Veolia has implemented a data protection management platform for the management of data protection requests. Please use one of the below forms to make your request, which will give you access to a secure messaging portal:
- To exercise your rights over your own personal data, please use this form.
- To exercise someone's rights on their behalf (e.g. you are a lawyer acting on behalf of a client), please use this form.
- To request the disclosure of personal data where you are a third-party (e.g. law enforcement or lawyer/insurer acting on behalf of Veolia), please use this form.
The information and any commentary contained on the website is provided free of charge for information purposes only. Whilst every reasonable effort has been made to ensure the information and commentary are accurate and up to date, no responsibility for its accuracy and correctness, or for any consequences of relying on it, is assumed by Veolia Environmental Services (UK) Limited. The information and commentary does not, and is not intended to, amount to advice to any person on a specific matter. Any reliance you may place on the information contained on this site is entirely at your own risk and you agree that you have no right of recourse against Veolia Environmental Services (UK) Limited.
We use cookies in order to improve site performance, offer you a better browsing experience and enable you to easily share content. Cookies are pieces of information stored on your computer in simple text files which our server can read and record. These files do not contain any sensitive information. When you browse this website, you will be asked for your consent to the use of cookies.
Information about cookies
This policy applies to all visits to websites owned by Veolia or entities in its Group (hereinafter “the Websites”).
The aim of this policy is to inform visitors about the nature, function and use of cookies, and to assist them in their choice of computer settings.
What is a cookie?
Cookies are small files installed on the hard disk of an internet user’s computer when he or she visits a website.
They are randomly allocated alphanumeric characters identifying a visitor so that the website manager can see whether that visitor has already browsed the website, and track the frequency of those visits and the visitor’s preferences. Cookies can also keep you connected, remember your preferences and provide you with relevant local information.
Cookies do not introduce viruses. Once allocated, they do not search the internet user’s equipment for personal information.
The only personal data a cookie might contain is data supplied by the internet user himself or herself, for example by filling out a contact form. In such cases the personal data is encoded so it can be read only by the server that created the cookies. If a visitor to the Website does not submit any personal data, the Website can tell that he or she has returned to pages previously visited, but is not capable of identifying who that user is.
How are cookies used?
The Websites use three categories of cookies for purposes explained in this policy. To ensure visitors to our websites are fully informed, we include information about the third party cookies of which we are aware.
- Functional cookies
These cookies are necessary (like session identifiers) for the smooth and secure browsing of the Websites and the use of their main functionalities.
On the first connection, a banner is displayed inviting the visitor to accept or reject cookies. If he or she accepts, the visitor can browse the Websites in accordance with the conditions of use.
Rejection can impair some of the browsing functionalities of the Websites (examples are difficulties with saving or visualizing content). Also, if you wipe the cookies you will be disconnected from the Websites and there is a risk that your saved preferences will be deleted. In such cases, Veolia will have no liability for any dysfunction.
The lifetime of these cookies can be up to 13 months from the date the visitor consents to their installation.
Examples of these cookies are:
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
- Analytic/performance cookies
These cookies show the use of the Websites and allow their performance, traffic and audience to be measured and statistics to be compiled, and in particular allow the use of content to be measured so that the pages can be improved both ergonomically and in terms of content.
Some cookies can occasionally be installed to measure the effectiveness of advertising content.
Other cookies can be used to guard against computer fraud. If the visitor rejects these cookies it has no effect on the quality of the browsing experience.
The activation of these cookies may result in data of a personal nature being transferred to countries that do not have an equivalent level of data protection to that of the UK. In such cases, Veolia satisfies itself that the transfer occurs only within the framework laid down by UK law and ensures that appropriate corporate and technical measures are taken to safeguard the confidentiality and security of personal data transfers.
The lifetime of these cookies is two years.
These cookies are: Google Analytics
- Shared or third party cookies
These third party cookies allow the visitor to share content from our Websites with others, or to express an opinion about one of the Websites or their content. These cookies may also contain links for sharing on Facebook, Twitter and other comparable social networks.
