The London Waste and Recycling Board takes the privacy of all those it interacts with seriously. This document sets out how we aim to ensure that personal data is only processed appropriately and in line with the EU General Data Protection Regulations (GDPR).
If you have any queries about this policy please contact us at firstname.lastname@example.org, or by calling 020 7960 3680.
The policy covers the following areas:
- Who we are
- Data Protection Officer
- Information collected
- Information collected via our websites
- How is your information used?
- Lawful bases for data processing
- Third parties
- Transferring your data outside Europe
- Keeping personal data secure
- Automated decision making and profiling
- Individual rights
- Information Commissioner
1 Who we are
The London Waste and Recycling Board (LWARB) is a statutory body established by the GLA Act 2007. LWARB works with London’s waste authorities, businesses and other stakeholders to meet its statutory objectives: to promote and encourage the production of less waste; increase the proportion that is reused or recycled; and drive methods of collection, treatment and disposal of waste that are more beneficial to the environment.
LWARB also operates under the names of Advance London, Circular London and Resource London.
LWARB offices are based at 169 Union Street, London SE1 0LL.
2 Data Protection Officer
LWARB’s appointed data protection officer is Wayne Hubbard, Chief Executive Officer, who may be contacted via email@example.com.
3 Information collected
LWARB obtains personal information on members of the public only when they contact us, for example requesting information, applying for a job, responding to a tender opportunity, or signing up for a newsletter.
LWARB also collects and processes information (names, contact information and job titles/areas of interest) from public sources on stakeholder organisations working in similar fields, potential and actual suppliers and participants in LWARB programmes. For example, data on waste and recycling officers in London waste authorities, suppliers of goods or services, or professional bodies in related fields.
4 Information collected via our websites
Only the following information is collected from LWARB websites:
- Information submitted by visitors (eg when filling in forms to receive a newsletter)
5 How is your information used?
Personal information from members of the public is only used for the purpose for which it was provided to LWARB (e.g. subscription to a newsletter, job applications, general inquiries about LWARB’s programmes).
Other personal information relating to individuals in stakeholder organisations collected by LWARB from public sources is used in the furtherance of LWARB’s objectives, for example promotion of LWARB’s activities, engaging with waste authorities and businesses, dissemination of information.
6 Lawful bases for data processing
The GDPR require that the lawful bases for all data processing is stated. The lawful bases for LWARB’s data processing are as follows:
|Members of the public||Consent||The data subject has given consent for LWARB to process their personal data.|
|Suppliers, contractors, customers, members of staff, potential and actual invested companies.||Contract||Processing of the data is necessary for the fulfillment of, or entering into, a contract.|
|Employee and remunerated Board and Committee members||Legal Obligation||LWARB is required by law to maintain such information.|
|Stakeholder organisations working in similar fields, potential and actual partners and participants in LWARB programmes||Public Task.||Processing necessary to perform a task in the public interest or for official functions which have a clear basis in law.|
7 Third parties
LWARB does not sell any personal data, and does not share any personal data for marketing purposes. Personal data from stakeholder organisations may be shared with other such organisations in order to carry out LWARB’s public task (this does not apply to personal data on members of the public processed by LWARB on the basis of consent given).
LWARB may share personal information with third parties for the purposes of processing on LWARB’s behalf, Including cloud based finance, payroll HR, mailing, event coordination and contact management software.
Personal information on LWARB employees will also be shared with HMRC and LWARB’s pension and childcare voucher providers.
Personal information may be shared with LWARB’s legal advisors if necessary (e.g. resolution of employment issues and due diligence and contracting for investments).
8 Transferring information outside of Europe
Other than use of cloud based IT services for processing of information listed above, LWARB does not share any personal information with organisations outside of the European Economic Area.
LWARB does not process any personal information on children.
10 Data retention
LWARB will only hold information on members of the public for as long as is necessary or so long as consent is granted for our processing. Members of the public are entitled to withdraw their consent to LWARB’s processing of their personal data at any time.
Oher personal data (e.g. contract data, employee information) is retained following LWARB’s Data Retention Schedule which reflects legal requirements on data retention.
Personal data on individuals in stakeholder organisations (processed under the lawful basis of Public Task) will be retained only so long as those individuals remain in the given organisation and so long as that organisation is of relevance to LWARB’s objectives.
11 Keeping personal information secure
All personal information held by LWARB is stored either on its secure, password protected, file servers (currently maintained by the London Fire Brigade), on password protected secure cloud based services (with two step authentication where possible), or in hard copy format kept in locked cabinets. All LWARB mobile devices are password protected and encrypted where possible. In general, no data is stored directly on mobile devices.
12 Automated decision making and profiling
LWARB does not undertake any automated decision making or profiling.
13 Individual rights
The GDPR confer certain rights to individuals concerning processing of their personal data:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
Any queries about personal information held by LWARB should be directed to the Data Protection Officer at firstname.lastname@example.org or by calling 0207 960 3680.
14 Information Commissioner
If you have any queries or concerns about data protection at LWARB, please contact email@example.com. If you are not satisfied with the response you receive, you may wish to contact the Information Commissioner’s Office via ico.org.uk.