This website is operated by The Heavy Transport Association (HTA). The privacy of our users is extremely important to us and therefore we encourage all users to read this policy very carefully because it contains important information regarding:
Who we are
The Heavy Transport Association (HTA) ('we', 'us', 'our') collect, use and are responsible for storing certain personal information about you ('you', 'your', 'yours').
The personal information we collect and use
Personal information is information which you can be identified from (and does not include any anonymised forms of information).
1. Types of personal information
We may process the following types of personal information in relation to you:
2. Types of sensitive information
We may also process the following types of sensitive information in relation to you:
How your personal information is collected
This section describes how the above types of personal information are collected by us. Your personal information will be collected as follows:
1. Personal information obtained from you directly
We will sometimes obtain information from you directly, including when you:
3. Changes to the way in which we collect your personal information
In the event that we need to obtain personal information in relation to you from any other source than those described above, we shall notify you of this.
How we use your personal information
1. General purposes
In general, your personal information will generally be processed for the following purposes:
Any sensitive information in relation to you will generally be processed for the following purposes:
Lawful basis for processing of your personal information
We have described above the purposes for which we may process your personal information. These purposes will at all times be justified by UK data protection law.
1. General lawful bases
The lawful basis upon which we are able to process your personal data are:-
In general, in order to meet the purposes we have described above, we will process your personal information where it is necessary to comply with legal obligations which we are required to adhere to.
2. Lawful bases applicable to sensitive information
We have explained above that we may process sensitive personal information in relation to you. We have defined above the general purposes for which we process your personal sensitive information. These purposes are justified by lawful conditions. There are however additional conditions which apply to sensitive personal information.
We will therefore only process your sensitive personal information for any or a combination of the following additional lawful reasons, which are:-
In general, in order to meet the purposes we have described, we will usually process your sensitive information where:
it is necessary in order to protect the vital interests of you or the interests of another person. This shall only apply where the person whose vital interests are to be protected is unable to consent (for example to provide urgent medical treatment).
Sharing of your personal information
On any occasion where any of your personal information is shared with any third party, we shall only permit them to process such information for our required purposes, under our specific instruction, and not for their own purposes. We are required to enter into a formal legal agreement to enable such sharing to take place.
We do not anticipate that we will need to share your personal information with any third party. We will notify should this position change.
How long your personal information will be kept
Your personal information will only be kept for the period of time which is necessary for us to fulfil the above purposes.
We envisage that your personal information shall be retained by us for the following:
After the period described above, your information shall be properly deleted or anonymised.
Keeping your information secure
We will ensure the proper safety and security of your personal information and have measures in place to do so. We will also use technological and organisation measures to keep your information secure. These measures are as follows:
We are ISO 27001 certified. This certification assists us in ensuring the safety of your personal information.
We have proper procedures in place to deal with any data security breach, which shall be reported and dealt with in accordance with data protection laws and regulations. You shall also be notified of any suspected data breach concerning your personal information.
Use of your information outside of the United Kingdom
We have described above the purposes and lawful bases for which we process your personal information. In order to meet those needs, we may transfer your personal information outside of the United Kingdom.
Your personal information may be transferred to:
The recipient country or countries listed above have been deemed by the United Kingdom to have adequate protection in place so that the security of your personal information can be maintained.
Our website is not intended for children (anybody under the age of 18). We do not intend to collect data from children.
Under the UK General Data Protection Regulation you have a number of important rights free of charge. In summary, those include rights to:
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner's Office (ICO) on your rights under the General Data Protection Regulations.
If you would like to exercise any of these rights please contact our Data Protection Officer: MR JAMES EDES in the following manner:
If you would like this policy in another format (for example: audio, large print, braille) please contact us using the details below.
We hope that we can resolve any query or concern you raise about our use of your information.
The UK General Data Protection Regulation also gives you right to lodge a complaint with the supervisory authority. The supervisory authority in the United Kingdom is the Information Commissioner.
Our Data Protection Officer is MR JAMES EDES.
Any requests or questions regarding the use of your personal information should be made to the above named person using the following method:-
Sources of further Information
This policy provides key information to you regarding the processed of your information. For certain areas of our information processing, we have further comprehensive details contained in other documentation. This information can be located as follows: