- Login
Contents
4 Purpose of this Privacy Policy. 5
5 What do we do with your Personal Data. 7
5.1 If you are a Silvey Fleet Customer or Potential Customer 7
5.1.1 Why we use your personal data. 7
5.1.2 How we obtain your personal information and the types of personal information we may obtain 7
5.1.3 Our legal basis for using your personal data. 7
5.1.4 Who we share your data with. 7e
5.1.6 How long we keep hold of your data. 8
5.1.7 Statutory or Contractual Requirement 8
5.1.8 Automated Decision Making & Profiling. 8
5.2 If you visit our Website. 9
5.2.1 Why we use your personal data. 9
5.2.2 Our legal basis for using your personal data. 9
5.2.3 Who we share your data with. 9
5.2.5 How long we keep hold of your data. 10
5.2.6 Statutory or Contractual Requirement 10
5.2.7 Automated Decision Making & Profiling. 10
5.3.1 Why we use your personal data. 12
5.3.2 Our legal basis for using your personal data. 12
5.3.3 Who we share your data with. 12
5.3.5 How long we keep hold of your data. 13
5.3.6 Statutory or Contractual Requirement 13
5.3.7 Automated Decision Making & Profiling. 13
5.4.1 Why we use your personal data. 14
5.4.2 Our legal basis for using your personal data. 14
5.4.3 Who we share your data with. 14
5.4.5 How long we keep hold of your data. 14
5.4.6 Statutory or Contractual Requirement 15
5.4.7 Automated Decision Making & Profiling. 15
5.5 If you are a Silvey Fleet Supplier 15
5.5.1 Why we use your personal data. 15
5.5.2 Our legal basis for using your personal data. 15
5.5.3 Who we share your data with. 15
5.5.5 How long we keep hold of your data. 16
5.5.6 Statutory or Contractual Requirement 16
5.5.7 Automated Decision Making & Profiling. 16
5.6 If you are a Silvey Fleet Recruitment Applicant 17
5.6.1 Why we use your personal data. 17
5.6.2 Our legal basis for using your personal data. 17
5.6.3 Who we share your data with. 17
5.6.5 How long we keep hold of your data. 17
5.6.6 Statutory or Contractual Requirement 17
5.6.7 Automated Decision Making & Profiling. 17
5.7 If you a Visitor to Silvey Fleet 18
5.7.1 Why we use your personal data. 18
5.7.2 Our legal basis for using your personal data. 18
5.7.3 Who we share your data with. 18
5.7.5 How long we keep hold of your data. 18
5.7.6 Statutory or Contractual Requirement 18
5.7.7 Automated Decision Making & Profiling. 18
6 Silvey Fleet’s Contact Details 19
7.1 Access to your personal data. 20
7.2 Correcting your personal data. 20
7.3 Restriction of Processing of your personal data. 20
7.5 Erasure (also known as “the right to be forgotten”) 20
8 Changes to our Privacy Policy. 22
9 Employee/Contractor Privacy Policy. 23
9.2 Purpose of this Privacy Policy. 23
9.3 What we do with the Personal Data or our Employees & Contractors 23
9.3.1 Why we use your personal data & our legal basis for doing so. 23
9.3.2 Who we share your data with. 24
9.3.4 How long we keep hold of your data. 25
9.3.5 Statutory or Contractual Requirement 25
9.3.6 Automated Decision Making & Profiling. 25
9.4 Silvey Fleet’s Contact Details 25
9.5.1 Access to your personal data. 26
9.5.2 Correcting your personal data. 26
9.5.3 Restriction of Processing of your personal data. 26
9.5.4 Object to Processing. 26
9.5.5 Erasure (also known as “the right to be forgotten”) 26
9.5.7 Withdrawal of consent 27
9.6 Changes to our Privacy Policy. 27
Thomas Silvey Ltd trading as Silvey Fleet provides fuel cards and related Fleet services to a wide range of commercial customers.
Silvey Fleet supports more than 2,000 businesses nationwide. This gives fleet managers a range of fuel card options that give them access to fixed weekly fuel costs at up to 3,700 filling stations and helping them to manage their company and fleet fuel costs more effectively.
Below is some quick guidance on terminology to help you clearly understand this Policy
Other terms are defined in the Glossary at the end of the document.
