Privacy Policy

The information and any commentary contained on the website is provided free of charge for information purposes only. Whilst every reasonable effort has been made to ensure the information and commentary are accurate and up to date, no responsibility for its accuracy and correctness, or for any consequences of relying on it, is assumed by Veolia UK Limited. The information and commentary does not, and is not intended to, amount to advice to any person on a specific matter. Any reliance you may place on the information contained on this site is entirely at your own risk and you agree that you have no right of recourse against Veolia UK Limited.

We use cookies in order to improve site performance, offer you a better browsing experience and enable you to easily share content. Cookies are pieces of information stored on your computer in simple text files which our server can read and record. These files do not contain any sensitive information. When you browse this website, you will be asked for your consent to the use of cookies.


Services we use


Google Analytics mainly uses first-party cookies to report on visitor (aka. user) interactions on Google Analytics customers’ websites. Users may disable cookies or delete any individual cookies.

In addition, Google Analytics supports an optional browser add-on that - once installed and enabled - disables measurement by Google Analytics for any site a user visits. Note that this add-on only disables Google Analytics measurement.

Where a site or app uses Google Analytics for Apps or the Google Analytics for Firebase SDKs, Google Analytics collects an app-instance identifier — a randomly generated number that identifies a unique installation of an App. Whenever a user resets their Advertising Identifier (Advertising ID on Android, and ID for Advertisers on iOS), the app-instance identifier is also reset.

Where sites or apps have implemented Google Analytics with other Google Advertising products, like AdWords, additional advertising identifiers may be collected. Users can opt-out of this feature and manage their settings for this cookie using the Ads SettingsLearn more

Google Analytics also collects Internet Protocol (IP) addresses to provide and protect the security of the service, and to give website owners a sense of which country, state, or city in the world their users come from (also known as "IP geolocation"). Google Analytics provides a method to mask IPs that are collected (detailed below) but note that website owners have access to their users’ IP addresses even if the website owners do not use Google Analytics.


Find out more

Pardot: Pardot tracks visitor and prospect activities on your website and landing pages by setting cookies on their browsers. Cookies are set to remember preferences (like form field values) when a visitor returns to your site. Pardot also sets a cookie for logged-in users to maintain the session and remember table filters.

Pardot sets first-party cookies for tracking purposes and sets third-party cookies for redundancy. Using first-party and third-party cookies together is standard in the marketing automation industry. Pardot cookies don’t store personally identifying information, only a unique identifier. Pardot sets first-party cookies on your tracker subdomains and Pardot domains. Pardot uses third-party cookies on https pages and when your account doesn’t have a tracker subdomain set up.

Pardot sets three kinds of cookies.

  • The visitor cookie is composed of a unique visitor ID and the unique identifier for your account. For example, the cookie name “visitor_id12345” stores the visitor value “1010101010”, and “12345” is the account identifier. This cookie is set for visitors by the Pardot tracking code.
  • If your account tracks opt-in preferences, the pi_opt_in cookie is set with a true or false value when the visitor opts in or out of tracking.
  • A session cookie named “pardot” is set when you’re logged in as a Pardot user. This cookie isn’t set on a visitor’s browser.

LinkedIn: LinkedIn uses different types of cookies to run ad-related products. 

For a full list of these cookies click here.

Hotjar: We use Hotjar in order to better understand our users’ needs and to optimise this service and experience. Hotjar is a technology service that helps us better understand our users experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device's IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on this link.

You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link.


Through your browser or device: Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version and the name and version of the Services you are using. We use this information to ensure that the Services function properly.


IP Address: Your IP address is automatically assigned to your computer by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) that were visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications and other services. We use IP addresses for purposes such as calculating usage levels, diagnosing server problems and administering the Services. We may also derive your approximate location from your IP address.


Webforms: When submitted through our webforms on the contact us, feedback and request a quote pages, the website collects personal information such as name, address, email address, telephone number(s), your business area and any attachments that you might choose to submit.


Why do we need this information?

This personal information is required to optimise the best website experience for your visit, or in order to raise your enquiry with the most relevant internal department in facilitating your enquiry or request for quotation.

