Parking Services Privacy Notice
- Why do we hold information about you?
- Who is processing my data and how will we use the information we hold about you?
- What is the lawful base for the collection, use and storage of your data?
- What information do we collect?
- How do we use the information we collect?
- Do we monitor and record communications?
- How long do we keep your data?
- Who will your information be shared with?
- How we will keep your information secure?
- What rights do you have?
- Who can you contact?
In order to provide Parking Services throughout the borough it is necessary for us to collect and process personal information about you. The information collected will vary and depend on the nature of the parking related service or function (this can be found in more detail under the relevant sections below); examples of which are:
Parking enforcement, parking appeals, correspondence, parking dispensations, car park season tickets and card payments for parking.
We take your privacy very seriously therefore we urge you to read this policy carefully as it contains important information about us and:
- The personal information we collect about you
- What we do with the information
- Who your information may be shared with
All personal data/information is processed in accordance with the General Data Protection Regulations legislation. The Data Controller for the information outlined in this privacy notice is Broxtowe Borough Council.
|Data Processor||How will your information be used?|
Broxtowe Borough Council
Nottinghamshire County Council on behalf of Broxtowe Borough Council (joint Data Controller)
Cobalt Telephone Technologies (RingGo pay by phone) on behalf of Broxtowe Borough Council
We have a legal obligation to collect your data for which processing is necessary to comply with the legal requirements under the Road Traffic Regulations Act 1984, Traffic Management Act 2004 (and associated regulations) and the Local Authorities Street Traffic Orders Procedure (England and Wales) Regulations 1996.
It is also necessary for the performance of a public task and/or in the exercise of official authority, in this case parking enforcement which is a statutory requirement.
We also collect your data to carry out a contract to which you are a party i.e. for a parking permit and/or parking dispensation.
We may collect some or all of the following information about you:
- Vehicle registration mark and vehicle details (make, model, colour etc.)
- Contact details (email address and telephone number)
- Encrypted payment details
Some examples of when we collect this information include:
- We will contact the DVLA to obtain registered keeper details to issue a Penalty Charge Notice/Notice to Owner
- If the vehicle is hired/leased then we request a copy of the hire/lease agreement from the registered keeper of the vehicle to enable the transfer of liability.
- If the registered keeper has sold the vehicle, then we can obtain details of the new keeper from the registered keeper at the time of the parking contravention.
- We may collect vehicle registration details to monitor how long vehicles stay in our car parks.
We collect information about you for the following purposes:
- The keeper/hirer details are obtained to enable us to enforce the Penalty Charge Notice/Notice to Owner under the statutory process in place.
- In the case of issuing a parking permit, this information is given by the applicant to enable us to process the application and produce the permit
We may monitor communications such as letters, emails and details of telephone conversations for the following purposes:
- Quality assurance
- Case evidence
- For penalty charge notices we keep your data for 7 years
- For parking permits we will keep your data for 1 month following the expiry date of the permit.
- For car park usage surveys we will keep your vehicle details for 1 month before the data is anonymised.
Nottinghamshire County Council Central Processing Centre (CPU)
The processing centre manage the complete penalty charge notice processing for on-street and off-street enforcement on behalf of Broxtowe Borough Council.
The Traffic Enforcement Centre, Northampton (TEC)
Penalty Charge Notice debts are registered at the TEC by the processing centre if they are not paid within the timescales set out in the Traffic Management Act 2004.
The Traffic Penalty Tribunal (TPT)
If you have appealed a penalty charge notice and your appeal was unsuccessful you have the right to take your case to TPT where an independent adjudicator will hear your appeal.
Driver and Vehicle Licencing Agency (DVLA)
In order to identify the registered keeper of a vehicle at a given time, for the purpose of the enforcement of a Penalty Charge Notice (in accordance with The Civil Enforcement of Parking Contraventions (England) General Regulations 2007) or for the consideration of prosecution in any other related matter, we may contact the DVLA and provide them with the details known to us.
Enforcement Agents (formally known as “bailiffs”)
The Nottinghamshire County Council Processing Centre have contracts with four Enforcement Agents to recover outstanding debt owed to the council and therefore would recover any money owed in respect of parking enforcement.
We will not normally share your information with organisations other than our partner organisations without your consent however, there may be certain circumstances where we would share without consent such as where we are required to do so by law, to safeguard public safety and in risk of harm or emergency situations. Any information shared will only be shared on a need to know basis with appropriate individuals. Only the minimum information for the purpose will be shared.
Your information will not be transferred to another country.
We will use technological and organisational measures to keep your information secure. These measures include the following:
- All data is stored on a database(s) on a secure server which are password protected.
- Only authorised, trained employees have secure access to the data.
- All payment processing is done using Payment Card Data Security Standard compliant systems.
- Information will be destroyed under confidential conditions.
The General Data Protection Regulation (GDPR) legislation provides you with 8 rights in regards to your personal data. These are:
- the right to be informed
- the right of access
- the right to rectification
- the right to erasure
- the right to restrict processing
- the right to data portability
- the right to object
- Rights in relation to automated decision making and profiling
For more detailed information please visit the Information Commissioner's Office's Guide to GDPR. (Opens in a New Window)
Right of Access
You can request a copy of the information which we hold on you – this is called a subject access request. If you would like a copy please:
- Email or write to us (contact details below)
- Let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill)
- Let us know the information you want including any reference numbers if you have them
Right to Rectification
You can request us to correct any mistakes in your information we hold free of charge. If you would like to do this please:
- Email or write to us (contact details below)
- Let us have enough information to identify you (e.g. reference number, name, vehicle registration details)
- Let us know the information that is correct and what is should be replaced with
Right to Erasure
You have the right to be forgotten so you can ask for your personal information to be deleted where:
- It is no longer needed for the reason it was collected in the first place
- You have removed your consent for us to use your information and we do not have to keep your information for legal reasons or public interest reasons (e.g. illegal activity)
If we have shared your personal information with others, we will do what we can to make sure those using your personal information comply with your request for erasure.
If you wish to contact Broxtowe Borough Council’s data controller regarding your personal data and any other concerns you may have regarding its processing you can do so by contacting our Information Governance Officer.
Please note that these details are NOT to be used to make an enquiry or challenge a Penalty Charge Notice. This is handled separately. Please visit the Nottinghamshire County Council website (Opens in a New Window)
If you are unhappy with how the data controller has processed your data, or if you feel they have acted in a way that has breached your data protection rights you have the right to complain to the Information Commissioners Office - please visit the Information Commissioner's website (Opens in a New Window)