ºÚÁÏÍøÕ¾

The following privacy notice applies to parking services.

This notice explains how personal information is going to be used, what it is used for, who it might be shared with and why and for how long it is to be kept.

ºÚÁÏÍøÕ¾ Borough Council is fully committed to complying with The Data Protection Act 2018 and the General Data Protection Regulation (GDPR).
We ensure that your personal data is processed fairly, lawfully kept safe and secure and retained for no longer than is necessary.

The Data Protection Officer for the council is Head of Legal Democracy and HR.

Your vehicle details are obtained by the Civil Enforcement Officer. Photographic images are taken of the vehicle parking in contravention of the parking regulations.
Your name and address is obtained from the DVLA if the penalty charge notice (PCN) has not been paid within 28 days from the date of service of the PCN. For postal PCNs your information is obtained from the DVLA within two days from the date of the PCN notice being issued.

Your contact details are collected from correspondence you have submitted either via our website or via the appeals email. Where grounds relating to health are relied upon when appealing against a PCN, details regarding the medical information may be requested to consider this aspect as part of the appeals process.

The personal information you provide to the council will be used or processed for the purpose of your appeal. We will use the information for this purpose and may disclose it to those individuals or organisations referred to below.

Your personal data may be converted (‘anonymised’) into statistical or aggregated data in such a way as to ensure that you are not identified from it. Aggregated data can’t, by definition, be linked back to you as an individual. This data might be used to conduct research and analysis, including to prepare statistical research and reports.

We may share personal data with other organisations in the following circumstances:

• for law enforcement, regulation and licensing, criminal prosecutions and court proceedings
• for the purposes of prevention and detection of fraud – partner agencies and other local authorities within West Sussex involved directly in parking management and the police
• in dealing with appeals against PCNs - the Traffic Penalty Tribunal, The Traffic Enforcement Centre, The Courts and enforcement agents and agents providing services to the council in carrying out its role in pursuing unpaid PCNs
• if we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of the prevention and detection of fraud)

The purpose of processing your personal data is to administer our processing of PCNs and appeals.

We will use your data to process PCNs which are issued to vehicles in respect of off- street parking contraventions. All processes are carried out in line with traffic management and parking related legislation and using secure systems. The information you provide will only be used for the parking related purposes for which it was obtained.

ºÚÁÏÍøÕ¾ Borough Council is registered as a Data Controller with The Information Commissioner’s Office (Registration Number Z5327706).

• Processing is necessary for compliance with a legal obligation
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

We are relying on GDPR Articles 6(1) (c) & (e) processing is necessary in the exercise of official authority in the data controller, namely the Traffic Management and Civil Enforcement legislation: 

• Traffic Management Act 2004
• Civil Enforcement of Parking Contraventions (England) General Regulations 2007
• Civil Enforcement of Parking Contraventions (England) Representations and Appeals Regulations 2007
• Civil Enforcement of Parking Contraventions (Guidelines on Levels of Charges) (England) Order 2007
• Traffic Management Act 2004 (Commencement No. 5 and Transitional Provisions) (England) Order 2007
• Civil Enforcement of Parking Contraventions (England) General (Amendment) Regulations 2008
• Traffic Management Act 2004 (Commencement No. 5 and Transitional Provisions) (England) (Amendment) Order 2008, The Civil Enforcement of Parking Contraventions (England) General (Amendment) Regulations 2009
• Civil Enforcement of Parking Contraventions (England) General (Amendment) Regulations 2015
• Civil Enforcement of Parking Contraventions (England) General (Amendment No.2) Regulations 2015
• Operational & Statutory Guidance
• Tribunals & Courts Enforcement Act
• Civil Procedure Rules
• ºÚÁÏÍøÕ¾ Borough Council (Off Street Parking Places) (Civil Enforcement & Consolidation) Order 2009 as amended

Where special category data is provided and processed, the relevant legal basis we are relying on is GDPR Article 9(1) (f) as processing is necessary for the establishment, exercise or defence of legal claims or whenever Courts are acting in their judicial capacity.

We pass data to:

• internal departments
• other local authorities (education, social care children and relevant housing and employment and other services)
• Central Government
• other third-party organisations, as allowed by law, these include our nominated enforcement agents
• other partner agencies that provide services on our behalf
• agencies with whom we have a duty to co-operate, such as the police
• Housing Associations
• Benefits Agency
• HM Court Services
• Traffic Enforcement Centre
• Traffic Penalty Tribunal

We may share personal data with other organisations in the following circumstances:

• for  law enforcement, regulation and licensing, criminal prosecutions and court proceedings
• for the purposes of prevention and detection of fraud (partner agencies and other local authorities within West Sussex involved directly in parking management and the police)
• in dealing with appeals against PCN (Traffic Penalty Tribunal, Traffic Enforcement Centre, the Courts and enforcement agents and agents providing services to the Borough and District Councils in carrying out their role in pursuing unpaid PCNs)
• if we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of the prevention and detection of fraud).

We will not share data with third-parties for marketing purposes.

Personal data will not be retained for longer than necessary in relation to the purposes for which they were collected.

You have the right to:

1. Be informed of data processing (which is covered by this privacy notice)
2. Access your personal information (known as a Subject Access Request)
3. Have inaccuracies corrected
4. Have information erased
5. Restrict processing
6. Data portability
7. Intervention in respect of automated decision making/profiling
8. Withdraw Consent (see below)
9. Complain to the Information Commissioner’s Office (See below)

To exercise any of these rights please contact the Data Protection Officer.

The lawful basis upon which we process personal data is that it is necessary in order to comply with our legal obligations and to enable us to perform tasks carried out in the public interest.  However, where personal data is solely processed on the basis of consent, you will have the right to withdraw that consent.

If you have any worries or questions about how your personal information is handled please contact our Data Protection Officer.

For independent advice about data protection, privacy and data rights, you can contact the Information Commissioner’s Office (ICO):

• Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire DK9 5AF
• Tel:  0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number
• Visit
• Email casework@ico.org.uk