This policy applies to any personal data we collect about you when you:
- use any of our websites set out in section 9 below;
- use any of our apps as set out in section 9 below;
- use of any of our IT systems, including messaging and collaboration platforms ("IT Systems");
- contact us or when we contact you;
- apply for one of our vacancies;
- purchase goods or services from us;
- provide services or goods to us (where, for example, you are a sole trader, partnership or where you are providing services or goods on behalf of your employer/contractor); and/or
- visit our sites.
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
The details of the applicable data controller depending on which area of Heidelberg Materials UK you are dealing with are set out at the end of this policy.
If you have any questions, comments or requests regarding our data processing practices, You may contact us by writing to the Data Protection Manager at the Heidelberg Materials UK Legal Team at either Heidelberg Materials UK, Second Floor, Arena Court, Crown Lane, Maidenhead, SL6 8QZ or by email at .
2. WHERE WE STORE YOUR INFORMATION 2.1 All information you provide to us is stored on our secure servers, or those of our group or those of our service providers, within the European Economic Area ("EEA"). 2.2 Where we have given you (or where you have chosen) a password which enables you to access certain parts of our websites, apps and IT Systems (as applicable), you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our websites and/or our applications; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, including keeping security patches up to date wherever possible, and by constantly investigating new ways to keep data secure.
3. HOW WE USE YOUR INFORMATION 3.1 We use information held about you in the following ways: 3.1.1 to provide you with information that you request from us or which we feel may interest you. We may, on occasion and, where appropriate where you have consented, send you marketing information by email or post. This can include notifications about the launch of new goods, competitions, offers or other relevant news articles that you might find interesting. If you would like to stop receiving such information from us, please click on the "unsubscribe" link in any such emails that we send to you, or use the contact details at the beginning of this policy; 3.1.2 to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, goods and services that you request from us including in setting up credit accounts, in relation to our rights under any such contracts and also to contact you via phone calls, text messages or emails regarding the goods we are delivering to you and the progress of your delivery; 3.1.3 in the case of call recordings, to train our staff, monitor staff performance and verify your order, for our legitimate business interests; 3.1.4 to carry out our obligations arising from any contracts entered into between you and us where you are providing goods and/or services to us including in setting up a vendor account on our system to enable us to pay you, in relation to our rights under any such contracts and also to contact you via phone calls, text messages, emails or otherwise through our IT Systems where you are a member of a messaging Team, regarding the goods and/or services you delivering to us and the progress of your delivery or otherwise; 3.1.5 to allow you to participate in interactive features on our websites, our apps, IT systems and in relation to our services, when you choose to do so; 3.1.6 to notify you about changes to our services and goods; 3.1.7 to provide customer support; 3.1.8 to ensure that content from our websites, our apps and our IT systems is presented in the most effective manner for you and for your computer; 3.1.9 to review your CV and suitability for a role; 3.1.10 to manage the services/goods that you are delivering to Heidelberg Materials UK, for example to sign you in when you visit our site or to manage the goods you are delivering for Heidelberg Materials UK, for example if you are a haulier and delivering our goods on our behalf to our customers (in which case, your name will appear on our delivery tickets); 3.1.11 to allow us to open a credit account for you (for example, by running financial and security checks (in particular in relation to trade sanctions)); 3.1.12 to administer our websites, our apps and IT systems and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes; 3.1.13 to improve our websites, our apps and IT systems to ensure that content is presented in the most effective manner for you and for your computer; 3.1.14 to enhance our websites, our apps and IT systems, and the customer service experience generally (for example, through call recording) to ensure you receive a personalised and continuously improving customer service; 3.1.15 to improve our processes and procedures, including training of our staff to improve our service to you; 3.1.16 to allow you to participate in interactive features of our websites, our apps and IT systems, when you choose to do so; 3.1.17 as part of our efforts to keep our sites and vehicles safe and secure and to improve our processes (for example, through the use of CCTV, dashboard CCTV and any other relevant image recording, and through incident reporting); 3.1.18 to analyse your spending and buying habits when purchasing goods from us to improve our own goods and services; 3.1.19 to measure, understand or monitor the effectiveness of advertising, promotions, marketing material and content and any joint initiatives with our affiliates, suppliers, partners, subcontractors and other selected third parties; 3.1.20 to make suggestions and recommendations to you and other users of our websites, our apps and IT systems or services about goods or services that may interest you or them; 3.1.21 to comply with our legal and regulatory obligations and for the purposes of assisting with the prevention and detection of crime; 3.1.22 to demonstrate and publicise our commitment to local communities and the environment by inviting local residents to visit our site open days and publishing photographs or releasing images of these events; and 3.1.23 to enable smooth cooperation, communication and joint working of distributed teams; for user identification and ensuring authorised access to our IT Systems.
