PRIVACY NOTICE

PURPOSE OF THIS NOTICE

We value your privacy and take our obligations under privacy and data protection law very seriously. This Privacy Notice gives you information about how we collect and process your personal information.

This Privacy Notice describes in detail who is responsible for the personal information that we collect about you via the following channels: (i) through your use of our website; (ii) when you visit our ports or other ABP premises; and (iii) when you enter into a relationship with us for the provision of services or communications with us.

In particular this Privacy Notice describes:

• Who we are
• What is personal information?
• What personal information we collect about you
• What sensitive personal information we collect about you
• How we collect your personal information
• Information about third parties
• How we use your personal information
• How long we keep your personal information
• Who we share your personal information with
• How we protect your personal information
• Transferring your personal information out of the EEA
• Your rights regarding your personal information
• How to contact us
• Updates to Privacy Notice

In this Privacy Notice:

· references to you or your means any individual who we provide services to or is otherwise engaged or employed by one of our Customers;

· references to Customer means any organisation that we supply goods or services to; and

· references to the Website means the websites which are operated by a member of the ABP Group and such other of the Group's websites as we may operate from time to time.

WHO WE ARE

This Privacy Notice is issued on behalf of the ABP Group so when we say “we”, “our”, or “ABP” or “us” we mean Associated British Ports or the other relevant company in the ABP group responsible for processing your data. ABP is the “data controller” for the personal information collected and used in connection with the provision of services or communications by us to you, or when you visit our websites, ports or other ABP premises. This means we are responsible for deciding how we can use your personal information. Specifically, your data will be controlled by the particular ABP entity that is providing the services or communications to you.

The ABP Group is made of different legal entities, details of which can be found here.

WHAT IS PERSONAL INFORMATION

Personal information means information about a living person by which that person can be identified either directly or indirectly.

Sensitive personal information is a special category of personal information which is particularly sensitive and which requires higher levels of protection, such as information about a person's health or sexual orientation. For the purposes of this Notice, information about criminal convictions will be categorised as sensitive personal information.

WHAT PERSONAL INFORMATION WE COLLECT ABOUT YOU

We may collect Personal Information from you in the course of our business depending on the context of our particular relationship with you. In particular:

Websites

If you visit our websites we collect the following information about you:

• if you visit our website, technical information such as your internet protocol address used to connect your computer to the website, browser type and version, time zone setting, browser plug in types and versions, operating systems and platforms;
• if you voluntarily complete any online forms on our website or any survey we collect the information requested by that form (e.g. email address, name, address, telephone number, location), marketing preferences; and
• we use technology to track the patterns of behaviour of visitors to our Websites and statistical information about the number of visitors to our Website. This helps us to provide you with a good experience when you browse our Internet Services and also allows us to improve our Internet Services. For detailed information on the cookies we use and the purposes for which we use them, see our Cookie Policy.

Our Websites are not intended for children and we do not knowingly collect data relating to children via our Websites.

Candidates for employment at ABP

If you apply for a job at ABP or register your interest with ABP for job opportunities, we may collect the following information about you:

• the information you have provided to us in your curriculum vitae, covering letter and the information you have provided on our application or registration form (whether provided online via our careers website or otherwise) such as name, title, address, telephone number, personal email address, employment history, qualifications, educational background, employer details, references, skills and experience, professional licences, proof of your entitlement to reside or work in the UK (including copies of permits to work or visas) and credit reference checks (for certain roles);
• any information provided to us during an interview;

ABParking, ABP marinas or ABPmer

• If you are a customer of ABParking please click here for the ABParking Privacy Notice.
• If you are a customer of ABP marinas please click here for the ABP Marina Privacy Notice.
• If you are a customer of ABPmer, please click here for the ABPmer Privacy Notice.
• If you are a customer of W.E Dowds Shipping Limited, please click here for the WE Dowds Privacy Notice.