Some cookies can also offer advertisements from Veolia’s partners, or be installed when the internet user browses other websites. Acceptance of these cookies enables third parties to offer the visitor targeted advertising; rejecting them does not necessarily stop advertisements appearing, but that advertising will no longer take account of the internet user’s centres of interest or preferences.
If the visitor uses the “share” button, the third party website or social network concerned installs a cookie but only its issuer can read the information. We draw visitors’ attention to the fact that a social network having such a “share” button may be able to identify the internet user even if he or she does not use it, and track his or her browsing activity on the Websites.
To find out more about third party cookies, you can consult the information given on the third parties’ websites about the installation of their cookies and their rules on data protection; we remind you, however, that Veolia cannot interfere with such cookies in any way.
Cookies installed by Veolia’s partners come from such companies as Google services (Maps, Analytics, Tag Manager, reCaptcha), Twitter Acquia Lift, Add This, Youtube, Cloudflare, Addtoany, New Relic, LinkedIn, Hubspot, Hotjar and Diskus.
Managing your cookies
The visitor has various options when it comes to managing, accepting or rejecting cookies, and can express his or her choice at any time by using the following methods.
- Using browser settings
Most browsers accept the installation of cookies by default. However, the internet user can always choose to deactivate them, and can also ask the browser to give a warning whenever a website attempts to install a cookie.
To change the way cookies are managed, the internet user must change the settings on his or her equipment, not forgetting that doing so may deactivate some functionalities on websites visited subsequently.
The steps vary depending on the browser on the terminal. They are described in each browser’s help page, including:
- For Chrome: click on the link to Google Chrome Help
- For Safari: click on the Safari link to Managing Cookies and Website Data with Safari
- For Firefox: click on the link to Firefox – Mozilla – Support
- For Internet Explorer: click on the link to Internet Explorer Support – Delete and Manage Cookies
- For Opera (link available in English only): click on the link to Opera Help – Web Preferences
- By using a cookie management platform
The internet user can find information about behaviour-based advertising and online data protection at any time on the “Youronlinechoices” platform. This platform brings together online advertising professionals who use the website to enable internet users to accept or reject the cookies used by its member companies.
- Click on the link to the Your Online Choices website
- By contacting Veolia’s Data Protection Team on [email protected], or using the forms available above this privacy notice.
- By contacting the issuer directly
For cookies installed by our Websites but originating from our partners, Veolia invites visitors to contact the partners directly via their websites to obtain information about their cookies.
Examples of Twitter + Facebook links
Twitter: https://help.twitter.com/en/rules-and-policies/twitter-cookies
Facebook: https://www.facebook.com/policy/cookies
WARNING:
Your decision whether to accept or reject cookies is itself based on one or more cookies. If you delete the cookies integrated by our Website, Veolia will no longer know what you have decided and the next time you visit one of our Websites you will have to make your choice again. You will also have to repeat your choice if you use other browsers or other equipment such as a tablet or smartphone.
For information about personal data provided via forms on this website please visit: https://www.veolia.co.uk/form-disclaimer
Veolia has deployed static CCTV systems at most of its locations, including sites that are open to the general public. A number of Veolia sites further employ automatic number plate recognition (ANPR) systems and/or body-worn video (BWV) surveillance systems.
The aim of this privacy notice is to explain the purposes of these video surveillance systems and to provide all information as required by current Data Protection Legislation.
Purposes
CCTV Purposes
Veolia UK and Ireland deploys static CCTV at most of its sites for the following purposes:
- to maintain security at Company properties;
- to protect and maintain the health and safety of staff, customers, members of the public and visitors;
- to protect Company property and the property of staff, customers, members of the public and visitors;
- to prevent and detect crime;
- to facilitate the apprehension and prosecution of offenders and apprehension of suspected offenders;
- to assist in the identification of unauthorised actions or unsafe working practices that might result in disciplinary proceedings being instituted against employees and to assist in providing relevant evidence;
- to support learning from incidents; and
- to provide HWRC site activity footage to the internet for public information.
