|
Privacy notice
Controller and Data Protection Officer contact details
The present Privacy Notice applies to the data processing activities carried out in connection with the Report Your Packaging (the “RPD Service”), when each obligated organisation enrols through the RPD Service, hosted by Defra and uploads and submits data as specified in the applicable “Packaging Data Regulations” those being either The Packaging Waste (Data Reporting) (England) Regulations 2023, The Packaging Waste (Data Collection and Reporting) (Wales) Regulations 2023, The Packaging Waste (Data Reporting) (Scotland) Regulations 2023 or The Packaging Waste (Data Reporting) Regulations (Northern Ireland) 2023.
The relevant regulators for each of the above regulations are The Environment Agency (“EA”), The Natural Resources Body for Wales (“NRW”), The Scottish Environment Protection Agency (“SEPA”) or The Department of Agriculture, Environment and Rural Affairs (“DAERA”) and these listed entities are, in relation to any data collected in accordance with the above Regulations, Joint Controllers for the personal data processed under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 (DPA 2018).
Further information on each regulator and how to contact their Data Protection Officer can be found on their website:
The Environment Agency contact details are available on?GOV.UK.
The Natural Resources Body for Wales contact details are available on naturalresources.wales
The Scottish Environment Protection Agency contact details are available on sepa.org.
The Department of Agriculture, Environment and Rural Affairs contact details are available on daera-ni.gov
Why we process your personal data
The purpose for processing your personal data is to carry out regulatory functions.
The regulators are entitled to collect your data because they have official authority from the national and devolved government of the United Kingdom of Great Britain and Northern Ireland.
The lawful basis relied on for processing your personal data is Public Task under Article 6(1)(e) of the UK General Data Protection Regulation.
The personal data we collect
Through the RPD Service Defra will collect personal data to enable each regulator to fulfil their regulatory functions under the Packaging Waste (Data Reporting) Regulations applicable to them. If you do not provide this data, you may be in breach of your legal obligations.
The categories of personal data obtained are:
-
Internet Protocol Address (IP) Address, and details of which version of web browser you used
-
Information on how you use the site, using cookies and page tagging techniques
-
Questions, queries or feedback you leave
No special category data is being processed.
What we do with your personal data
We use your personal data to check that everyone obligated under the “Packaging Data Regulations” is meeting their legal obligations. This includes checking that data and information is reported on time, correct, as accurate as reasonably possible and is submitted by an approved person.
Who can see your data
EA, NRW, SEPA, DAERA.
The Department of Environment, Farming and Rural Affairs (“Defra”), Welsh Government and the Scottish Government.
Any entity or office authorised by the Secretary of State, Ministers in Wales and Scotland or DEARA to receive that information.
Storage and processing of personal data
The personal data will be stored and processed through the RPD Service, which is hosted by Defra. You can access Defra’s Privacy Notice from here. If we require to transfer your personal data to another country, we will only transfer your personal data to another country that is deemed adequate for data protection purposes.
How long we keep your personal data
We keep your personal data for 7 years. We may retain anonymised feedback longer than this.
What are your rights
You have the right to request information about how your personal data is processed, and to request a copy of that personal data. You have the right to request that any inaccuracies in your personal data are rectified without delay. You have the right to request that any incomplete personal data is completed, including by means of a supplementary statement. You have the right to request that your personal data is erased if there is no longer a justification for it to be processed – please note however that we can refuse to erase your personal data in certain circumstances. You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.
Where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller (such as the exercise of a function of the Crown, a Minister of the Crown, or a government department, the exercise of a function conferred on a person by an enactment, the exercise of a function of either House of Parliament or the administration of justice) you have the right to object to the processing of your personal data.
These rights may be exercised by you against each and any of the Joint Controllers.
Your responsibility
If you have included personal data about any other individuals in your submissions to Report Packaging Data (RPD), you must inform them. You must provide them with a copy of this privacy notice so that they are aware of how their personal data will be used.
Complaints
If you believe that your personal data has been misused or mishandled, you can may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Email:casework@ico.org.uk
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.
Changes to this notice
We may change this privacy notice. In that case, the 'last updated' date at the bottom of this page will also change. Any changes to this privacy notice will immediately apply to you and your data.
If these changes affect how your personal data is processed, we'll take reasonable steps to let you know.
This notice was last updated on 10/07/2024.
|