Business Customers, Potential Business Customers, Stakeholders

If you are a business customer or stakeholder of ABP, or if you or we would like to develop a business relationship, we may collect:

• your contact information such as name and prefix, job title, business and personal: address, telephone / mobile / fax numbers and email address;
• financial information and account details such as national insurance number, bank account number or other financial account number and account details;
• credit checking information such as details of your credit history, credit reference information and credit scores;
• information about you collected from publicly available resources e.g. details of your professional online presence such as your Linkedin profile; Companies House or HM Land Registry or public databases;
• your interests and marketing preferences (including subscriptions to any newsletters), including any opt outs you provide;
• professional information (such as previous positions and professional experience) for business development purposes;
• any survey or consultation responses or other information which you may voluntarily provide to ABP;

Interactions with VTS

If you contact VTS by telephone or communicate with VTS over the VHS, such communications are recorded to ensure the effective provision of marine vessel traffic services including ensuring health and safety and environmental compliance, to facilitate prompt and accurate incident review, response and investigation and to enable verification of instructions for contractual purposes.

Interactions with ABP

If you contact or correspond with ABP we may collect:

• contact details such as your name, image and contact information (including business and personal email, telephone and postal address); and
• your marketing preferences;

ABP’s premises / port estate

If you visit or work at any of ABP’s premises (e.g. offices, port estate, car parks), we may collect:

• information collected by our information technology systems (e.g. door entry and reception logs, CCTV, automatic number plate recognition, body worn cameras or other surveillance system recordings, access control system, communications systems),
• information collected by our security personnel about your visit (e.g. vehicle registration, your name, company and job title);
• training records (e.g. your name and details of the port related training you have carried out) and other information required by ABP for health and safety purposes if you have an operational role on the port/terminal; and

WHAT SENSITIVE PERSONAL INFORMATION WE COLLECT ABOUT YOU

We may collect sensitive personal information from you in the course of our business depending on the context of our particular relationship with you. In particular:

Candidates for employment at ABP

If you apply for a job at ABP or register your interest with ABP for job opportunities, we may collect the following types of more sensitive personal information about you:

• information about your health, including any medical condition, health and sickness records;
• information collected by ABP’s drugs and alcohol tester if you are subject to such test being carried out as a pre-condition to your employment;
• information about your race or nationality or ethnic origin, religious beliefs, or your sexual orientation, to ensure meaningful equal opportunity monitoring and reporting;
• information about your disability status to consider whether we need to provide appropriate adjustments during the recruitment process, for example whether adjustments need to be made during a test or interview.

THIRD PARTY PERSONAL INFORMATION

In the course of us providing goods or services to you, you may provide us with personal information relating to third parties. For example, your employees or your visitors.

We will use this personal information in accordance with this Privacy Notice. If you are providing personal information to us relating to a third party, you confirm that you have the consent of the third party to share such personal information with us and that you have made the information in this Privacy Notice available to the third party.

 

HOW WE USE YOUR PERSONAL INFORMATION

Your personal information may be used by us, our employees, service providers, and disclosed to third parties for the following purposes. For each of these purposes, we have set out the legal basis on which we use your personal information.

