This privacy notice is intended for persons in Cardiff who utilise the Council's digital services through our provider MiPermit. Cardiff Council is the Data Controller for the purpose of the information collected.
What data do we collect and why?
Cardiff Council may collect the following data in order to provide our digital parking services:
- Full name and address.
- Council Tax or Business Rates reference (as proof of residence/eligibility).
- Email address.
- Phone number.
- Vehicle registration mark.
- Parking location and arrival time (if applicable).
- Any data that is provided as evidence to confirm eligibility for a permit or other parking service.
- Whether you would like to sign up to our parking updates service.
This is collected for the purpose of providing you with digital parking services such as the ability to purchase and issue you with electronic “e-permits", car park season passes or pay for parking charges without the need to buy and display a pay and display ticket from a ticket machine (cashless parking).
Your information may also be used to monitor the effectiveness of our services, monitor and enforce parking, bus lane and moving traffic contraventions, and ensure the service is not misused.
How do we collect your data?
We collect your data when you provide your data to our third-party supplier, MiPermit.
We also collect data when you make enquiries on our website through the live chat. Written content submitted through our customer service ChatBot (Bobi) in Welsh will be processed by Google Translate in order to derive an English text equivalent for content recognition.
This means that any information entered in Welsh is also subject to the data processing terms of Google Translate.
The legal basis for our use of your personal data
Cardiff Council holds personal data about you in its capacity as data controller. We process your personal data to carry out a task in the public interest.
The processing of this data helps us to comply with our legal obligations as a Local Authority, under the Road Traffic Regulation Act 1984 (RTRA 1984) and the Traffic Management Act 2004, to manage and regulate the use of public highway, which includes managing parking within the Local Authority's Area.
Part IX s.115(2) of the RTRA 1984 makes it a criminal offence to knowingly make a false statement for the purpose of procuring any permit either for the applicant or for any other person. The processing of this data helps us comply with our requirements to ensure that no offences are being committed.
How will we use your data?
- Personal data provided when using our digital parking services may be used in order to:
- Allow you to make cashless payments of any parking charges that may be due at participating locations.
- Allow eligible persons to apply for and pay for electronic “e-permits" (of any kind) and car park season passes.
- Check eligibility to whether you can apply for a certain type of e-permit.
- Process applications for e-permits to ensure any limits on the number of e-permits are not exceeded.
- Contact you if any issues arise out of an application you have submitted for any of our digital parking services.
- Calculate any sums payable for a permit, season pass, cashless stay or other paid- for parking service we provide.
- Identify any misuse of e-permits, or breaches of any terms and conditions that you agree to at the time of application/purchase.
- Identify fraud or other offence relating to the obtaining or misuse of a permit, and to aid in any investigations or legal proceedings that may be instigated/taken as a result of any
alleged offence.
- Conduct statistical analysis, the results of which may be published from time to time, in particular as part of the statutory requirement for us to publish our Annual Parking Report, or
used for the promotion of the digital parking services we provide.
- Assist in any process relating to the civil enforcement of parking, bus lane and traffic contraventions under the Traffic Management Act 2004.
- Assist in providing evidence for any enforcement proceedings that may result from the issuing of Penalty Charge Notices (PCNs).
Parking permit data may be used when a permit exists to prove an exemption to a traffic restriction e.g. streets where only residents can enter during restricted times.
We also may offer you the opportunity to sign up to our parking updates service. If you choose to sign up, we may use this service to send you various communications about parking in Cardiff through your preferred and selected options (email and/or SMS text).
This service may send you communications such as:
- Cardiff Council parking newsletters.
- Updates on changes to parking in your area, such as notifications of new parking restrictions being introduced.
- Notifications of important consultations being undertaken.
- Updates on changes to the MiPermit service we provide, such as notifications of changes in terms and conditions.
- Information on other parking related matters that relate to Cardiff Council's parking services.
You can opt out of this service at any time online through your MiPermit Account settings, or by emailing: parking.permits@cardiff.gov.uk.
How long do we store your data?
Your data is only kept for only as long as required in order to fulfil legal requirements, contractual obligations and to protect our legitimate interests. The information we collect regarding your use of our digital parking services will be kept for a maximum duration of 7 years, following which it is automatically securely deleted.
Who do we share your data with?
When using our digital parking services your data is processed via MiPermit, a third-party company. This means they act as a Data Processor on our behalf and data is temporarily stored on their servers.
Data may also be shared with Experian or the DVLA where it is necessary for us to obtain data on your vehicle, such as the registered emissions of your vehicle, to ensure we correctly calculate the required payment amounts, or to check the class or weight of your vehicle to ensure that it is eligible for a particular permit type.
The results of statistical analysis may also be published in Annual Parking Report, the compilation of which is a statutory requirement. Where appropriate, these results may also be published to promote ours or MiPermit's services.
Cardiff Council has implemented the necessary security measures to ensure compliance with current data protection legislation, including a Data Sharing Agreement and relevant impact assessments.
All information is held and transmitted only in accordance with current data protection legislation and Cardiff Council's data protection policy. For further information on how MiPermit process personal data, view their privacy policy.
What are your data protection rights?
Cardiff Council would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access
You have the right to request Cardiff Council for copies of your personal data.
The right to rectification
You have the right to request that Cardiff Council correct any information you believe is inaccurate. You also have the right to request Cardiff Council to complete the information you believe is incomplete.
The right to erasure
You have the right to request that Cardiff Council erase your personal data, under certain conditions.
The right to restrict processing
You have the right to request that Cardiff Council restrict the processing of your personal data, under certain conditions.
The right to object to processing
You have the right to object to Cardiff Council's processing of your personal data, under certain conditions.
The right to data portability
You have the right to request that Cardiff Council transfer the data that we have collected to another organization, or directly to you, under certain conditions.
Additional Privacy Notices
For further information on how Cardiff Council processes personal data, please see the full Privacy Notice.
For further information on how MiPermit process personal data, view their privacy policy.
Changes to our Privacy Notice
Changes to our Privacy Notice can occur at any time in order to reflect updates in existing legislation, best practice and guidance from the Information Commissioner's Office. These changes are published on our website.
For general parking enquiries you should first see our website. If you cannot find what you are looking for you can also call 029 2087 2087.
How to contact Data Protection
If you have any questions about Cardiff Councils privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us by post:
Data Protection Officer,
Information Governance Team,
County Hall,
Atlantic Wharf,
Cardiff,
CF10 4UW
Or via email at dataprotection@cardiff.gov.uk.
How to contact the appropriate authority
Should you wish to report a complaint or if you feel that Cardiff Council has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner's Office: 0303 123 1113.