 

How long do we keep this data?

We will retain personal information until we are advised that you wish for your personal information to be removed from the website (see your rights, below). We will also remove your information if your company requests this (if you have left the business for example).


Your rights

Under Data Protection law you have rights related to how we protect and look after your personal information

You have the right to ask us for your personal information that we hold and process about you. This is known as a subject access request.

You can also ask:

1. That any inaccurate information we hold about you is corrected

2. That we delete information about you in certain situations;

3. That we stop using your personal information for certain purposes;

4. That we don’t make decisions about you by completely automated means;

5. That personal information you have given us be provided to you in a common machine readable format, or sent to a third party where this is technically feasible;

The rights set out above may apply in limited circumstances, and we may not always be able to comply with your request to exercise these rights. We will always try to respond to a request to exercise your rights within 1 month.

If you are unhappy with the way we handle your personal information, please contact us at the address below. We will try to address your concerns. If you have a complaint about the way we have handled your information, you can contact the Information Commissioner's Office who is the relevant authority in the UK, or the Data Protection Commissioner who is the relevant authority in the Republic of Ireland.


Company Information:

The data controller is Veolia UK Limited

For enquiries or requests, please email [email protected]

Registered head office:
8th Floor, 210 Pentonville Road, London, N1 9JY
Registered in England

 Use of this website is subject to the laws of England and Wales. Any dispute which may arise between the parties concerning the information contained within this website shall be determined by the English Courts and the parties hereby submit to the exclusive jurisdiction of the English Courts for such purposes.

    Veolia has deployed static CCTV systems at most of its locations, including sites that are open to the general public. A number of Veolia sites further employ automatic number plate recognition (ANPR) systems and/or body-worn video (BWV) surveillance systems.

    The aim of this privacy notice is to explain the purposes of these video surveillance systems and to provide all information as required by current Data Protection Legislation.


    Purposes

    CCTV Purposes

    Veolia UK and Ireland deploys static CCTV at most of its sites for the following purposes:

    • to maintain security at Company properties;  
    • to protect and maintain the health and safety of staff, customers, members of the public and visitors;
    • to protect Company property and the property of staff, customers, members of the public and visitors; 
    • to prevent and detect crime; 
    • to facilitate the apprehension and prosecution of offenders and apprehension of suspected offenders; 
    • to assist in the identification of unauthorised actions or unsafe working practices that might result in disciplinary proceedings being instituted against employees and to assist in providing relevant evidence; 
    • to support learning from incidents; and
    • to provide HWRC site activity footage to the internet for public information.
    • to provide UAV services including (but not limited to) commercial filming/photography, building/structural inspections, radiometry, property/land surveys and 3D modelling.

    Veolia UK deploys vehicle-based CCTV systems on some commercial vehicles for the following purposes:

    • to protect and maintain the health and safety of staff and members of the public.
    • to ensure that contractual requirements are met and that complaints can be appropriately investigated.
    • to reduce anti-social behaviour towards staff (prevention through deterrence and detection).
    • to prevent and detect crime and to facilitate the apprehension and prosecution of offenders and apprehension of suspected offenders. 
    • to assist in the identification of unauthorised actions or unsafe working practices that might result in disciplinary proceedings being instituted against employees and to assist in providing relevant evidence. 
    • to support learning from incidents.

    Categories of personal data collected

    Static and mobile CCTV systems will capture images of staff during their employment, visitors, customers, members of the public and vehicles. 

    Mobile CCTV systems may capture all of the above but will also capture images of members of the public outside of Veolia’s facilities.

    Neither static nor mobile CCTV systems capture audio.

    Legal basis for processing

    The following legal bases apply to Veolia’s use of static CCTV systems:

    • GDPR Article 6, 1(f) - Processing is necessary in the legitimate interests of Veolia, for the purposes detailed above.
    • GDPR Article 6, 1(e) - Processing is necessary for the performance of a task carried out in the exercise of official authority vested in the controller (for municipal contracts where Veolia is the data processor or joint controller).