Silvey Fleet is committed to protecting your personal data and privacy. We are certified to internationally recognised ISO standards, ISO 27001 Information Security and ISO 9001 Quality with a UKAS accredited body.
We have security measures in place designed to prevent the loss of data, preserve data integrity, and to control access to the data and know that ensuring the accuracy and security of your personal data is essential to retaining your confidence and trust.
The purpose of this privacy policy is to describe, in cases where Silvey Fleet is the Data Controller, why and how we collect and use your personal data and provides information about your rights. It applies to personal data provided to us, both by individuals themselves or by others. We may use personal data provided to us for any of the purposes described in this privacy policy or as otherwise stated at the point of collection.
When collecting and using personal data, our policy is to be fair, lawful and transparent about why and how we process personal data.
To find out more about our specific processing activities, please go to the relevant sections of this policy.
Topics:
What we do with your Personal Data
Please go to the sections of this policy that are relevant to you, to find out more about what we do with your personal data: -
We use your data for the following purposes: -
Your personal information is directly given by you or collected from the company website and managed via Microsoft Dynamics. Data has also been provided to us by our marketing partners Experian and Infynd.
We process the following types of personal information in relation to you - e.g. (this is not an exhaustive list): -
The processing of your personal data is based upon the lawful basis of Legitimate Interests as we feel that as an existing customer you may find value in knowing about similar products and services we provide.
We may share your information with: -
Technology Providers who we engage to support our operations and/or host our data including
We do not intend to transfer your personal data to any countries or International Organisations outside of the UK or European Union.
We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation). In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for your personal data and other documentary evidence is seven years.
The provision of your personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract, nor are you obliged to provide the personal data.
We do not make any decisions in relation to your personal data, solely by automated means without any human involvement (e.g we do not conduct automated decision making).
Neither do we conduct any automated processing of personal data to evaluate certain things about you (e.g. we do not conduct profiling).
We use your data for the following purposes: -
The processing of your personal data is based upon the lawful basis of: -
We may share your information with: -
Technology Providers who we engage to support our operations and/or host our data including
We do not intend to transfer your personal data to any countries or International Organisations outside of the UK or European Union.
We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation). In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for your personal data and other documentary evidence is seven years.
The provision of your personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract, nor are you obliged to provide the personal data.
We do not make any decisions in relation to your personal data, solely by automated means without any human involvement (e.g we do not conduct automated decision making).
Neither do we conduct any automated processing of personal data to evaluate certain things about you (e.g. we do not conduct profiling).
To improve your experience on our site, we may use 'cookies'. Cookies are an industry standard and most major web sites use them. A cookie is a small text file that our site may place on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. You can set your browser not to accept cookies (click here for guidance). However, in a few cases some of our website features may not function as a result.
Our website uses Microsoft Dynamics, a service which monitors website traffic data.
Note on the Google Analytics analysis tool
We use Google Analytics, a web analysis service offered by Google Inc. (“Google”) to create pseudonymized usage profiles to facilitate the needs-based design of our websites. Google Analytics uses cookies which are stored on your end device and can be read by us. This allows us to recognize and count returning visitors. Data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR respectively Sect. 15 Para. 3 TMG (German Telemedia Act) and in the interests of identifying how often our websites are visited by different users.
The information generated by the cookie concerning your use of this website is generally transmitted to a Google server in the USA, where it is stored. Activation of the IP anonymization function on this website means that Google will, however, truncate your IP address within European Union member states or other states party to the Agreement on the European Economic Area before transferring the data. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA (Google’s participation in the so-called “Privacy Shield Framework” ensures an adequate level of data protection as specified by Art. 45 Para. 1 GDPR) and truncated there. In addition to this, we have concluded a data processing contract with Google (USA) in accordance with Art. 28 GDPR. Working on behalf of this website’s operator, Google will use this information strictly for the purpose of analysing your use of the website; compiling reports on website activities and providing other services associated with the use of the website and the Internet for the website operator. Google may also transmit this information to third parties insofar as this is required by law or insofar as third parties process this data on behalf of Google. Google will not bundle the IP address transmitted from your browser in connection with Google Analytics with other data. For more information about how Google uses data which is generated when using its partners’ websites and apps, visit https://policies.google.com/technologies/partner-sitestners.
