Privacy notice for off-street car parks
Epping Forest District Council provides off-street car parks and enforce the parking regulations for council owned off-street car parks throughout the Epping Forest district.
The council is committed to meeting its data protection obligations and handling your information securely. You should make sure you read and understand this notice before submitting your information to us or to any of our contractors including their sub-contractors via the online form.
Identity and contact details of the data controller
Epping Forest District Council is a data controller pursuant to the general data protection regulation (GDPR). This means that the council decides how your personal data is processed and for what purposes. The contact details for the council’s data protection officer are:
Data Protection Officer
Epping Forest District Council
323 High Street
Epping CM16 4BZ
- Call 01992 564000
- Email email@example.com
Personal data we collect about you
In order to provide an off-street parking service, it is necessary for us to collect and hold personal information about you. The information collected and held will vary and depend on the nature of the service.
In general terms, we process personal information relating to:
- Appeals against issue of penalty charge notices (PCNs)
- Applications for and issue of parking dispensations (trade services)
- Applications for and issue of resident parking permits
- Applications for and issue of business parking permits
- Applications for and issue of temporary permits
- Applications for and issue of bay suspension permits
- Penalty charge notices (PCNs)
- Representments – chargeback claims
- General correspondence between you and us on matters related to the parking service
Our processing activities may include:
- Your vehicle registration number, vehicle ownership checks (through the DVLA), vehicle make and model, location of vehicle, civil parking offence details
- Your address, telephone number, email address
- Documentation you may have provided by way of evidence, for example, medical correspondence, confirmation of vehicle breakdown, etc.
- Evidence relating to a third party if this is required as evidence in a challenge or formal representation
- Pay and display ticket or paid by phone parking session
- Notice to owner(s)
- Blue badge evidence to support a challenge to a penalty charge notice
- Formal parking enforcement
- Images of your vehicle in support of the serving of penalty charge notices
- Images of you [and audio recording] if the civil enforcement officer has activated their body worn video camera
Our lawful bases for processing your personal information are:
- Our legal obligation(s) under the Road Traffic Regulation Act 1984
- Our legal obligation(s) under the Traffic Management Act 2004 in the public interest
- In the exercise of official authority vested in us as the data controller (under the Civil Enforcement of Parking Contraventions (England) General Regulations 2007 and Civil Enforcement of Parking (Representations and Appeals) (England) Regulations 2007
Reasons for processing your personal data
Some of the information that is collected and shared is classified as:
- Special category personal data, for example, health related personal information
- Criminal convictions and offences (including alleged offences)
This is processed for reasons of substantial public interest under the laws that apply to us (see above) where this helps to meet our broader social obligations such as where it is necessary for us to fulfil our legal obligations and regulatory requirements. We have a data protection policy that sets out how this information will be handled.
Our cashless mobile app parking service is provided by MiPermit. When you register with them, you will be asked for your credit or debit card details and your vehicle.
Your vehicle registration number will be notified to the civil enforcement officer(s) who enforce the area in which you have parked.
Who we share your personal data with
We may :
- Share information with the traffic penalty tribunal
- Challenge chargeback claims and share your information with debit / credit card companies
- Collect your personal information from the DVLA and share information with enforcement agencies for enforcing parking contraventions or with our agents during the course of debt collection
- Ask Essex County Council to provide an authenticated copy of a blue badge where you challenge our penalty charge notice. Your information may also be disclosed to third parties to aid with the detection and prevention of non-criminal acts that are nevertheless unlawful
- Also rely on a number of exemptions which allow us to share information without needing to comply with all the rights and obligations under the Data Protection Act 2018
How long we keep your personal data
We keep your personal information for the minimum period necessary.
The information outlined in this privacy notice will be kept for 2 years from the date of the file closure unless exceptional circumstances require longer retention, for example, a pending court case.
All information will be held securely and disposed of confidentially.
Under the General Data Protection Regulation (GDPR), you have various rights as an individual that you can exercise in relation to the information that the council holds about you. Information about these rights is available in our data protection policy.
How to make a complaint
If you are unhappy with the way in which your personal data is processed by Epping Forest District Council you should contact the Data Protection Officer in the first instance:
If you remain dissatisfied with the council’s processing of your personal data, you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at:
The ICO’s address:
Information Commissioner’s Office
Cheshire SK9 5AF
- Helpline number 0303 123 1113
- ICO website