    ANPR Purposes

    Veolia UK deploys static ANPR systems at some of its household waste recycling centre (HWRC) sites for the following purposes:

    • to monitor whether HWRC sites are being used appropriately for domestic and household waste only
    • to prevent and identify illegal trade use and abuse of permit schemes.
    • to count vehicle use of the sites in order to collect data for understanding trends and to help with the future provision of facilities.
    • to collate data that indicates busy and quiet times of the day.

    Categories of personal data collected

    ANPR cameras capture vehicle information only, predominantly vehicle registration numbers.

    Legal basis for this processing

    The following legal bases apply to Veolia’s use of ANPR systems:

    • GDPR Article 6, 1(f) - Processing is necessary in the legitimate interests of Veolia, for the purposes detailed above.
    • GDPR Article 6, 1(e) - Processing is necessary for the performance of a task carried out in the exercise of official authority vested in the controller (for municipal contracts where Veolia is the data processor or joint controller).

    BWV Purposes

    Veolia UK deploys body-worn video systems at some sites for the following purposes:

    • to protect and maintain the health and safety of staff, customers, members of the public and visitors
    • to prevent and detect crime and to facilitate the apprehension and prosecution of offenders and apprehension of suspected offenders. 
    • to reduce anti-social behaviour towards staff (prevention through deterrence and detection).
       

    Categories of personal data collected

    Body-worn video systems will capture images and sound of Veolia employees, customers, visitors and members of the public within Veolia owned/managed facilities

     

    Legal basis for this processing

    The following legal bases apply to Veolia’s use of ANPR systems:

    • GDPR Article 6, 1(d) - Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
    • GDPR Article 6, 1(f) - Processing is necessary in the legitimate interests of Veolia, for the purposes detailed above.
    • GDPR Article 6, 1(e) - Processing is necessary for the performance of a task carried out in the exercise of official authority vested in the controller (for municipal contracts where Veolia is the data processor or joint controller).
       

    Data capture, overwriting and downloading
     

    Images (and sound for BWV) are all recorded locally to storage media.

    CCTV and BWV storage media is not routinely downloaded to a computer and is overwritten on a monthly basis (up to a maximum of thirty-one days) unless there is a further legal/contractual requirement to keep the data for longer.

     

    CCTV and BWV footage will only be downloaded and stored securely for the following reasons: 

    • Any accident, injury or near-miss (employee, visitor or member of the public)
    • a vehicle-related accident, injury or near miss     
    • a report of violence or anti-social behaviour against Veolia staff
    • to facilitate the apprehension and prosecution of offenders and apprehension of suspected offenders 
    • to assist in the identification of unauthorised actions or unsafe working practices that might result in disciplinary proceedings being instituted against our employees and to assist in providing relevant evidence
    • receipt of a complaint about employee driving standards     
    • a formal request from an external agency     
    • a request from an individual to access personal information held (called a Subject Access Request)

    ANPR storage media is routinely downloaded and is overwritten on a monthly basis.


    Recipients of personal data (video surveillance footage)

    Static CCTV footage, mobile CCTV footage and BWV footage is not routinely shared.

    ANPR footage is routinely shared with Local Authorities where Veolia manages municipal services.

    Under certain circumstances and only after following due diligence, Veolia may share video surveillance footage with the following:

    • Police 
    • Solicitors
    • Claimants in civil proceedings
    • Insurance companies
    • Local authorities
    • Other official/statutory agencies

    Video surveillance footage may be shared with data subjects upon receipt of a subject access request (please see Access Requests section, below).

    Retention periods

    CCTV (both static and mobile) and BWV footage will be retained for a period of no more than 31 days, after which time the footage will be overwritten unless an investigation is being conducted, in which case images may need to be retained for a longer period.

     

    ANPR footage may be retained for up to 12 months.

    Access requests

    Under current Data Protection Legislation, individuals have the right (upon request) to receive a copy of any personal data that Veolia holds about them, including images obtained via video surveillance systems, as long as the individual is recognisable from those images. This request is known as a Subject Access Request.