You can object to processing at any time. To do so, please make use of one of the following options:
You can block installation of cookies by selecting the corresponding setting in your browser software; please, however, note that you will not be able to use all the functions of this website to their full extent if you choose to do so.
Over and above this, you can block the gathering of the data generated by the cookie and relating to your use of the website (incl. your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout.
Browser add-on to deactivate Google Analytics
The browser add-on to deactivate Google Analytics provides website visitors with more control over what data Google Analytics can gather about the websites visited. The add-on instructs Google Analytics’ JavaScript code not to transmit any information about the website visit to Google Analytics. Should you wish to use the add-on, please download it and install it on your current web browser. The browser add-on to deactivate Google Analytics is available for the Microsoft Internet Explorer, Google Chrome, Mozilla Firefox, Apple Safari and Opera. This is available at the following link:
https://tools.google.com/dlpage/gaoptout
Silvey Fleet also uses interfaces with social media sites such as Facebook, LinkedIn, and others. If you choose to "like" or "share" information from this website through these services, you should review the privacy policy of that service. If you are a member of a social media site, the interfaces may allow the social media site to connect your visits to this site with other Personal Information.
When you register with us directly to attend an exhibition, your personal data is used to:
When you provide your business contact details at an exhibition, your personal data is used to: -
The processing of your personal information is based upon the lawful basis of: -
We may share your information with: -
Technology Providers who we engage to support our operations and/or host our data including
We do not intend to transfer your personal data to any countries or International Organisations outside of the UK or European Union.
We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation). In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for your personal data and other documentary evidence seven years.
The provision of your personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract, nor are you obliged to provide the personal data.
We do not make any decisions in relation to your personal data, solely by automated means without any human involvement (e.g. we do not conduct automated decision making).
Neither do we conduct any automated processing of personal data to evaluate certain things about you (e.g. we do not conduct profiling).
We use your data for the following purposes: -
The processing of your personal information is based upon the lawful basis of: -
We may share your information with: -
Technology Providers who we engage to support our operations and/or host our data including
We do not intend to transfer your personal data to any countries or International Organisations outside of the European Union.
We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation). In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for your personal data and other documentary evidence is seven years.
The provision of your personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract, nor are you obliged to provide the personal data.
We do not make any decisions in relation to your personal data, solely by automated means without any human involvement (e.g we do not conduct automated decision making).
Neither do we conduct any automated processing of personal data to evaluate certain things about you (e.g. we do not conduct profiling).
We use your data for the following purposes: -
The processing of your personal information is based upon the lawful basis of: -
We may share your information with: -
Technology Providers who we engage to support our operations and/or host our data including
We do not intend to transfer your personal data to any countries or International Organisations outside of the UK or European Union.
We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation). In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for your personal data and other documentary evidence is seven years after end of commercial relationship.
The provision of your personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract, nor are you obliged to provide the personal data.
We do not make any decisions in relation to your personal data, solely by automated means without any human involvement (e.g we do not conduct automated decision making).
Neither do we conduct any automated processing of personal data to evaluate certain things about you (e.g. we do not conduct profiling).
We use your data for the following purposes: -
The processing of your personal information is based upon the lawful basis of: -
We may share your information with: -
Technology Providers who we engage to support our operations and/or host our data Chorus IT and Solution IP.
We do not intend to transfer your personal data to any countries or International Organisations outside of the UK or European Union.
We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation). In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for your personal data and other documentary evidence is detailed in Section 9.4.4 (if successful) or 6 months if unsuccessful.
The provision of your personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract, nor are you obliged to provide the personal data.
We do not make any decisions in relation to your personal data, solely by automated means without any human involvement (e.g we do not conduct automated decision making).
Neither do we conduct any automated processing of personal data to evaluate certain things about you (e.g. we do not conduct profiling).
We use your data for the following purposes: -
The processing of your personal data is based upon the lawful basis of Legitimate Interests – as it is important to ensure the safety of yourself and others and also to ensure the security of our information.
We may share your information with Technology Providers who we engage to support our operations and/or host our data ADT CCTV supplier.
We do not intend to transfer your personal data to any countries or International Organisations outside of the UK or European Union.
We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation). In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for your personal data and other documentary evidence is 2 years after your last visit with us.
The provision of your personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract, nor are you obliged to provide the personal data.
We do not make any decisions in relation to your personal data, solely by automated means without any human involvement (e.g we do not conduct automated decision making).
Neither do we conduct any automated processing of personal data to evaluate certain things about you (e.g. we do not conduct profiling).
The Data Controller is Thomas Silvey Limited (registered in England under registration no. 00360922 and with its registration address at Building A, St James Court, Bradley Stoke, Bristol, BS32 4QJ
If you have any questions about this Privacy Policy or how and why we process personal data, please contact us via any of the routes below: -
Post:
Silvey Fleet
Building A, St James Court
Great Park Road, Bradley Stoke,
Bristol BS32 4QJ
Email: data-protection@Silvey.co.uk
Phone: 01454 333 022
Under certain circumstances, you have the rights under data protection laws in relation to your personal data. These rights are summarised below but if you would like more information on these rights, please go the ICO’s website. Additionally, if you wish to exercise any of these rights listed below, please contact us using any of the contact details provided here.
You have a right of access to personal data held by us as a Data Controller. We will aim to respond to any requests for information promptly, and in any event within the legally required time limits (1 month under GDPR).
You have a right to request amendment(s) to your personal data. Wherever practically possible, once we are informed that any personal data processed by us is no longer accurate, we will make the necessary amendments based on the updated information.
In certain circumstances, you have the right to request the restriction or suppression of your personal data. This effectively allows you to limit the way that we use your personal data.
In certain circumstances, you have the right to object to the processing of your personal data. This effectively allows you to ask us to stop processing your personal data.
Where we have told you that any use of information is based on ‘legitimate interest’, you can raise an objection to that use. When you make an objection, we’ll have up to one month to respond to you. We will stop using the information in this way unless we disagree that we should because of a compelling legal justification for continuing to use it. We’ll always tell you what the justification is.
You have a right at any time to stop us from contacting you for marketing purposes or giving your information to other parts of the Mabanaft Group and/or our Marketing Partners. If you no longer wish to be contacted for marketing purposes, please contact us at the address above.
In certain circumstances, you have the right to request the erasure of your personal data.
In certain circumstances, you may have the right to obtain and reuse your own personal data, that you provided to us, for your own purposes across different services. This data will be provided in a structured, commonly used and machine-readable format and we can transmit this data directly to other parties at your request.
Where we process your personal data based on consent, you have a right to withdraw consent at any time.
If you would like to request to withdraw your consent, please contact us using the contact details provided here. Alternatively, to stop receiving our Marketing emails, please click on the unsubscribe link in the any of the emails we have sent to you.
In the event you wish to complain about our use of your personal data, please send an email with the details of your complaint to data-protection@Silvey.co.uk. We will look into and respond to any complaints we receive.
You also have a right to lodge a complaint with the Information Commissioner's Office (ICO) (the UK’s data protection regulator). For further information on your rights and how to complain to the ICO, please refer to the ICO website: www.ico.org.uk.
We keep our privacy policy under regular review and we will place any updates on this web page.
If we believe that the changes are material, we’ll let you know by posting the changes on this website.
This privacy policy was last updated on 16/08/2023.
Silvey Fleet is committed to protecting your personal data and privacy. We are certified to an internationally recognised security standard (ISO 27001), and a quality standard (ISO 9001) with a UKAS accredited body.
We have security measures in place designed to prevent the loss of data, preserve data integrity, and to control access to the data and know that ensuring the accuracy and security of your personal data is essential to retaining your confidence and trust. We have security measures in place designed to prevent the loss of data, preserve data integrity, and to control access to the data and know that ensuring the accuracy and security of your personal data is essential to retaining your confidence.
The purpose of this privacy policy is to describe why and how we collect and use your personal data and provides information about your rights. We may use personal data provided to us for any of the purposes described in this privacy policy or as otherwise stated at the point of collection.
Personal data is any information relating to an identified or identifiable living person.
When collecting and using personal data, our policy is to be fair, lawful and transparent about why and how we process personal data.
To find out more about what we do with your data and your rights, please go to the relevant sections of this policy.
