Green Privacy Notice

Updated: 12th February 2020

We are DPDgroup UK Ltd ('DPDgroup'). We are committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect will be processed by us. Please read this privacy policy carefully to understand our views and practices and your rights regarding your personal data. By using the YourDPD app or visiting www.dpd.co.uk (our site) you are accepting the practices described in this policy.

For the purpose of data protection legislation, the data controller is DPDgroup UK Ltd, Roebuck Lane, Smethwick, B66 1BY.

If you have any queries, complaints or requests please contact our DPO at the address listed above.

What information do we collect from you?We will collect and process the following data about you:

Information you give us. This is information about you that you give us by providing information through our website www.dpd.co.uk and via green.dpd.co.uk.

Dependant on the options chosen - i.e. to take part in one of our Green competitions, send us an email or apply for the DPD Social fund, the information you give us may include your name, address, contact details and any free text concerning your Social Fund application, Green competition idea, query, compliment or complaint. If you are successful with your social fund application, DPD may request photographs of your project which may include images of people involved.

Information we collect from your use of our site. With regard to each of your visits to our site we will automatically collect the following information:
technical information, such as the Internet protocol (IP) address used to connect your device to the Internet, whereabouts you connected to our service, your internet service provider (ISP), and what type of device you are using to access our service;

Information about your use of our services such as details of your visit to our site, pages you view and the resources that you access.

Information we collect when you call us. If you call us we will automatically collect the following information:
the phone number used to call us
a recording of all inbound and outbound calls.

How do we use this information?

We will use your personal information in the following ways:

General emails will be processed by DPD authorised staff who will respond to you in order to answer any questions, queries, and complaints raised.

Should you wish to take part in any of the Green Petitions, the link provided on the website will direct you to change.org. DPD UK will not process any of your personal data and Change.Org will become the Data Controller of any information shared by you.

When entering any Green competitions, your personal data and ideas will be processed by authorised DPD staff in order to assess your idea, decide on the successful entrant and respond to you if necessary, regarding the outcome of your entry. Successful entrants surname and county will be publicised on green.dpd.co.uk.

When applying for the DPD Social Fund, your application will be assessed by authorised DPD staff and personal data will be processed for such purposes. Should you be successful you may be asked for images to publicise the project.

We will use your personal information collected from our website for the following purposes:

to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;

to improve our site to ensure that content is presented in the most effective manner for you and for your device;

as part of our efforts to keep our site safe and secure;

to measure or understand the effectiveness of advertising on the green.dpd.co.uk page.

How long do we keep hold of your information?

General emails will be kept as long as is necessary and until the query is resolved.�

Petitions will direct users to change.org who become the Data Controller and determine the purpose and means of how your personal data is processed which will include how long your personal data is retained for. DPD will not process any of your personal data once you have been redirected to change.org.

Green competition entrants - If you are unsuccessful, your idea and personal data will be deleted within 30 days. If your entry is successful, your idea and personal details will be kept for 2 years to ensure that duplicate prizes are not sent to the same individual and also for the purposes of DPD to be able to review the idea with the business.�

Social Fund - your personal information and application will be reviewed every 30 days. If unsuccessful they will be deleted and if your application is successful, personal data will be kept for 2 years . Please note that you can only have 1 donation in a 2 year period.

Who might we share your information with?

For the purposes set out in the 'How do we use this information?' section above, we may share your personal information with selected third parties, some of whom we appoint to provide services, including:

analytics and search engine providers that assist us in the improvement and optimisation of our site;
customer survey providers in order to receive feedback and improve our services.
cyber security services as part of our efforts to keep our site safe and secure.
Any member of our group, including parent companies and any subsidiaries of us and such parent companies, for the purposes for which the data was collected.

Additionally, we will disclose your personal information to the relevant third party:

If we are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and prevention of money laundering and credit risk reduction.

How is your data stored and kept secure?

At DPDgroup, we take your safety and security very seriously and we are committed to protecting your personal information. All information kept by us is stored on our secure servers.

By agreeing to this policy and using our website or other interactive services you acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.

We will not transfer your data outside the European Economic Area ("EEA"). We will only do so if adequate protection measures are in place in compliance with data protection legislation. We use the following protection measures:

transferring to European Commission approved countries;
using European Commission approved model contractual clauses;
requiring companies we transfer data to in the US to be signed up to the Privacy Shield certification.

Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

What are your rights?

