Parking privacy notice - Privacy notices

What personal information do we collect?

We collect and process a range of information about you. This includes

  • your name, address and contact details, including email address and telephone number
  • your vehicle details such as its registration number, make, type and colour
  • financial information such as payment details
  • information provided in a written challenge or representation
  • photographs of your vehicle
  • video footage of your interactions with the Civil Enforcement Officers We collect this information in a variety of ways. For example, it is supplied to us by the DVLA or we receive it directly from you.
Why do we process personal data?

Processing your information is necessary for the performance of a task carried out in the public interest or in the exercise of our official authority. The Traffic Management Act 2004 allows us to process your personal data in order to regulate or enforce parking restrictions for example to issue Penalty Charge Notices (PCNs) We also consider it in our legitimate interest and in the interests of civil enforcement officers and members of the public to use body cameras to;

  • To deter and protect staff from third party aggression.
  • To provide sound and credible evidence to support prosecution should aggression occur.
  • To protect staff from unfounded allegations of inappropriate conduct and also verify when inappropriate conduct has occurred.
Who has access to your personal data?

Where necessary your information will be shared with the parties set out below for the purposes stated above.

  • the DVLA to obtain registered keeper details
  • the Traffic Penalty Tribunal when a case is appealed
  • the police to aid in their enquiries
  • commissioned partners
  • Traffic Enforcement Centre
  • Enforcement Agents

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions and data protection laws. They are also obliged to implement appropriate technical and organisational measures to ensure the security of data.

We will not transfer your data to countries outside the European Economic Area.

How do we protect personal data?
We take the security of your data seriously. The organisation has internal policies and controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees in the performance of their duties. Data will only be processed by members of staff authorised by us for this purpose. Access to our systems is limited to authorised members of the parking team whose job role requires access to the personal data.
How long do we keep your personal data?

We keep information relating to PCNs for 6 years except for information obtained from the DVLA which is only kept for 12 months.

We only keep information on residential and commercial permit holders whilst the permit is still valid.

Audible and visual footage taken via body worn cameras is automatically deleted after 56 days unless it is required to be kept longer as evidence.

Information relating to complaints is kept for a year.

Your rights

As a data subject, you have a number of rights, including access to your data. A request for access can be made via our website or by sending an email to foi@runnymede.gov.uk

Data Protection Subject Access Request(SAR) | Introduction – Runnymede Borough Council

To find out more about your rights please see the ‘Your Rights’ section of our main privacy statement

If you believe that Runnymede Borough Council has not complied with your data protection rights, you should initially try to resolve it with the relevant department.

If you are unable to resolve the issue to your satisfaction contact our Data Protection Officer (DPO) who will investigate. If you remain dissatisfied with the outcome of the DPO’s review you can make a complaint to the Information Commissioner. You can find out further information on making a complaint to the Information Commissioner on their website Information Commissioner's Office (ICO)