Polisi

Preifatrwydd

Llyn Llandegfedd

Mae mynediad i Lyn Llandegfedd am ddim

Gan Dŵr Cymru

Hysbysiad Preifatrwydd Dŵr Cymru

Welsh Water’s Privacy Notice – How we use your Personal Information (Visitor Attraction Centres) (July 2021)

Rydyn ni’n gwybod pa mor bwysig yw hi i chi ein bod ni’n gofalu am eich Gwybodaeth Bersonol. Cael pobl i ymddiried ynom i wneud y peth iawn yw un o’n gwerthoedd craidd. Mae’r Hysbysiad Preifatrwydd yma’n esbonio sut rydyn ni’n casglu, yn defnyddio, yn rhannu ac yn amddiffyn eich Gwybodaeth Bersonol mewn ffordd sy’n parchu eich hawliau Diogelu Data ac yn cydymffurfio â chyfreithiau Diogelu Data’r DU (gan gynnwys y Rheoliad Diogelu Data Cyffredinol (GDPR) a Deddf Diogelu Data 2018).

About us

Cwmni dŵr a charthffosiaeth nid-er-elw yw Dŵr Cymru. Mae’n darparu cyflenwadau dŵr yfed o safon gyson uchel ar gyfer dros dair miliwn o bobl ac yn cludo dŵr gwastraff i ffwrdd gan ei drin a’i waredu mewn ffordd briodol yn ein hardal gyflenwi, sy’n cwmpasu’r rhan fwyaf o Gymru, a rhannau o Lannau Dyfrdwy a Sir Henffordd. Enw masnachol Dŵr Cymru Cyfyngedig yw Dŵr Cymru. At ddibenion cyfreithiau Diogelu Data, Dŵr Cymru Cyfyngedig yw’r Rheolydd Data (swyddfa gofrestredig Linea, Heol Fortran, Llaneirwg, Caerdydd CF3 0LT a rhif y cwmni 02366777).

Mae’r cwmni’n gweithredu 91 o gronfeydd dŵr sy’n amrywio o ran maint o 2 erw i 1,026 erw. Mae’r rhain yn cynnwys portffolio cenedlaethol o Atyniadau Ymwelwyr sef: Llyn Brenig, Cwm Elan, Llyn Llandegfedd, Llys-y-Frân a Chronfeydd Dŵr Llys-faen a Llanisien (ar y gweill) o dan ei frand ‘Anturiaethau Dŵr Cymru’. Hybiau ar gyfer iechyd, lles a hamdden yw’r rhain, a’u nod yw ailgysylltu pobl â’r dŵr a’r amgylchedd, wrth gynnal, amddiffyn a chyfoethogi gwerth ecolegol pob safle.

  • Sut i gysylltu â ni

I gael rhagor o wybodaeth am ein Hysbysiad Preifatrwydd, neu os oes unrhyw sylwadau neu safbwyntiau gennych am yr hysbysiad neu ein dulliau o ymdrin â’ch Gwybodaeth Bersonol:

Email our Data Protection Officer at:DataProtectionOfficer@dwrcymru.com;or

Ysgrifennwch at ein Swyddog Diogelu Data yn: Swyddog Diogelu Data, Dŵr Cymru Welsh Water, Linea, Heol Fortran, Llaneirwg, Caerdydd CF3 0LT.

Os hoffech ymarfer unrhyw un o’ch hawliau fel Testun Data (gweler isod am ragor o fanylion):

Email us at: DataSubjectRightsRequests@dwrcymru.com; or

Write to us at: Customer Services, Data Subject Rights Request Team, Dŵr Cymru Welsh Water, Linea, Fortran Road, St Mellons, Cardiff CF3 0LT.

Neu gallwch gysylltu â Swyddfa’r Comisiynydd Gwybodaeth trwy https://ico.org.uk/ neu ar 0303 123 1113 i ofyn am wybodaeth neu gyngor, neu i wneud cwyn.