- to provide UAV services including (but not limited to) commercial filming/photography, building/structural inspections, radiometry, property/land surveys and 3D modelling.
Veolia UK deploys vehicle-based CCTV systems on some commercial vehicles for the following purposes:
- to protect and maintain the health and safety of staff and members of the public.
- to ensure that contractual requirements are met and that complaints can be appropriately investigated.
- to reduce anti-social behaviour towards staff (prevention through deterrence and detection).
- to prevent and detect crime and to facilitate the apprehension and prosecution of offenders and apprehension of suspected offenders.
- to assist in the identification of unauthorised actions or unsafe working practices that might result in disciplinary proceedings being instituted against employees and to assist in providing relevant evidence.
- to support learning from incidents.
Categories of personal data collected
Static and mobile CCTV systems will capture images of staff during their employment, visitors, customers, members of the public and vehicles.
Mobile CCTV systems may capture all of the above but will also capture images of members of the public outside of Veolia’s facilities.
Neither static nor mobile CCTV systems capture audio.
Legal basis for processing
The following legal bases apply to Veolia’s use of static CCTV systems:
- GDPR Article 6, 1(f) - Processing is necessary in the legitimate interests of Veolia, for the purposes detailed above.
- GDPR Article 6, 1(e) - Processing is necessary for the performance of a task carried out in the exercise of official authority vested in the controller (for municipal contracts where Veolia is the data processor or joint controller).
ANPR Purposes
Veolia UK deploys static ANPR systems at some of its household waste recycling centre (HWRC) sites for the following purposes:
- to monitor whether HWRC sites are being used appropriately for domestic and household waste only
- to prevent and identify illegal trade use and abuse of permit schemes.
- to count vehicle use of the sites in order to collect data for understanding trends and to help with the future provision of facilities.
- to collate data that indicates busy and quiet times of the day.
Categories of personal data collected
ANPR cameras capture vehicle information only, predominantly vehicle registration numbers.
Legal basis for this processing
The following legal bases apply to Veolia’s use of ANPR systems:
- GDPR Article 6, 1(f) - Processing is necessary in the legitimate interests of Veolia, for the purposes detailed above.
- GDPR Article 6, 1(e) - Processing is necessary for the performance of a task carried out in the exercise of official authority vested in the controller (for municipal contracts where Veolia is the data processor or joint controller).
BWV Purposes
Veolia UK deploys body-worn video systems at some sites for the following purposes:
- to protect and maintain the health and safety of staff, customers, members of the public and visitors
- to prevent and detect crime and to facilitate the apprehension and prosecution of offenders and apprehension of suspected offenders.
- to reduce anti-social behaviour towards staff (prevention through deterrence and detection).
Categories of personal data collected
Body-worn video systems will capture images and sound of Veolia employees, customers, visitors and members of the public within Veolia owned/managed facilities
Legal basis for this processing
The following legal bases apply to Veolia’s use of ANPR systems:
- GDPR Article 6, 1(d) - Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
- GDPR Article 6, 1(f) - Processing is necessary in the legitimate interests of Veolia, for the purposes detailed above.
- GDPR Article 6, 1(e) - Processing is necessary for the performance of a task carried out in the exercise of official authority vested in the controller (for municipal contracts where Veolia is the data processor or joint controller).
Data capture, overwriting and downloading
Images (and sound for BWV) are all recorded locally to storage media.
CCTV and BWV storage media is not routinely downloaded to a computer and is overwritten on a monthly basis (up to a maximum of thirty-one days) unless there is a further legal/contractual requirement to keep the data for longer.
CCTV and BWV footage will only be downloaded and stored securely for the following reasons:
- Any accident, injury or near-miss (employee, visitor or member of the public)
- a vehicle-related accident, injury or near miss
- a report of violence or anti-social behaviour against Veolia staff
- to facilitate the apprehension and prosecution of offenders and apprehension of suspected offenders
- to assist in the identification of unauthorised actions or unsafe working practices that might result in disciplinary proceedings being instituted against our employees and to assist in providing relevant evidence
- receipt of a complaint about employee driving standards
- a formal request from an external agency
- a request from an individual to access personal information held (called a Subject Access Request)
ANPR storage media is routinely downloaded and is overwritten on a monthly basis.
Recipients of personal data (video surveillance footage)
Static CCTV footage, mobile CCTV footage and BWV footage is not routinely shared.
ANPR footage is routinely shared with Local Authorities where Veolia manages municipal services.
Under certain circumstances and only after following due diligence, Veolia may share video surveillance footage with the following:
- Police
- Solicitors
- Claimants in civil proceedings
- Insurance companies
- Local authorities
- Other official/statutory agencies
Video surveillance footage may be shared with data subjects upon receipt of a subject access request (please see Access Requests section, below).
Retention periods
CCTV (both static and mobile) and BWV footage will be retained for a period of no more than 31 days, after which time the footage will be overwritten unless an investigation is being conducted, in which case images may need to be retained for a longer period.
ANPR footage may be retained for up to 12 months.
Access requests
Under current Data Protection Legislation, individuals have the right (upon request) to receive a copy of any personal data that Veolia holds about them, including images obtained via video surveillance systems, as long as the individual is recognisable from those images. This request is known as a Subject Access Request.
If you wish to access any video surveillance images relating to yourself, you should:
- make a request to Veolia’s Data Protection team at [email protected] (you do not have to pay a fee).
- Remember that you can only request footage where you are clearly identifiable. You are not permitted to receive images of other individuals or vehicles.
- Ensure the request includes the date and approximate time when the images were recorded and the location of the particular video surveillance system, so that the images can be easily located and your identity can be established. Other details (such as your vehicle registration number or details of a particular incident/event, may also help to speed up the process).
The Veolia Data Protection team will aim to respond promptly and in any case within one month of receiving the request.
Contact information
For the purposes of video surveillance operations, Veolia in the UK and Ireland act variously as a data controller, as a joint data controller and as a data processor. For data controller purposes, contact information is as follows:
Data Protection Officer
Veolia UK & Ireland
Kingswood House
Kingswood Crescent
Cannock, WS11 8JP
To contact Veolia in relation to any video surveillance operations, please email [email protected] or write to the address above.
Here at Veolia, we understand that customers care about the use and storage of their personal information and we value your trust in allowing us to do this in a careful and sensible manner. We have created this privacy notice in order to demonstrate our commitment to the privacy of our customers.
What information do we collect?
When you request a product or service, we’ll collect some of your personal information, to make sure you have everything you need to make the most of our services. We use this information for the administration of your contract and to support the delivery of the services or products you have asked for.
The type of personal information we may collect from you are:
Name, Address, Telephone number(s), Email address, Date of birth, Payment details.
Why do we need this information?
The information requested during this process is required to complete the sale of the products or services that form part of your contract with us. We use the information we collect in a variety of ways in providing the service and operating our business, including the following:
- We use the information provided along with the requested service information to supply you with contractual documents.
- We use the information that we collect to operate, maintain, enhance and provide all features of the service, to provide services and information that you request, to respond to comments and questions and otherwise to provide support to you as a customer.
- We use the information that we collect to understand and analyse the usage trends and preferences of our customers to improve our service.
- We may use your email address or other information we collect (i) to contact you for administrative purposes such as customer service, or (ii) to send communications, including updates relating to products and services.
- We may share your data with credit reference agencies to assess creditworthiness and product suitability, check your identity, manage your account, trace and recover debts and prevent criminal activity. This is laid out in more detail in the “Who will your data be shared with?” section.
How long do we keep this data?
We will retain this personal information about you for as long as you are a customer and a further three years thereafter, or until we are advised that you wish for your personal information to be removed (see your rights, below). We will also remove your information if your company requests this (if you have left the business for example).
Who will your data be shared with?
In order to process your application, we may supply your personal information to credit reference agencies (CRAs). They will give us information about you, such as about your financial history. We will also continue to exchange information about you with CRAs on an ongoing basis, including about your settled accounts and any debts not fully repaid on time. CRAs may share your information with other organisations. The identities of the CRAs, and the ways in which they use and share personal information, are explained in more detail at http://www.experian.co.uk/crain/index.html’.
Your rights
Under Data Protection law you have rights related to how we protect and look after your personal information.
You have the right to ask us for your personal information that we hold and process about you. This is known as a subject access request.
You can also ask:
- that any inaccurate information we hold about you is corrected;
- that we delete information about you in certain situations;
- that we stop using your personal information for certain purposes;
- that we don’t make decisions about you by completely automated means;
- that personal information you have given us be provided to you in a common machine readable format, or sent to a third party where this is technically feasible;
The rights set out above may apply in limited circumstances, and we may not always be able to comply with your request to exercise these rights.
If you are unhappy with the way we handle your personal information, please contact us at the address below. We will try to address your concerns. If you have a complaint about the way we have handled your information, you can contact the Information Commissioner's Office who is the relevant authority in the UK, or the Data Protection Commissioner who is the relevant authority in EIRE.
The data controller is Veolia UK & Ireland.
Registered head office: 8th Floor, 210 Pentonville Road, London, N1 9JY
For enquiries or to exercise your rights, please contact;
Data Protection Officer, [email protected].
Kingswood House, Kingswood Crescent, Cannock, Staffordshire WS11 8JP.
Local Authority Resident Privacy Notice
Where Veolia delivers environmental services on behalf of a local authority (e.g. a Council), we may collect personal data relating to residents in that area. This privacy notice is provided as a general way of communicating the types of data that we collect and the purposes behind that collection. For more detailed information, your first port of call should be your local authority’s privacy notice, usually found on their website. You can also use the contact details at the bottom of this notice, to request more detailed information.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Data Retention
The length of time that we keep the above data for will vary, depending on the requirements set out by the local authority. Generally, the following will apply;
- Information held within our Customer Relationship Management system is generally held for two years from the last activity on the transaction.
- Telephone recordings are generally held for six months.
- Financial information (e.g.receipts for payments made) are held for six years.
For more specific information, check with your local authority first, or contact us using the information below.
Data Sharing
Where we deliver services on behalf of a local authority, your personal data will often be shared between us.
Where we ‘subcontract’ some of our services, we may also share your personal data with third parties to allow them to deliver the contracted services. Where possible, we will share the data in a way that does not identify you individually, but rather relates to the address only - however this is not always possible.
Where reasonably required and allowed by law, we may also share your personal data with law enforcement and other statutory authorities, if requested. We will only do so after satisfying ourselves that the request is legitimate and proportionate.
Your Rights
You have certain rights over your personal data, including the right to request a copy, have it corrected, and restrict its usage. In certain circumstances, you also have the right to have it deleted/erased, transferred to another provider, or object to it being used for certain purposes. You are also able to ask that we do not make decisions about you by completely automated means.
In most cases, your local authority will be responsible for the exercise of your rights, including over the information we hold about you on their behalf. You should first make your request to the relevant local authority.
If you are redirected to Veolia, you can use the links available above this privacy notice to exercise your rights. You can also use the above links to make a complaint about the way in which we use your personal data.
Information and Complaints
For more information, you should contact your local authority first. You may also contact Veolia’s Data Protection Officer via [email protected].
If you have a complaint, please contact either your authority or Veolia and we will try to address your concerns. If you are unhappy with the response, you may also lodge a complaint with the Information Commissioner’s Office, which is the relevant authority in the UK. More information is available at www.ico.org.uk.