PRIVACY POLICY

WHO WE ARE AND HOW TO CONTACT US

For the purpose of the Data Protection Laws, the data controller is Key Parking UK Limited, registered company number 9345774. If you want more information about our privacy policy or information regarding data protection, you should contact us using the details provided below:

         FAO: Data Protection Officer
         Key Parking UK Ltd
         Edmund House
         12 - 22 Newhall Street
         B3 3AS.

         You can listen to our privacy policy on:  0330 838 0273
         You can email us at:  dataprotection@keyparkinguk.com
         You can ask to speak to our Data Protection Officer on: 0845 643 6271

THE DATA WE COLLECT ABOUT YOU

Key Parking UK Ltd (hereafter referred to as "the operator") are committed to protecting personal data and complying with relevant legislation. It is recognised that the operator is a data controller as described under relevant legislation covered by the Data Protection Act 2018 and the General Data Protection Regulations (GDPR) and therefore processes and stores personal data in relation to the enforcement of Parking Charge Notices.

Entry into the car park may result in your personal data being obtained, retained and processed. The data processed may be inclusive of (but not limited to) the vehicle registration mark, time, movements of the vehicle and address of the keeper and/or driver of the vehicle, photographs of you and your vehicle and any other data that may be relevant to a dispute over the use of the car park.

Personal data may be provided willingly and freely by the data subject through the representations procedure. This includes names and addresses, but may include sensitive personal data such as health information for appeals based in mitigation. Data is retained, again, for the legitimate interests of the operator and the operator's clients.

The purposes for which the data is processed is as follows:

• To ensure compliance with your obligations under the contract entered into when you entered and remained on the land.
• For the legitimate purposes of pursuing the driver and/or any other party who may become liable for payment of any fees.
• To protect our client's rights as owners of private land.

Our lawful basis for processing data is:

• "Contract "- Processing is necessary for the performance of a contract with the data subject or take steps to enter into a contract.
• "Legitimate interests" - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

           a) The pursuance of unpaid parking charges and related enforcement.                            
           b) Legitimate interests of our client(s) in the protection of their rights as landowners.
  

• "Consent" - the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

            Where there is a fee which is payable we may seek personal details of the registered keeper of the vehicle from the 
            DVLA and other third parties (for example the registered keeper or hire companies where applicable) who may possess information 
            which could assist in resolving any dispute.
            

We may also share your data with:

• The British Parking Association for the purpose of audit of our car park management service.
• The Payment Processor for processing any online payments.
• The driver vehicle licence agency (DVLA) for the purpose of audit of our car park management service.
• The Parking on Private Land Appeals (POPLA) Service for the purpose of assessing your appeal.
• Print and mail service providers for the purpose of responding to your appeal by post.
• Email service providers for the purpose of responding to your appeal by email.
• Credit reference agents for the purpose of ensuring we are writing to you at your most recent correspondence address, if you have not replied to other correspondence.
• Collection agents for the purpose of enforcing a parking contract.
• Solicitors for the purpose of enforcing a parking contract or responding to a legal query; or any other duly authorised sub-contractors, and that they are all duly authorised processors of that data for the purposes intended.

THIRD PARTIES

We will keep your information within the "organisation" except where disclosure is required or permitted by law or when we use third party service providers (data processors) to supply and support our services to you. We have contracts in place with our data processors. This means that they cannot do anything with your personal data unless we have instructed them to do so. They will not share your personal data with any organisation apart from us. They will hold it securely and retain it for the period we instruct.

YOUR RIGHTS

• To be informed: We must make available this privacy notice with the emphasis on transparency over how we process your data.
• Access: You are entitled to find out what details we may hold about you and why.
• Rectification: We are obliged to correct or update your details.
• Erasure: This is also known as the request to be forgotten
• Restrict processing: You have the right to block or suppress the processing by us of your personal data.
• Restrict processing: You have the right to block or suppress the processing by us of your personal data.
• Data portability: You have the right to obtain and reuse your personal data that you have provided to us.
• Object: You have the right to object to us processing your data in relation to direct marketing and or profiling.

As a data subject, you have the right to request all personal data held regarding yourself and your vehicle through a Subject Access Request. This request must be made in writing either to the operator's postal address or via email directly to the Data Protection Officer. A Subject Access Request will be fulfilled upon receipt of proof of identity. The fulfilled request will be sent by Royal Mail first class post to the provided address and completed within one month of receipt.

Please note that Subject Access Requests are free of charge, except if the request is manifestly unfounded or excessive, particularly if repetitive. The operator may refuse to comply with the request or charge a reasonable administration fee of £10.00.

Please also contact us (either by post or email), with proof of identification and any relevant information such as reference numbers, if you:

• Object to your personal data being processed.
• Believe the data we hold on you is incorrect and would like to have it amended.
• Believe the data we hold on you is incorrect and would like to have it amended or deleted.
• Would like to restrict how we process the data we hold about you.

Please note that you have the right to request the above; however, we reserve the right to deny or object to the request; if this is the case, we will inform you of our decision and the reasons behind it within 30 days of receiving the request.

If you feel that your data has been processed unfairly or unlawfully, you may complain to the Information Commissioners Office (ICO) at www.ico.org.uk

For further information on your rights as a data subject, please refer to the ICO (website as above) and the text of the General Data Protection Regulations 2018.