on our behalf.
5 - Legal bases for
processing your data
The law requires that whenever we process your
personal data, we need to have at least one legal basis for doing so. The legal
bases on which we process your personal data are:
- Consent
- We will process your
data after receiving consent from you, to inform you of offers, new products
any other information we believe may be of interest to you if you have given us
permission and will only do so using your chosen method.
- We will also process
your information where you have entered your email address to receive our
newsletter which details information about our products, services and offers
- Should you wish not to
receive marketing communication, you can let us know by clicking the
unsubscribe button in any of our emails or contact us at info@geneco.uk.com
- Legitimate Interest
- To administer your
account, respond to your enquiries and messages and ensure we can contact you
if we have enquiries with your waste collection and delivery.
- To continue to provide
you information on similar products or services we have provided to you or have
requested from us in the past.
- We will use your contact
details to let you know of our product and service offering if you are a
business and not currently a customer of ours.
- To carry out customer
satisfaction research that enables us to provide you with a better service and
customer experience.
- To conduct market and
trend analysis in a non-personal way that allows us to improve our product
offering to you.
- To facilitate the
effective operating of our business following internal policies, legislation
and regulatory requirements.
- To share with and obtain
information about you from third parties (e.g. credit reference agencies) when
you enter into a contract with us. This is to ascertain if debit risk applies
to you.
- Ensure legislative and
regulatory compliance with records management and retention requirements.
- Performance of a contract
- Collecting and
processing your information to allow us to provide you with waste collection from
your designated collection site and/or waste delivery to any of our designated
sites as stipulated in our Terms and Conditions.
- Legal Obligation
- We are required by law
to process and retain payment information to ensure tax and other regulatory
compliance.
- We are required by regulation to ensure that we
provide necessary on-site training to your waste delivery representative(s).
- We will process and retain your personal data, to
ensure compliance with our legal and regulatory obligations.
6 - How
do we share your personal data?
We will
not share your personal data unless we have a legitimate interest or lawful
reason to so. We may share your personal data with third parties
in the following ways:
- We sometimes use agents
and service providers to process personal information on our behalf. For
example, we use third parties to send postal mail, to process credit card
payments, recover debts, and to maintain our IT systems. Where we use agents
and service providers to process your personal information, we will ensure that
they have adequate security measures in place to safeguard your personal
information.
- We will release your
personal information when we are required to do so for legal or regulatory
purposes or as part of legal proceedings.
- We may give information
we hold about you to third parties as part of the process of selling one or
more of our businesses, in which case we may provide your information to a
prospective buyer.
- When we carry out credit
checks, we pass your information to credit reference agencies. This information
may also be accessed by third parties who carry out credit checks on you.
Please see the section below on credit checks for more information.
- We pass your information
to debt recovery companies for the collection of unpaid charges on our behalf.
- We will disclose your
personal data if we are under a duty share your personal data to comply with
any legal obligation, or to enforce our contractual rights and other
agreements; or to protect the rights, property, or safety of our customers, or
others. This includes exchanging information with other companies and
organisations for the purposes of fraud protection and credit risk reduction.
- We may share information
with advertisers and advertising networks or other carefully selected partners
that require the data to select and serve relevant adverts to you and others.
We do not disclose information about identifiable individuals to our
advertisers, but we may provide them with aggregate information about our
users. We may also use such aggregate information to help advertisers reach the
kind of audience they want to target. We may make use of the personal data we
have collected from you to enable us to comply with our advertisers' wishes by
displaying their advertisement to that target audience.
- We share information
with analytics and search engine providers that assist us in the improvement
and optimisation of our site.
- We may transfer your
information to our group companies for the above and other purposes.
- We may share your
information with the following organisations/bodies.
- 1.Waste Delivery Data Tracking Supplier
- Reason: To
allow us to provide you with vehicle fobs required for your waste delivery.
