Privacy Policy

This privacy notice outlines our data practices in accordance with GDPR, detailing the information we collect and hold about individuals and organizations, its usage, retention, and relevant data-related information.

Applicability

This notice is applicable to both current and former employees, operatives, workers, contractors, and organizations associated with Waterhouse Plant Hire.

Data Controller Contact

Waterhouse Plant Hire is the data controller responsible for determining the processing of personal data. Contact details for each department's designated data manager are available upon request. To make inquiries, please contact us at: gdpr@waterhouseplant.co.uk

Data Protection Principles

Regarding your personal data, we are committed to:

1. Processing it fairly, lawfully, and transparently.
2. Collecting data for relevant engagement purposes only.
3. Using data as disclosed to you.
4. Maintaining accurate and updated information.
5. Retaining data only as required.
6. Ensuring data security and preventing unauthorized usage.

Processed Data Types

We hold various data types, including but not limited to:

• Personal details: Name, address, date of birth, email, phone numbers
• Professional identifiers: CPCS/CSCS/NPORS numbers
• Photograph
• Gender
• Next of kin and contact details
• Health information, including disability status
• Portfolio or CV information, references
• Documentation related to UK work rights
• Driving license
• Bank details
• Tax codes
• National Insurance number
• Pay rates, hours, terms of engagement
• Disciplinary proceedings, breach of contract information
• Performance records, warnings, appraisals
• Leave records: Annual, family, sick leave
• Criminal record details
• Competency and training information
• CCTV footage
• Telephone system logs and recordings
• Building entry card records

Data Collection Methods

We collect data through various means, primarily from forms you complete and official documentation provided by you. In some cases, data is obtained from third parties like agencies and former employers for references.

Purpose of Data Processing

We process data within the scope of the law, including:

• Fulfilling contractual obligations
• Legal duty compliance
• Pursuing legitimate interests
• Protecting your interests
• Serving public interests

We process data to:

• Maintain correspondence and emergency contact points
• Assess competency
• Seek medical opinion on fitness for work
• Address legal claims
• Prevent fraud

Special Categories of Data

Special data categories, such as health information, are processed under stricter guidelines. Processing is carried out with:

• Explicit consent
• Legal obligations
• Legitimate interests

This data is used to ensure fitness for tasks and assignments.

Data Sharing

Data is shared with internal representatives and third parties when necessary for duties. Third-party sharing includes work opportunities and payment processing, while measures are in place to protect against loss or misuse.

Data Retention

We retain data as needed, with varying periods based on usage and engagement purposes.

Your Data Rights

You have rights regarding your data:

1. The right to be informed.
2. The right of access.
3. The right to rectification.
4. The right to erasure.
5. The right to restrict processing.
6. The right to data portability.
7. The right to object to inclusion.
8. The right to challenge automated decisions and profiling.

You can withdraw consent at any time, subject to legitimate reasons.

Exercising Your Rights

To exercise your data rights, contact: gdpr@waterhouseplant.co.uk

Complaints

If you believe your data protection rights were breached, you can complain to the Information Commissioner (ICO).