  • Ein hawl gyfreithiol i brosesu eich Gwybodaeth Bersonol

Ni fyddwn yn prosesu eich Gwybodaeth Bersonol oni bai: bod gennym sail gyfreithiol i wneud hynny, bod prosesu’n angenrheidiol, yn rhesymol ac yn gymesur; ac yn gyson â’r ffordd rydym yn ei disgrifio yn yr Hysbysiad Preifatrwydd hwn.

Legal obligation

Some of the processing we carry out in relation to your Personal Information is necessary for the performance of our legal obligations such as our duty to protect the health, safety and wellbeing of our visitors, employees and volunteers.  In particular, we have a duty of care to ensure our visitors are safe when on our sites and that we take precautions to ensure the safety of our Visitor Attraction Centres. This includes making our visitors aware of our health and safety procedures (eg. briefings from our staff before taking part in activities).

Legitimate Interests

We rely on our legitimate interests to carry out the majority of our processing of your Personal Information to enable you to take part in activities and events at our Visitor Attraction Centres. 

We always check that our legitimate interests are not overridden by your rights, and process your Personal Information in a way that we think you would reasonably expect (ie. as set out in this Privacy Notice).

Consent

In limited circumstances we require consent from you to process your Personal Information – for example to send you marketing materials such as newsletters or where you provide us with Sensitive Personal Information such as medical or health information when booking activities or events.  We also require the consent of parents or guardians to process the personal data of children (including their name and age to enable us to identify them and make sure we have the correct equipment available for them).  When we collect Personal Information for these purposes we will ensure that we get your explicit consent to collect and record it, and let you know how you can withdraw your consent if you change your mind.

  •  What Personal Information we collect about you and what we use it for

Yr unig ddata personol y byddwn ni’n ei gasglu gennych chi yw’r wybodaeth y dewiswch ei darparu.

We may collect Personal Information from you in the following ways:

  • Information you provide to us when booking an event at one of our Visitor Attraction Centres (including payment details);
  • Information that you provide to us for the purpose of subscribing to our newsletters (eg. email address, name, postal address and/or post code);
  • Information you provide to us when purchasing vouchers for events or activities;
  • Information you provide to us when applying for a fishing permit;
  • Information about your computer and about your visits to and use of our website.  Please see our Visitor Attraction Centre website Cookies Policy at this link https://llandegfedd.co.uk/cookie-policy/ for more information;
  • Public WiFi System (email and postcode);
  • Information that you provide to us for accommodation and camping bookings (eg name, postal address, phone number, email address and accessibility information).
  • We sometimes use unmanned aerial systems (drones) in order to monitor, maintain and/or enhance our land, assets and our processes.  The drones will be flown by CAA authorised pilots either employed by Welsh Water or third party contractors.  We aim to avoid flying drones directly overhead or within 50 metres of persons, vehicles, vessels or properties.  We will limit the amount of Personal Data captured when using drones as much as is reasonably practicable by only capturing recordings/images on a strictly necessary basis (by only starting to record when the drone is in place and not during take-off and landing unless necessary), and keep them for as long as is necessary, and also notify the individuals that the recording is taking place using a notice.

Mae’r Wybodaeth Bersonol y gallwn ei chasglu gennych yn cynnwys:

  • The name, address, postcode, email address and telephone number you provide to us
  • Information about your visits to, and use of, our website. Please see our Visitor Attraction Centre website Cookies Policy at this link https://llandegfedd.co.uk/cookie-policy/ for more information
  • Details of accessibility, dietary and any other requirements when booking activities, events  or accommodation;
  • Payment details.
  • Physical attributes such as your appearance and gait, and vehicle registration numbers, captured through CCTV and drones. Any Personal Data captured will be anonymised during data processing.