- Where it is processed: United Kingdom
- Additional protection in place: Not required as processing is carried out in the European
Economic Area (EEA)
- 2.Credit reporting agencies
- Reason: to
assess if debt risk applies to you and to manage our debt collection process
- Where it is processed: United Kingdom
- Additional protection in place: Not required as processing is carried out in the
EEA
- 3.Salesforce
- Reason: To
operate our account and Customer Relationship Management system
- Where it is processed: United States
- Additional protection in place: Model Contract Clauses
- 4.Salesforce Implementation Consultants
- Reason: To
assist with the testing and quality assurance of our Customer Relationship Management
system
- Where it is processed: United Kingdom
- Additional protection in place: Not required as processing is carried out in the
EEA
- 5.Wessex Water Limited
- Reason: To manage
and process billing, payments and account information relating to the services
we provide to you.
- Where it is processed: United Kingdom
- Additional protection in place: Not required as processing is carried out in the
EEA
- 6.Public relations and marketing companies
- Reason: To
send you details of our offers, news and other information that may be of
interest to you. We only provide them with your email addresses and contact
name.
- Where it is processed: United Kingdom
- Additional protection in place: Not required as processing is carried out in the
EEA
- 7.Debt recovery companies
- Reason: To
check if debt risks apply to you and manage our debt collection process
- Where it is processed: United Kingdom
- Additional protection in place: Not required as processing is carried out in the
EEA
- 8.Regulatory bodies
- Reason: To ensure
we are complying with our legal and regulatory obligations
- Where it is processed: United Kingdom
- Additional protection in place: Not required as processing is carried out in the
EEA
7 - Credit
and identity checks
We share your personal
information with credit reference agencies to maintain our customers’ records
up-to-date, assess our customers’ debt risk and manage our debt collection
process.
8 - Where
we store your personal data
In some circumstances we
may transfer your personal information to countries outside of the European
Economic Area, where data protection safeguards are not as high as they are in
the UK. If this occurs we will ensure that adequate procedures are put into
place to protect your personal information.
All information you
provide to us is stored on our secure servers. Any payment transactions will be
encrypted. Where we have given you (or where you have chosen) a password, you
are responsible for keeping this password confidential. We ask you not to share
a password with anyone.
Unfortunately, the
transmission of information via the internet is not completely secure. Although
we will do our best to protect your personal data, we cannot guarantee the
security of your data transmitted to our site; any transmission is at your own
risk. Once we have received your information, we will use strict procedures and
security features to try to prevent unauthorised access.
9 - How long we need to keep your information
We will retain your
personal data for as long as it is necessary for the purpose(s) for which it
was provided. The period of retention will vary according to whether you are
our customer or by laws and regulations that we must comply with. As a customer, we will keep your personal
data as long as you are our customer and then for 6 years after that as we may
need to refer to it to resolve any differences or issues that may arise after
our relationship ends.
10 - If
you are applying for a job with us
We will normally ask you to apply
for a vacancy via our online recruitment system. During the recruitment
process, the information you give us may include your name, age, contact
details, details of your education, your employment history, emergency contact
details, immigration status, financial information (if we need to carry out financial
background checks), documentary evidence of your identity and national
insurance number. You may decide to share other information with us if you
think it is relevant to your application. Where appropriate and in accordance
with UK laws, we may also collect information related to your health, diversity
information or details of any criminal convictions.
If we ask to collect
information which we need your consent to gather and use then we’ll tell you
why we need this and ask for your agreement to use it and tell you about how
you can withdraw your agreement but we’ll let you know more about this if we
need to ask you to give us this information.
If we have been given your
details to provide a reference or as an emergency contact we will hold basic
information such as your name, address and telephone number so we can contact
you for this purpose.
Information
we collect about you. As well as
you giving us information, we may gather it from other organisations connected
with your previous employment which hold it.
Information we receive from other sources about you and which we
may share with them. We may ask for a reference
from a person you have given as a referee. We may obtain details about you from
other third party sources like ‘Linked-In’ and other job-related websites. We also have
accounts on sites like Facebook and Twitter that you could use to give us
personal information and through other on-line channels that become available
to us. We may also receive information about you from past employers,
educational establishments, examining bodies and employment and recruitment
consultants who contact us or we contact.
How we use your information. We will use your personal data:
- to store your details to contact you to process applications for
roles and positions we advertise as current vacancies;
- to contact referees for references about you;
- to process, with your agreement, information about your health
or details about criminal convictions if they are required for the role you
have applied for.
