P. Flannery Plant Hire (Oval) Ltd (The Company) is aware of its obligations under the General Data Protection Regulation (GDPR) and is committed to processing your data securely and transparently. This privacy notice sets out, in line with GDPR, the types of data that we hold on you as an individual or organisation. It also sets out how we use that information, how long we keep it for and other relevant information about your data.
This applies to current and former employees, operatives, workers, contractors and organisations.
The Company is a data controller, meaning that it determines the processes to be used when using your personal data. Each department has appointed an appropriate person to manage personal data and contact details can be made on request. All requests should be made to the following e-mail address: email@example.com
In relation to your personal data, we will:
We hold many types of data about you, which may include:
We collect data about you in a variety of ways and this will usually be from forms you fill out where data is collected from you directly. Other details may be collected directly from you in the form of official documentation such as your driving licence, passport or CPCS/CSCS card.
In some cases, we will collect data about you from third parties, such as agencies, former employers when gathering references.
Personal data is kept in secure files or within the Company’s IT systems.
The law on data protection allows us to process your data for certain reasons only:
All of the processing carried out by us falls into one of the permitted reasons.
We also collect data so that we can carry out activities which are in the legitimate interests of The Company:
Special categories of data are data relating to your:
We must process special categories of data in accordance with more stringent guidelines. Most commonly, we will process special categories of data when the following applies:
We will use your special category data:
We do not need your consent if we use special categories of personal data in order to carry out our legal obligations.
Your data will be shared with representatives within The Company where it is necessary for them to undertake their duties.
We share your data with third parties in order to comply with work opportunities, for example, where a hirer requires evidence of your suitability to carry out tasks. Other shared data includes storing bank details on banking applications, portals or websites in order to make payments to you.
We are aware of the requirement to ensure your data is protected against accidental loss or disclosure, destruction and abuse. We have implemented processes to guard against such. This includes holding physical copies of data in locked cabinets with restricted access, and electronic records stored in a secure IT system.
In line with data protection principles, we only keep your data for as long as we need it for, which will be at least for the duration of your engagement with us though in some cases we will keep your data for a period after your engagement has ended. Retention periods can vary depending on why we need your data.
The law on data protection gives you certain rights in relation to the data we hold on you. These are:
Where you have provided consent to our use of your data, you also have the unrestricted right to withdraw that consent at any time. Withdrawing your consent means that we will stop processing the data that you had previously given us consent to use. However, in some cases, we may continue to use the data where so permitted by having a legitimate reason for doing so.
If you wish to exercise any of the rights explained above, please e-mail: firstname.lastname@example.org
The supervisory authority in the UK for data protection matters is the Information Commissioner (ICO). If you think your data protection rights have been breached in any way by us, you are able to make a complaint to the ICO.