Topics:
We use your data for the following purposes and legal bases: -
Legal Basis | Additional Condition to allow Processing of Special Category and or Criminal Data | Activity |
Legitimate Interests | N/A | · Contact details
· CVs/Application Letters Employment References · Operational & Administrative Purposes -e.g:- o Day to day operational communications (email) o Employee Development/ Appraisals o Business Continuity (staff contact details) o Travel, hire car, hotel, meeting bookings etc. o Recruitment reference checks |
Processing is necessary for a contract | N/A | Employment Contract
Bank Details Timesheets
|
Processing is necessary for Legal Obligation | Processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law | ID - Right to Work
Pension Provision Working Time Directive |
Consent | Explicit Consent | Company Website Photographs |
We may share your information with: -
Benefit Providers
MLR – Payroll Services
External Legal Advisors – Motor Industries Legal Services
Technology Providers who we engage to support our operations and/or host our data:
We do not intend to transfer your personal data to any countries or International Organisations outside of the UK or European Union.
We retain the personal data processed by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation). In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for your personal data and other documentary evidence is seven years after the end of employment.
The provision of your personal data is a contractual requirement in accordance with your employment contract.
We do not make any decisions in relation to your personal data, solely by automated means without any human involvement (e.g we do not conduct automated decision making).
Neither do we conduct any automated processing of personal data to evaluate certain things about you (e.g. we do not conduct profiling).
The Data Controller is Thomas Silvey Limited (registered in England under registration no. 00360922 and with its registration address at Building A, St James Court, Great Park Road, Bradley Stoke, Bristol BS32 4QJ).
If you have any questions about this Privacy Policy or how and why we process personal data, please contact us via any of the routes below: -
Post:
Silvey Fleet
Building A, St James Court
Great Park Road, Bradley Stoke,
Bristol BS32 4QJ
Email: data-protection@Silvey.co.uk
Phone: 01454 333 022
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These rights are summarised below but if you would like more information on these rights, please go the ICO’s website. Additionally, if you wish to exercise any of these rights listed below, please contact us using any of the contact details provided here.
You have a right of access to personal data held by us as a Data Controller. We will aim to respond to any requests for information promptly, and in any event within the legally required time limits (1 month under GDPR).
You have a right to request amendment(s) to your personal data. Wherever practically possible, once we are informed that any personal data processed by us is no longer accurate, we will make the necessary amendments based on the updated information.
In certain circumstances, you have the right to request the restriction or suppression of your personal data. This effectively allows you to limit the way that we use your persona data.
In certain circumstances, you have the right to object to the processing of your personal data. This effectively allows you to ask us to stop processing your personal data.
Where we have told you that any use of information is based on ‘legitimate interest’, you can raise an objection to that use. When you make an objection, we’ll have up to one month to respond to you. We will stop using the information in this way unless we disagree that we should because of a compelling legal justification for continuing to use it. We’ll always tell you what the justification is.
In certain circumstances, you have the right to request the erasure of your personal data.
In certain circumstances, you may have the right to obtain and reuse your own personal data, that you provided to us, for your own purposes across different services. This data will be provided in a structured, commonly used and machine-readable format and we can transmit this data directly to other parties at your request.
Where we process your personal data based on consent, you have a right to withdraw consent at any time.
If you would like to request to withdraw your consent, please contact us using the contact details provided here. Alternatively, to stop receiving our Marketing emails, please click on the unsubscribe link in the any of the emails we have sent to you.
In the event you wish to complain about our use of your personal data, please send an email with the details of your complaint to data-protection@Silvey.co.uk. We will look into and respond to any complaints we receive.
You also have a right to lodge a complaint with the Information Commissioner's Office (ICO) (the UK’s data protection regulator). For further information on your rights and how to complain to the ICO, please refer to the ICO website: www.ico.org.uk.
We keep our privacy policy under regular review and any changes are updated to this Policy and in the Employee Handbook.
If we believe that the changes made are material, we’ll let you know by sending you an email or message about the changes.
This privacy policy was last updated on 16/08/2023
Consent (of the data subject): any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Controller (or Joint Controller): a person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
Data Subject: An identifiable living person to whom the data relates to.
GDPR: UK or EU General Data Protection Regulation
Personal data: Any information relating to an identified or identifiable living individual (‘data subject).
Processing: means any operation or set of operations which is performed on personal data or on sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Processor: a person which processes personal data on behalf of the controller.
Special categories of data (often referred to as ‘Sensitive personal data’): Health data, genetic and biometric data (new under the GDPR), trade-union membership, data concerning health or sexual life, political opinions, religious and philosophical beliefs, criminal offences and racial or ethnic origin related data.