Where the processing of your personal data is based on consent, you can withdraw that consent at any time.

You have the following rights. You can exercise these rights at any time by contacting our Data Protection Officer -DPO by email at dpo@dpdgroup.co.uk or in writing to Data Protection Officer, DPDgroup UK Ltd, Roebuck Lane, Smethwick, B66 1BY.

You have the right:

to ask us not to process your personal data for marketing purposes. We will inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes;
to ask us not to process your personal data where it is processed on the basis of legitimate interests provided that there are no compelling reasons for that processing;
to ask us not to process your personal data for scientific or historical research purposes, where relevant, unless the processing is necessary in the public interest.
to request from us access to personal information held about you;
to ask for the information we hold about you to be rectified if it is inaccurate or incomplete;
to ask for data to be erased provided that the personal data is no longer necessary for the purposes for which it was collected, you withdraw consent (if the legal basis for processing is consent), you exercise your right to object, set out below, and there are no overriding legitimate ground for processing, the data is unlawfully processed, the data needs to be erased to comply with a legal obligation or the data is children's data and was collected in relation to an offer of information society services;
to ask for the processing of that information to be restricted if the accuracy of that data is contested, the processing is unlawful, the personal data is no longer necessary for the purposes for which it was collected or you exercise your right to object (pending verification of whether there are legitimate grounds for processing);
to ask for data portability if the processing is carried out by automated means and the legal basis for processing is consent or contract.

Should you have any issues, concerns or problems in relation to your data, or wish to notify us of data which is inaccurate, please let us know by contacting us using the contact details above.

In the event that you are not satisfied with our processing of your personal data, you have the right to lodge a complaint with the relevant supervisory authority, which is the Information Commissioner's Office (ICO) in the UK, at any time. The ICO's contact details are available here: https://ico.org.uk/concerns/.

Cookies

We use cookies to distinguish you from other users of our site. This helps us to provide you with a good experience when you use our site and also allows us to improve our site.

We use the following cookies for the following purposes:

�

Strictly necessary cookies. These are cookies that are required for the operation of our site. They include, for example, cookies that enable you to log into secure areas of our site.
Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our site when they are using it. This helps us to improve the way our site works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies. These are used to recognise you when you return to our site. This enables us to personalise our content for you and remember your preferences.
Targeting cookies. These cookies record your visit to our site, the pages you have visited and the links you have followed to allow us to improve the page layout and navigation preferences.

�

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.

In order to optimise our service, we apply Google Analytics and our own statistical analyses.

�

Google Analytics is a web analysis service provided by Google, which is used for purposes of market research and ensuring that the service meets user requirements. Google Analytics uses "cookies", which are placed on your computer to make it possible to analyse how you make use of the service. The information generated by the cookies about your use of the service (including your pseudonymised IP address) is as a rule transmitted to and stored by Google on servers in the United States . Google uses this information in order to evaluate your use of the service and to create reports on activities for the operator of the service. Google may also transmit this information to third parties if this is prescribed by law, or if third parties process the data on behalf of Google. On no account will Google connect your IP address with other Google data. At https://tools.google.com/dlpage/gaoptout?hl=en-GB you can, with effect for the future, opt out of the recording and saving of your data at any time. In addition we use Google Analytics remarketing and reports on demographic features and interests in order to display to website visitors relevant advertisements on the partner websites of the Google display and search network. The saving of cookies makes it possible to analyse user behaviour and activate interest-based advertising.

�

DPD uses third-party software to improve service, monitor website performance and ensure a reliable service.

�

Fabric.IO / Crashlytics (www.crashlytics.com) - Allows our developers and technical teams to measure and monitor the performance of applications and infrastructure
New Relic (https://newrelic.com/about)- Allows our developers and technical teams to measure and monitor the performance of applications and infrastructure
GCP Stackdriver (https://https://cloud.google.com/stackdriver) - Allows developers and technical team to measure and monitor the performance of applications and infrastructure.

Changes to our privacy policy

This policy may be updated from time to time. Please check back frequently to see any updates or changes to our Privacy Policy. This Privacy Policy was last updated on 10th February 2019.

�

Contact us

If you have any questions or comments about this Privacy Policy or if you would like us to update information we have about you or your preferences please contact us by email at dpo@dpdgroup.co.uk.

You may also write to us at;

Data Protection Officer - DPDgroup UK Ltd, Roebuck Lane, Smethwick, B66 1BY