We will use this personal information for:

  • Confirming and securing your bookings for events;
  • Sending you vouchers you have purchased  use at our Visitor Attraction Centres;
  • Keeping you up to date with activities at your local Visitor Attraction Centre via our newsletters;
  • Ensuring we provide visitors with the equipment you need for the activities you take part in;
  •  Processing your application for a fishing permit;
  • Adapting your accommodation requirements to your needs;
  • Monitoring our sites and car parks to keep them safe for our staff, volunteers and visitors.

  • Volunteers at our Visitor Attraction Centres

If you are a volunteer at our visitor attraction centres, we may collect the following Personal Data:

  • Name
  • Date of Birth
  • Address
  • Contact Number
  • Email address
  • Emergency Contact Name, Number and Relationship
  • Clothes Size
  • Evidence of Qualification
  • Reference Contact details
  • Accessibility
  • Photo Consent
  • Ethnicity
  • Gender
  • Disability

We use a third party provider called Team Kinetic, who are the hosting provider of the volunteer management solution. The following personal data may be collected from you through the volunteer management solution hosted by Team Kinetic:

  • Name
  • Address
  • Date of Birth
  • Contact Number
  • Ethnicity
  • Gender
  • Health information
  • Emergency contact information
  • Qualifications and training.
  • Criminal records information


Your personal information will be collected in the following ways:

  • Via an online registration form

This personal information will be used for:

  • Name, Date of Birth, Address, email, and phone number is required to process your application and for Welsh Water to contact you to confirm we have received the application, to make arrangements and notify you of any upcoming opportunities

  • Date of birth and reference contact details required to understand a volunteer’s age group and for safeguarding purposes

  • Date of birth required to verify your identity
     
  • Clothing size required for PPE (which is required to be worn to meet health and safety legislation)

  • Emergency contact name, number, and relationship required in case of emergency whilst taking part in a volunteer opportunity on a Welsh Water site

  • Evidence of qualification required for specialist skills and knowledge relevant for certain volunteering roles e.g. conservation management, training and use of tools and machinery

  • Accessibility information required to make reasonable adjustments for all volunteers prior to them partaking in a volunteering activity
  • Photo(s) / video and voice recording(s) consent will be requested in Team Kinetic. Upon consent of photo(s) / video and voice recording(s) will be held by Welsh Water inline with photography and filming consent report. Photo(s) / video and voice recording(s) may be taken for promotional purposes and may be sent out to media, press releases or press relations used for our publications or on our website. The photo(s) / video and voice recording(s) will be deleted after three years, unless we feel the material has historic significance
  • Photo consent required for identification badges for all volunteers on Welsh Water sites

  • Gender, ethnicity, disability is requested by Team Kinetic to support diversity, equality and inclusion. Providing this information is optional to the volunteer.   By monitoring the diversity of those volunteering within Welsh Water we can ensure to provide this level of data we are treating all individuals fairly and offering equal opportunities.  
  • Welsh Water will also need to provide monitoring information to funding organisations to demonstrate that we are meeting project outcomes, such as engaging with a wider range of people. The data supplied to the funding organisations will be anonymised and aggregated based on a number of people rather than any individuals. Welsh Water uses this information to understand the demographics of those who volunteer.

  • Car parks

We have an automatic number plate recognition system in place at our Visitor Attraction Centre car parks to enable visitors to identify their vehicles when paying for parking.  This service is provided by a third party and signage with further information is in place at our sites.   We collect anonymised and aggregated data via this system to assist us with our service offering, manage footfall and staffing requirements, and manage anti-social behaviour. 

We also have electrical vehicle charges at our Visitor Attraction Centre car parks to enable visitors to charge their electrical vehicles.  This service is also provided by a third party and signage with further information is in place at our sites.

  • CCTV and Body Worn Videos

We have CCTV at our Visitor Attraction Centres and so you may be recorded if you visit us. There are signs to show you when you are entering an area monitored by CCTV. CCTV images are held for 30 days and then deleted (unless there is a legitimate business reason for us to keep it any longer).

We also use Body Worn Videos at our sites to assist in the prevention, investigation and detection of crime and the identification and prosecution of offenders. 

If you would like more information about our use of CCTV or Body Worn Videos please contact Welsh Water’s Data Protection Officer.

  • Drones

We sometimes use drones in order to monitor, maintain and/or enhance our land, assets and our processes. The drones will be flown by CAA qualified pilots either employed by Welsh Water or a third party contractor. We aim to avoid flying drones directly overhead or within 50 metres of persons, vehicles, vessels or properties. Some of our Visitor Attraction Centres have SSI sites and there may be specific exclusions to protect wildlife in those areas (eg. the ospreys at Llyn Brenig).

  • Visitor Surveys

We carry out surveys of our visitors to our Visitor Attraction Centres to help us tailor our events, activities and services to the needs of our visitors, and to improve our offerings. This data is collected upon exit of our attraction sites by a third party company, BDRC Group. The only personal data they will collect from you is your IP Address and email address (where you voluntarily provide your email address, in order for BDRC to send you a copy of the survey data). Your IP Address is used to prevent fraud, this will not be associated with you or the survey data in any way.

We may also use third parties, or our own employees, to help contact our customers to undertake customer satisfaction surveys or engagement processes. We rely on our legitimate interests to do so. If you would prefer not to participate please let us know either by emailing us at: DataProtectionOfficer@dwrcumru.com or writing to us at: Data Protection Officer, Dwr Cymru Welsh Water, Linea, Fortran Road, St Mellons, Cardiff, CF3 0LT.

Please note this will not stop communications for the purpose of supplying our water and waste water services or from our regulator.

Cookies

Please see our Cookie Policy on our website for information on our use of cookies https://llandegfedd.co.uk/cookie-policy/

Feedback

We welcome your feedback on how we can improve our Visitor Attraction Centre services. You can provide feedback by contacting welshwateradventures@dwrcymru.com

Where we store your Personal Information and how we keep it safe

All access to our systems is strictly controlled. We also operate strict physical security at all our sites and employees all receive security and data protection awareness training.

Where we transfer information to third parties to enable them to process it on our behalf. We ensure that the providers meet or exceed the relevant legal or regulatory requirements for transferring data to them and keeping it secure.

We may need to transfer your Personal Information outside of the European Economic Area (EEA). These countries may not have the same Data Protection laws as the UK and the EEA and so your Personal Information may not be subject to the same protections. However, in such cases, we will make sure that any transfer of your Personal Information to countries outside of the EEA is subject to appropriate safeguards as if it were being processed inside of the EEA and under the guiding principles set out in this Privacy Notice.

How long we will keep your information

We keep your information for no longer than is necessary for the purpose of the processing.  For example, financial information is kept for 6 + 1 years in accordance with the relevant financial regulations.

Any images or data captured on our CCTV will be removed after 30 days unless there is a legitimate business reason to retain it.

Automated decision making and profiling

We do not currently conduct any automated decision making as defined by Data Protection laws.

Your Data Protection Rights

Mae gennych rai hawliau penodol mewn perthynas â’ch Gwybodaeth Bersonol, a gallwch wneud gwahanol fathau o Geisiadau Hawliau Testun Data mewn perthynas â’r Wybodaeth Bersonol sydd gennym amdanoch chi. Hwyrach na fydd yr holl hawliau hyn yn berthnasol o dan yr holl amgylchiadau, ond byddwn ni’n sicrhau ein bod ni’n delio ag unrhyw gais sy’n dod i law mewn ffordd sy’n amddiffyn eich hawliau a’ch rhyddid, ac sy’n cydymffurfio â’r cyfreithiau Diogelu Data.

Os hoffech wneud Cais Hawliau Testun Data:

Email us at: DataSubjectRightsRequests@dwrcymru.com;

Write to us at: Customer Services, Data Subject Rights Request Team, Dŵr Cymru Welsh Water, Linea, Fortran Road, St Mellons, Cardiff CF3 0LT; or

Click here for our Data Subject Rights Request form.

Gall unrhyw unigolion y mae gennym wybodaeth amdanynt gyflwyno Cais Hawliau Testun Data. Gall trydydd parti wneud cais ar ran unigolyn (e.e. perthynas, ffrind, cyfreithiwr), ond bydd arnom angen cydsyniad yr unigolyn o dan sylw cyn y gallwn ddarparu unrhyw Wybodaeth Bersonol amdanynt i drydydd parti.

O dan amgylchiadau penodol, mae gennych yr hawl o dan y gyfraith:

  • Request access to your Personal Information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it;
  • Request correction of the Personal Information that we hold about you (also known as “rectification”). This enables you to have any incomplete or inaccurate information we hold about you corrected;
  • Request erasure of your Personal Information.  Subject to certain conditions, this enables you to ask us to delete or remove Personal Information (eg. where your Personal Information is no longer needed for the purpose it was collected for, or where the relevant processing is unlawful).  You also have the right to ask us to delete or remove your Personal Information where you have exercised your right to object to processing and there is no overriding legitimate interest to continue that processing (see below);
  • Object to processing of your Personal Information where we are relying on a legitimate interest (or those of a third party), where we process personal data for a task carried out in the public interest or when exercising official authority vested in us and there is something about your particular situation which makes you want to object to processing on this ground;
  • Request the restriction of processing of your Personal Information. This enables you to ask us to suspend the processing of your Personal Information about you (eg. if you want us to establish its accuracy or the reason for processing it);
  • Withdraw your consent to processing.  Where our processing of your Personal Information is based on your consent you have the right to withdraw your consent at any time. If you do decide to withdraw your consent we will stop processing your Personal Information for that purpose, unless there is another lawful basis we can rely on – in which case, we will let you know. Your withdrawal of your consent won’t impact any of our processing up to that point;
  • Request the transfer of your Personal Information to another service provider (ie. also known as the Right to Portability in the event that we are relying on your consent to process that Personal Information;
  • I beidio â bod yn destun penderfyniad sy’n seiliedig ar “brosesu awtomatig” yn unig. Nid ydym yn cyflawni unrhyw brosesu awtomatig ar hyn o bryd.

Ni fydd angen i chi dalu ffi i gyrchu eich Gwybodaeth Bersonol (nac i ymarfer unrhyw un o’r hawliau eraill). Fodd bynnag, gallwn godi ffi resymol arnoch os nad oes sail glir i’ch hawl i’w chyrchu neu os yw’n ormodol. Fel arall, gallwn wrthod cydymffurfio â’r cais o dan amgylchiadau o’r fath.

Mae hi’n bosibl y bydd angen i ni ofyn am wybodaeth benodol gennych i’n helpu ni i gadarnhau pwy ydych chi ac i sicrhau eich hawl i gyrchu’r wybodaeth (neu i ymarfer unrhyw un o’ch hawliau eraill). Mesur diogelwch priodol arall yw hwn i sicrhau nad yw Gwybodaeth Bersonol yn cael ei datgelu i unrhyw berson nad oes ganddynt yr hawl i’w derbyn.

Mae gennych chi’r hawl hefyd i gyflwyno cwyn i Swyddfa’r Comisiynydd Gwybodaeth, sef rheoleiddiwr diogelu data’r DU. Mae rhagor o fanylion ar gael ar wefan Swyddfa’r Comisiynydd Gwybodaeth, sef https://ico.org.uk/.

Updating our Privacy Notice

Byddwn ni’n diweddaru ein Hysbysiad Preifatrwydd wrth i’n prosesau a’n gweithdrefnau busnes, a/neu’r cyfreithiau Diogelu Data, newid. Bydd y fersiwn ddiweddaraf ar ein gwefan bob amser.

Customer Privacy Notice

For information on how we handle Welsh Water customer personal data please see our Customer Privacy Notice available at this link: https://corporate.dwrcymru.com/en/legal-privacy/privacy-policy.

ANTURIAETHAU ERAILL DŴR CYMRU