This privacy notice is designed to help you understand how and why North Yorkshire Council, processes your personal data. This notice should be read in conjunction with our corporate privacy notice.
Who are we?
North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). The parking management function is responsible for parking operations which include day-to-day management, maintenance, enforcing parking regulations, administering parking charges, issuing car parking permits, dealing with unauthorised use of car parks and general enquiries.
The council has appointed Veritau to be its data protection officer. Their contact details are:
Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA
Email: infogov@northyorks.gov.uk
Tel: 01904 552848
What personal information do we collect?
The council collects the following personal data:
- name
- address
- email address
- telephone number
- details of your vehicle such as vehicle registration number, vehicle make and model, V5C
- proof of vehicle ownership
- location of vehicle
- civil parking offence details
- vehicle ownership checks via the Driver and Vehicle Licencing Agency (DVLA)
- images of you if the enforcement officer has activated their body worn video camera
- credit/debit card details if you have paid for a service by card
- any correspondence we have had with you
- call recordings (you will be informed upon contacting the council if your call is being recorded or monitored)
In certain circumstances, the council may collect special category data, for example, if you are appealing against a PCN for health/disability reasons. We may also process race and gender information if you provide these as part of the appeal process.
Why do we collect your personal information?
The personal data collected and used will vary and depend on the nature of the service used.
Examples of the parking services for which personal data may be collected include
- the issuing of penalty charge notices, including dealing with appeals and recovery of fines
- issuing of permits, scratch cards and season tickets
- to facilitate use of the council’s car parks and designated on-street parking spaces
- card payments for parking
- correspondence, including complaints
Who do we obtain your information from?
Besides the information obtained from yourself, the council also collect information from the council tax and electoral services to confirm an applicant’s eligibility for parking permits.
External to the council information is received from the driver and vehicle licensing agency (DVLA).
Who do we share this information with?
We may share your personal data with:
- DVLA, for the purpose of audit of our car park management service and enquiries to them for the purposes of issuing and dealing with a PCN
- Traffic Enforcement Centre (TEC)
- Traffic Penalty Tribunal (TPT) for the purpose of assessing your appeal
- Credit reference agents for the purpose of ensuring we are writing to you at your most recent correspondence address, if you have not replied to other correspondence
- Council enforcement agent suppliers
- Collection agents for the purpose of enforcing an overdue payment or parking contract
- Solicitors for the purpose of enforcing a parking contract or responding to a legal query
- any other duly authorised sub-contractors
How long do we keep your information for?
The council will retain your personal information in accordance with the organisation’s retention schedule. For the purposes of satisfying its statutory obligations, the council is required to retain some information for a set period. However, where statutory retention periods do not apply, the council will only retain the data for as long as is necessary to fulfil the purpose it was collected for.
|
Data held |
Retention period |
|---|---|
|
Car park permits and licences |
For the year (April to March inclusive) of the validity of the permit/licence and for a full year thereafter (April to March inclusive). |
What is our lawful basis for processing your information?
North Yorkshire Council relies on the following lawful basis to process your personal data:
UK GDPR Article 6 (1) (e) -processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
When processing special category data, the council will rely on the following lawful basis:
UK GDPR Article 9 (2)(g) -processing is necessary for reasons of substantial public interest.
We rely upon the following to process your personal data:
- the traffic management act 2004
- road traffic act 1991
- road traffic regulation act 1984
- the civil enforcement of parking contraventions (England) general regulations 2007
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.