How long we will keep your
information as a candidate. If you accept an offer of
employment with us, we will keep your information for as long as you are
employed by us and for six years after that. If your application is unsuccessful
or you do not accept an offer of employment then we will keep only your
application and assessment information. We will keep this for six months
and will then destroy it.
11 - If
you are a referee or contact
How we use your information if
you are a referee or contact. We will use your personal
data:
- to contact you if a candidate has given us your name as a
referee so we can take up a reference; or
- to contact you if we have been provided with your details by a
candidate as a contact in the event of an accident or emergency affecting them.
12 - Your rights
You have the following rights. These
are:
Your right
to be informed – this Notice is an
example of this. We may need to update this Notice if we need to do something
different with your information and so we may change it on our site. If you’ve
given us your email address we may use it to let you know we’ve changed the
Notice.
Your right to rectification - it is
important that the information we are holding is accurate and up to date so if
you think any of your information is incorrect or needs updating then let us
know and we will update it.
If you are
a business customer who is a sole-trader or part of a small partnership then
you have further rights regarding the information we hold about you.
Your right of access - you have the right to request a
copy of the personal information that we hold about you. Please email requests
to info@geneco.uk.com or contact
the Data Protection Officer whose details appear at the end of this Notice.
We have a
calendar month to respond to your request for information. If we need more
information to process your request, we will contact you to let you know.
Your right to erasure – customers
who are individuals have the right to request that their personal information
be deleted where there is no longer a legitimate purpose for it being
processed.
Your right to information about automated decision making - if a human being isn’t involved in
making a decision using your information and it’s done automatically, then you
can ask us about how the decision is made. We don’t make decisions like this now
but if we start then we’ll let you know and tell you about why we’re doing it.
Your right to data portability – you have the right to ask us to give you a copy of the personal
information you have provided to us in a structured, commonly used and
machine-readable form.
Your right to restrict processing – you have the right to ask us to restrict or suppress our use of your
personal data. If we agree that we should stop processing it, we will still
hold it but will not use it.
Your right to object – if you don’t want us to use your
personal information any more then you can ask us to stop what we’re doing with
it. Please bear in mind though that we need it to provide services to you and
we may need to keep your data for a certain amount of time as we’ve explained
above. You can also ask us not to use your personal data for marketing
purposes. You can exercise this right at any time by contacting us at info@geneco.uk.com or by contacting our Data Protection
Officer whose details are at the end of this Notice. If you ask to stop using
your personal information then we will contact you to confirm the position as
there may be some circumstances where we will have to continue using it.
With respect to certain rights, we may ask for a copy of your passport
or driving licence and for a copy of a document that shows your address before
we can respond to a request.
13 - Links
to other websites
Our site may, from time
to time, contain links to and from the websites of our partner networks,
advertisers and affiliates. If you follow a link to any of these websites,
please note that these websites have their own privacy policies and that we do
not accept any responsibility or liability for these policies. Please check
these policies before you submit any personal data to these websites.
14 - Changes
to Our Privacy Notice
We will update this
Privacy Notice from time to time to keep you informed of any changes to the
ways in which we use your personal data. Any changes we may make to our Privacy
Notice in the future will be posted on our site and, where appropriate,
notified to you by e-mail or by post. Please check back frequently to see any
updates or changes to our Privacy Notice.
15 -
Complaints
If you’re not happy and have issues with the way we’ve dealt with your
information or your rights then please let us know by contacting us as below.
If you remain unhappy with our response then you can ask the Information
Commissioner’s Office (ICO) to look into what we’ve done. They can be reached
at ico.org.uk, by phone on 0303 123 1113 or by
writing to the ICO, Wycliffe
House, Water Lane, Wilmslow, Cheshire SK9 5AF.
16 - Contact
Questions, comments and
requests regarding this Privacy Notice are welcomed and should be addressed
to info@geneco.uk.com.
Address for correspondence
GENeco Limited
Bristol Sewage Treatment Works
Kings Weston Lane
Avonmouth
Bristol
BS11 0YS