Purpose	Legal Basis
To communicate with you and other individuals about our services.	The legal basis will fall into one of the following four categories, depending on the communication and the purpose for which it was sent: our legitimate business interests in order for us to manage our relationship with you; necessary for the performance of a contract between you and us; consent; and/or compliance with legal obligations to which we are subject.
To carry out our obligations arising from any contracts entered into between you and us, and to provide you with our services.	Depending on the circumstances: necessary for the performance of our contractual obligations between you and us; or our legitimate business interests to comply with the terms of a contract we have in place with a customer.
To improve our products, services and our staff training.	This processing is necessary for our legitimate business interests in order for us to manage our relationship with you and to improve/develop our products, services and staff training.
To manage any service or quality related issues, complaints, feedback and queries.	Depending on the context, this processing could be necessary for: the performance of our contractual obligations between you and us; us to comply with our legal and regulatory obligations; and/or our legitimate business interests in order for us to manage our relationship with you and ensure our services are fit for purpose and meet the needs of our organisation.
To send you direct marketing communications about our services, including newsletters.	Depending on the circumstances: our legitimate business interests to contact you about the services we offer and relevant industry news; or consent – in some circumstances, we may rely on your consent to send direct marketing communications to you.
To carry out satisfaction surveys and analysis.	The processing is carried out for our legitimate business interests because it enables us to develop and improve our services offered to you.
To prevent and detect fraud, financial crime and anti-money laundering.	Depending on the circumstances: the processing is necessary for us to comply with our legal and regulatory obligations; or the processing is carried out for our legitimate business interests in order to conduct and manage our business.
The prevention and detection of crime	The processing of CCTV footage is necessary for our legitimate business interests. We have a legitimate interest in preventing and detecting crime at our premises and to prevent the misuse of our car parks. The processing may also be necessary in connection with legal proceedings (i.e. the establishment, exercise or defence of legal claims).
To ensure the security of our premises, ensure the health and safety of individuals and to ensure high standards of behaviour and performance.	The processing of CCTV footage, automatic number plate recognition images, footage captured from body worn video cameras (for example, those worn by security guards) and swipe card records is necessary for our legitimate business interests. We have a legitimate interest in ensuring high standards of behaviour and performance across our business, and the detection of crime. Where this involves the processing of sensitive personal information such as fingerprint recognition technology, we process such information in order to prevent unlawful acts or with explicit consent, depending on the circumstances,
To comply with any legal or regulatory obligations (including in connection with a court order).	The processing is necessary for compliance with a legal obligation to which we are subject.
Assessing your fitness to work at our ports or other premises.	The processing is carried out for our legitimate business interests to ensure that those individuals who are quayside at our ports, are fit to be there and do not pose a health and safety risk. Where this involves the processing of sensitive personal information such as drug and alcohol testing, we process such information in order to carry out our employment legal obligations,
To enforce or apply the contracts concerning you (including contracts between you and us).	Depending on the circumstances: the processing is carried out for our legitimate business interests in order to conduct and manage our business; or in connection with legal proceedings (i.e. the establishment, exercise or defence of legal claims).

We may be required to obtain your personal information to comply with our legal requirements, to enable us to fulfil the terms of any contract that we have with or in preparation of us entering into a contract with you. For example, if you do not provide the relevant personal information to us such as your name and postal address, we will not be able to provide the relevant product to you or another person (as may be requested by you).

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. We may process your personal information without your knowledge or consent, where this is required or permitted by law.

HOW LONG WE KEEP YOUR PERSONAL INFORMATION

We will only retain your Personal Information for as long as is necessary to fulfil the purposes we collected it for. The length of time we hold on to your personal information will vary according to what that information is and the reason for which it is being processed, including for the purposes of satisfying any legal, accounting or reporting requirements or defending any potential claim in accordance with ABP’s Record Retention Policy.

When it is no longer necessary to retain your Personal Information, we will delete or anonymise it.

WHO WE SHARE YOUR PERSONAL INFORMATION WITH

We share your Personal Information with:

• our legal advisors, auditors, accountants, insurers and insurance brokers and other professional advisors,
• our third party service providers and contractors that we may use in connection with our business;
• our IT service providers;
• police and other law enforcement agencies in connection with the prevention and detection of crime;
• other companies, entities and shareholders within the ABP Group (which we are a member of).
• third parties involved in any matter relating to you such as courts, law enforcement agencies and regulatory bodies;
• other external agencies and organisations (including the National Crime Agency) for the purpose of preventing and detecting fraud (including fraudulent transactions), money laundering and criminal activity;
• other entities in our group as part of our regular reporting activities on ABP performance, in the context of a business reorganisation or group restructuring exercise, for system maintenance support and hosting of data;
• third parties if we are under a duty to disclose or share your personal information in order to comply with any legal obligation or instructions of a regulatory body (including in connection with a court order), or in order to enforce or apply the terms of any agreements we have with or otherwise concerning you (including agreements between you and us) or to protect our rights, property or safety of our clients, employees or other third parties; and
• we will share your personal information with third parties where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so.

HOW WE PROTECT YOUR PERSONAL INFORMATION

We have put in place appropriate security measures to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

In addition, we limit access to your Personal Information to those employees, agents, contractors and other third parties who have a need to know. They will only process your Personal Information on our instructions and they are subject to a duty of confidentiality.

We have also put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

TRANSFERRING YOUR PERSONAL INFORMATION OUT OF THE EEA

Sometimes it is necessary for us to process or share your Personal Information outside of the European Economic Area (EEA), e.g:

• With our service providers located outside the EEA (i.e. our IT suppliers);
• If you are based outside the EEA;
• If any ABP personnel access the information remotely while they are travelling outside the EEA.

When we transfer Personal Information outside of the EEA, we will implement appropriate and suitable safeguards to ensure that such personal information will be protected as required by applicable data protection law (e.g. contractual protections).

For further information as to the safeguards we implement please contact our Data Protection Officer as detailed in the section "How to contact us".

 

YOUR RIGHTS WITH RESPECT TO PERSONAL INFORMATION

You have certain rights with respect to your personal information. The rights may only apply in certain circumstances and are subject to certain exemptions. Please see the table below for a summary of your rights.

	Summary of your rights
Right of access to your personal information	You have the right to receive a copy of your personal information that we hold about you and information about how we use it, subject to certain exemptions.
Right to rectify your personal information	You have the right to ask us to correct your personal information that we hold where it is incorrect or incomplete.
Right to erasure of your personal information	You have the right to ask that your personal information be deleted in certain circumstances. For example (i) where your personal information is no longer necessary in relation to the purposes for which they were collected or otherwise used; (ii) if you withdraw your consent and there is no other legal ground for which we rely on for the continued use of your personal information; (iii) if you object to the use of your personal information (as set out below); (iv) if we have used your personal information unlawfully; or (v) if your personal information needs to be erased to comply with a legal obligation.
Right to restrict the use of your personal information	You have the right to suspend our use of your personal information in certain circumstances. For example (i) where you think your personal information is inaccurate and only for such period to enable us to verify the accuracy of your personal information; (ii) the use of your personal information is unlawful and you oppose the erasure of your personal information and request that it is suspended instead; (iii) we no longer need your personal information, but your personal information is required by you for the establishment, exercise or defence of legal claims; or (iv) you have objected to the use of your personal information and we are verifying whether our grounds for the use of your personal information override your objection.
Right to data portability	You have the right to obtain your personal information in a structured, commonly used and machine-readable format and for it to be transferred to another organisation, where it is technically feasible. The right only applies where the use of your personal information is based on your consent or for the performance of a contract, and when the use of your personal information is carried out by automated (i.e. electronic) means.
Right to object to the use of your personal information	You have the right to object to the use of your personal information in certain circumstances. For example (i) where you have grounds relating to your particular situation and we use your personal information for our legitimate interests (or those of a third party); and (ii) if you object to the use of your personal information for direct marketing purposes.
Right to withdraw consent	You have the right to withdraw your consent at any time where we rely on consent to use your personal information.
Right to complain to the relevant data protection authority	You have the right to complain to the relevant data protection authority, which in the case of ABP, the Information Commissioner's Office, where you think we have not used your personal information in accordance with data protection law.

HOW TO CONTACT US

If you have any comments or questions about how we handle your Personal Information or this Privacy Notice or to exercise any of your rights, please contact the Group Data Protection & Security Officer at [email protected], 077204 16654 or by post FAO Group Data Protection & Security Officer, Associated British Ports, 25 Bedford Street, London WC2E 9ES.

UPDATES TO PRIVACY NOTICE

We will amend this Privacy Notice from time to time to ensure it remains up to date. Any changes we make to this Privacy Notice in the future will be posted on this page and, where appropriate, we will give you reasonable notice of any changes. Please visit our Websites to keep up to date with any changes. The current version will always be posted on our Websites. This Privacy Notice was first published on 25 May 2018 and was last updated on 10 July 2018.