Please read this privacy notice carefully to understand why we collect your personal data, how and why we use it, the legal basis of this use, and your rights with respect to the processing of your personal data.
bp pulse has collected your personal data for the purposes of issuing out RFID cards as well as allowing system users to view transactions conducted on RFID cards while RFID card is assigned to the driver.
To facilitate this the following data will be collected about you:
Full name
Phone number
Employee number
Department
Your personal data will be added onto the portal by your fleet manager triggering an email to be sent to you providing you with a link to this privacy notice to fulfil your right to beinformed in line with the Privacy legislation.
This data will allow your fleet managers to assign RFID cards to drivers and vehicles asrequired, your contact details will enable fleet managers to contact you to notify you of changes to allocation and or issues with RFID card or vehicles.
Our legal basis for processing your personal data is to fulfil our contractual obligation with your fleet company of providing RFID cards and allowing system users to view transactions conducted on RFID cards while the RFID is assigned to the drivers.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to receive an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent where this is required or permitted by law.
bp pulse operates a clear retention policy to ensure personal data is kept only for so long as is necessary for the purpose for which such information is collected, after which we make it non-identifiable or delete it. The actual length of time data is retained will depend on the purpose for which it was collected. In this instance your personal data will be retained in our systems for as long your fleet manager /company requires us to.
Where personal data is transferred within the bp Group, we do this under a comprehensive, flexible, and global compliance framework which implements appropriate measures and safeguards (including EU standard contractual clauses) to ensure that your personal data is protected in accordance with applicable data protection laws.
Users of the portal within the company can view and maintain links between drivers and RFID and amend the links where applicable as well as make any necessary changes requiredin the portal.
We may also disclose your personal data to third parties:
if we sell or buy any business or assets, in which case we may disclose your personaldata to the prospective seller or buyer of such business or assets; or
if we or substantially all our assets are acquired by a third party, in which casepersonal data held by it about our customers will be one of the transferred assets; or
if we are under a duty to disclose or share your personal data in order to complywith any legal obligation or in order to enforce or apply other agreements; or
to protect and defend the rights, property or safety of bp pulse, its customers, staff,suppliers or others; to comply with applicable law or co-operate with lawenforcement; or to enforce its terms or other agreements and for the purposes ofprevention and detection of crime
We may make minor changes to this privacy notice in the future and will post these to this page on our portal. If we make any significant changes, we will take additional steps to inform you.
You have certain rights in relation to your personal data which we aim to uphold as follows. Please note that rights are not absolute and are subject to certain qualification and exceptions.
Right to be informed: You have the right to receive clear, transparent and understandable information about how we process your personal data. Our privacy notices, including this one, aim to meet this need.
Right to access: You can ask us for a copy of personal data we hold about you.
Right to rectification: You can ask us to correct any error you identify in personal data we hold about you.
Right to erasure: You can ask us to delete data we hold about you. We will do so unless we have a compelling reason to retain (e.g. legal requirement, prevention offraud).
Right to restrict processing: You can ask us to stop using your personal data.
Right to data portability: You can ask us to provide your personal data in a form suitable for use by another organisation.
Right to object: You can object to our processing of your personal data where we aredoing so under the legal basis of legitimate interest.
If you would like to contact us in connection with exercising any of these rights, please do by contacting us using the contact details provided below.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
By email: dataprivacy-bppulse@bp.com
By post: Breckland, Linford Wood, Milton Keynes, MK14 6GY
If you have any queries or concerns about our handling of your personal data, pleasecontact us using the following details: