Wincanton plc, including all its group companies, ('Wincanton') is registered as a Data Controller with the UK Information Commissioners Office, registration number Z549510X.
We operate as a data controller when managing personal data that relates to the categories of data subject outlined below, our employees and internal operations. We operate as a data processor when managing personal data on behalf of our customers.
This policy applies to information we collect about:
Visitors to our website
Consumer data we hold on behalf of our customers
Professional contacts and suppliers of services to us or our customers
People who attend events
Complainants, correspondents and enquirers
If you have any questions about data protection in Wincanton, please contact us at firstname.lastname@example.org or alternatively write to us at Data Protection Team, Wincanton plc, Methuen Park, Chippenham, Wiltshire, SN14 0WT.
The information we collect about you
When you become a customer, supply us with goods or services, complete a contact form, attend events run or supported by us or register an interest for any job vacancies we have, we may collect some or all of the following personal data about you:
Contact details (email and phone)
If you choose to submit a job application we will collect and hold the information that you provide in that application. IP addresses (Internet Protocol addresses) of visitors are logged for administration purposes. The IP address indicates the location of your computer on the Internet. We collect these to try to ensure that our site reflects the needs of our users and may be used to track your session.
We do not collect personal data directly from consumers. We may hold your personal data on behalf of our customers, under contract, in order to fulfil our contractual commitments. In these cases, we only process personal data as instructed by our customer, the data controller. This data may be held for up to 6 years after the end of our contract.
For prospective B2B customers our basis for processing is legitimate interest, based upon targeting solely potential B2B customers and opt outs to future marketing communications being provided. Where we hold any personal data on individuals, sole traders or partnerships it will be based on consent.
We may also receive information about you if you use any of the other websites we operate or the other services we provide. In this case we will have informed you when we collected the data that it may be shared internally.
We do not collect sensitive information except where legally required as part of the recruitment process. Sensitive information includes data relating to race or ethnic origin, political opinions, religious or other similar beliefs, trade union membership, physical or mental health, sexual life or criminal records.