    If you wish to access any video surveillance images relating to yourself, you should:

    • make a request to Veolia’s Data Protection team at [email protected] (you do not have to pay a fee). 
    • Remember that you can only request footage where you are clearly identifiable. You are not permitted to receive images of other individuals or vehicles.
    • Ensure the request includes the date and approximate time when the images were recorded and the location of the particular video surveillance system, so that the images can be easily located and your identity can be established. Other details (such as your vehicle registration number or details of a particular incident/event, may also help to speed up the process).

    The Veolia Data Protection team will aim to respond promptly and in any case within one month of receiving the request.


    Contact information

    For the purposes of video surveillance operations, Veolia in the UK and Ireland act variously as a data controller, as a joint data controller and as a data processor. For data controller purposes, contact information is as follows:

     

    Data Protection Officer

    Veolia UK & Ireland

    Kingswood House 

    Kingswood Crescent

    Cannock, WS11 8JP

     

    To contact Veolia in relation to any video surveillance operations, please email [email protected] or write to the address above.

    Here at Veolia, we understand that customers care about the use and storage of their personal information and we value your trust in allowing us to do this in a careful and sensible manner. We have created this privacy notice in order to demonstrate our commitment to the privacy of our customers.
     

    What information do we collect?

    When you request a product or service, we’ll collect some of your personal information, to make sure you have everything you need to make the most of our services. We use this information for the administration of your contract and to support the delivery of the services or products you have asked for.

    The type of personal information we may collect from you are:

    Name, Address, Telephone number(s), Email address, Date of birth, Payment details.
     

    Why do we need this information?

    The information requested during this process is required to complete the sale of the products or services that form part of your contract with us. We use the information we collect in a variety of ways in providing the service and operating our business, including the following:

    • We use the information provided along with the requested service information to supply you with contractual documents.
       
    • We use the information that we collect to operate, maintain, enhance and provide all features of the service, to provide services and information that you request, to respond to comments and questions and otherwise to provide support to you as a customer.
       
    • We use the information that we collect to understand and analyse the usage trends and preferences of our customers to improve our service.
       
    • We may use your email address or other information we collect (i) to contact you for administrative purposes such as customer service, or (ii) to send communications, including updates relating to products and services.
       
    • We may share your data with credit reference agencies to assess creditworthiness and product suitability, check your identity, manage your account, trace and recover debts and prevent criminal activity. This is laid out in more detail in the “Who will your data be shared with?” section.


    How long do we keep this data?

    We will retain this personal information about you for as long as you are a customer and a further three years thereafter, or until we are advised that you wish for your personal information to be removed (see your rights, below). We will also remove your information if your company requests this (if you have left the business for example).
     

    Who will your data be shared with?

    In order to process your application, we may supply your personal information to credit reference agencies (CRAs). They will give us information about you, such as about your financial history. We will also continue to exchange information about you with CRAs on an ongoing basis, including about your settled accounts and any debts not fully repaid on time. CRAs may share your information with other organisations. The identities of the CRAs, and the ways in which they use and share personal information, are explained in more detail at http://www.experian.co.uk/crain/index.html’.
     

    Your rights

    Under Data Protection law you have rights related to how we protect and look after your personal information. 

    You have the right to ask us for your personal information that we hold and process about you. This is known as a subject access request. 

     

    You can also ask:
     

    1. that any inaccurate information we hold about you is corrected; 
    2. that we delete information about you in certain situations; 
    3. that we stop using your personal information for certain purposes; 
    4. that we don’t make decisions about you by completely automated means; 
    5. that personal information you have given us be provided to you in a common machine readable format, or sent to a third party where this is technically feasible; 

     

    The rights set out above may apply in limited circumstances, and we may not always be able to comply with your request to exercise these rights. 

    If you are unhappy with the way we handle your personal information, please contact us at the address below. We will try to address your concerns. If you have a complaint about the way we have handled your information, you can contact the Information Commissioner's Office who is the relevant authority in the UK, or the Data Protection Commissioner who is the relevant authority in EIRE.

    The data controller is Veolia UK & Ireland.
    Registered head office: 8th Floor, 210 Pentonville Road, London, N1 9JY

    For enquiries or to exercise your rights, please contact;

    Data Protection Officer, [email protected].
    Kingswood House, Kingswood Crescent, Cannock, Staffordshire WS11 8JP.