Consent: We may, on occasion, send you marketing messages by email and post about us and our events and offers where you have not unsubscribed and where you have purchased goods or services from us, or where you have otherwise consented. If you are not a customer of ours but have provided us with consent to use your details for marketing purposes, then we may also contact you about our events, goods and services.
If and as far as you have agreed to the use of your personal data in order to be contacted for customer management purposes via certain communication channels, the legal basis of any such processing of your personal data is Art. 6 (1) a) GDPR. This applies to your contact data (name, title, academic title, customer name for which you are acting, job title, address, telephone number, e-mail address, country of residence). In each of the situations above, you have the right to withdraw your consent at any time and can object to processing of this nature.
Please note that whenever you provide us with further personal information regarding e.g. your date of birth, membership in professional groups, family members, anniversaries, hobbies and special interests, we might use such information for customer management purposes as well. By disclosing such personal data to us, you agree that we may use this personal data to foster the existing business relationship. Please note that you may withdraw this consent at any given time entirely or partially with future effect by contacting your local sales representative of the relevant data controller entity listed in section 8 of this Policy. Any such collection and/or use of this type of personal data is based on Art. 6 (1) a) UK GDPR.
We have a legitimate interest in processing your information as:
- we would be unable to provide our goods and services without processing your information;
- we will both benefit from the effective provision of goods and services, and we have a legitimate interest in monitoring staff performance, training staff, and improving our processes, including by reviewing buying habits;
- we will both benefit from the ability to enforce or apply rights under any contract between us;
- we will both benefit from the customer account/any credit account services that we provide;
- we will both benefit from the use of interactive features on our websites, our apps and our IT Systems, from the most effective presentation of information on our websites, our apps and IT Systems, and from properly working websites, our apps and IT Systems;
- we are required to ensure health and safety of our sites and vehicles and have a legitimate interest in ensuring any processes are effective;
- we have a legitimate interest in ensuring the security of our sites and vehicles, and in assisting with the prevention and detection of crime, including theft and fraud;
- we may both benefit from the assessment of any job application that you make to us;
- we have a legitimate interest in processing your information in connection with any mergers, acquisitions or reorganisation of our business, in which case some of your information may be shared with a prospective buyer or otherwise but only so far as is strictly necessary for the purposes of such sale or administration;
- we have a legitimate interest in promoting our activities to support local communities where our sites are situated and to demonstrate our commitment to the environment, through the publication of photographs and images of our open days.
(a) your contact data, such as name, title, academic title, customer for which you are acting, job title, address, telephone number, e-mail address, country of residence; (b) information from sources available to the public, such as (commercial) information databases or credit agencies as far as this is related to our customer (c) as well as other data, which you provide to us within the scope of a project or a contractual relationship or at the initiation of a business relationship. Impact of processing We consider that it is reasonable for us to process your personal data for the purposes of our legitimate interests outlined above as the processing of your personal data does not unreasonably intrude on your privacy.
5. HOW LONG WE KEEP YOUR INFORMATION FOR 5.1 When your data is no longer required for the purposes listed above, we will delete it within the periods set out below: 5.1.1 Marketing emails and other communications where possible will typically be deleted after 24 months, unless we are required for legal and regulatory purposes to retain such communications for a longer period; 5.1.2 Call recordings with customers, suppliers and other third parties will typically be deleted after 6 years; 5.1.3 CCTV will typically be deleted after 60 days; 5.1.4 In respect of our customer relationship management, your personal data will be deleted once it is no longer necessary for such purposes and as far as we process your personal data based on your consent, we will delete your personal data the later of either withdrawal of your consent or reaching the deletion deadlines set out herein. In this respect, please inform your local sales representative of Heidelberg Materials UK if you are no longer our contact person for our customer. We will in this case delete your personal data as our Contact, unless we are subject to a statutory obligation to retain your data. 5.1.5 Job applications, including CVs, interview notes, and psychometric test results, which have not resulted in a role with Heidelberg Materials UK on this occasion will typically be deleted within 6 months; 5.1.6 Photographs and images from our site open days will typically be deleted and not used further after 2 years; 5.1.7 Any other information will typically be deleted after 6 years from the date of our last positive interaction with you or sooner wherever possible. Data will be archived at appropriate intervals depending on the type of information and the frequency of our interactions with you. 5.2 We may keep your personal information for up to 6 years, to enable us to retain the information we may require for legal and regulatory purposes. Some information, for example information relating to health and safety, may be kept for up to 40 years.
7. YOUR RIGHTS
You have a number of rights under data protection law in relation to the way we process your personal data. These are set out below. You may contact us by contacting our Data Protection Manager directly – details above to exercise any of these rights and we will respond to any request received from you within one month from the date of the request. DESCRIPTION OF RIGHT
(1) A right to access personal data held by us about you.
(2) A right to require us to rectify any inaccurate personal data held by us about you.
(3) A right to require us to erase personal data held by us about you. This right will only apply where (for example): we no longer need to use the personal data to achieve the purpose we collected it for; or where you withdraw your consent if we are using your personal data based on your consent; or where you object to the way we process your data (in line with your right to object as set out below).
(4) A right to restrict our processing of personal data held by us about you. This right will only apply where (for example): you dispute the accuracy of the personal data held by us; or where you would have the right to require us to erase the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but we require the data for the purposes of dealing with legal claims.
(5) A right to receive personal data, which you have provided to us, in a structured, commonly used and machine readable format. You also have the right to require us to transfer this personal data to another organisation, at your request.
(6) A right to object to our processing of personal data held by us about you where the processing of such data is necessary for the purposes of our legitimate interests, unless we are able to demonstrate, on balance, legitimate grounds for continuing to process personal data which override your rights or which are for the establishment, exercise or defence of legal claims.
(7) A right for you not to be subject to a decision based solely on an automated process, including profiling, which produces legal effects concerning you or similarly significantly affect you.
(8) A right to withdraw your consent, where we are relying on it to use your personal data (for example, to provide you with marketing information about our services or goods).
If you have any concerns regarding our processing of your personal data, or are not satisfied with our handling of any request by you in relation to your rights, you also have the right to make a complaint to the Information Commissioner's Office. Their address is:
First Contact Team
Information Commissioner's Office
7.3 Our websites may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
8. DETAILS OF THE DATA CONTROLLER 8.1 For the purpose of applicable data protection legislation, the data controller is: 8.1.1 where you are dealing with our concrete, aggregates, asphalt and contracting business or our BuildR app, our Collect & Go app, Hanson Quarry Products Europe Limited (registered no. 300002); 8.1.2 where you are dealing with our packed products business, Hanson Packed Products Limited (registered no. 026306); 8.1.3 where you are dealing with our marine aggregates business, Hanson Aggregates Marine Limited (registered no. 485700); 8.1.4 where you are dealing with our cementitious business, Castle Cement Limited (registered no. 2182762); 8.1.5 where you are dealing with our regen business, Civil and Marine Limited (registered no. 2301423); 8.1.6 where you are dealing with our Midland Quarry Products business, Midland Quarry Products Limited (registered no. 3173418); 8.1.7 where you are dealing with our building contractor business, Irvine-Whitlock Limited (registered no. 870262); 8.1.8 where you are dealing with our legacy businesses then as appropriate Cumbrian Industrials Limited (registered no. 1005899), Hanson Building Materials Limited (registered no.488067), Hanson Limited (registered no. 4626078) and Lehigh UK Limited (registered no. 4113976). all with registered office at Second Floor, Arena Court, Crown Lane, Maidenhead, SL6 8QZ, United Kingdom (together "Heidelberg Materials UK"). 8.1.9 additionally, if you report a matter through our compliance reporting system SpeakUp, then there are joint data controllers of your data, being Hanson Quarry Products Europe Ltd (details above) and also Heidelberg Materials AG, Berliner Strasse 6, 69120 Heidelberg, Germany (“HCAG”).