We respect and are committed to protecting your privacy. That is why we have adopted this Privacy Policy. This policy explains how we collect, store and use personal data when you visit our website, when you enter into dialogue or a transaction with us and when we are processing personal data in accordance with the services we provide. It also describes the types of data we collect, how we use this data to ensure we provide relevant and timely services to you, and your rights to control our use of that data. This policy lays out our specific commitments, in compliance with and beyond the General Data Protection Regulation (commonly known as the GDPR) and the associated Data Protection Act.
This policy only covers your personal identifiable information on this website or any other websites (Where2moor/Snap-park/DE-Permits) and personal data that we process. There are many links on our website to third party sites beyond our control, and we suggest that you always check the privacy policies of these sites before using them. Also, this policy does not cover the personal data processing activities of anyone for whom we process personal data as a data processor, i.e. in accordance with their instructions.
By visiting this or our other websites, and in providing any personal data about yourself to us, you are confirming that you have read, understood and accept our policies and practices. If you are at all uncertain about any aspect of our policies and practices, please contact us and refrain from using this website.
Your personal information
Collecting specific and relevant personal data is a necessary part of us being able to provide you with any services you may request from us or in providing services to our Clients.
We will only use your personal data for the legitimate purpose for which it was collected, and we will do this in a fair and in a secure and transparent manner. We will never use your personal data for any other purpose unless you have clearly agreed to it, or it is necessary for legitimate interests. When we hold or use your personal data as a data controller we provide to you a privacy notice which sets out in detail how your personal data may be used and the reasons for these uses, together with details of your rights. Where we collect personal data from you directly, we will provide this privacy notice at the time we collect the personal data from you. Where we receive your personal data indirectly, we will provide this privacy notice when we first contact you or within a month, whichever is earlier.
We will only provide this privacy notice to you once, generally at the start of our relationship with you as a data controller. However, if the applicable privacy notice is updated, then we will provide you with details of the updated version.
Data Controllers/Data Processors
Please note that where we are processing your data on behalf of a third party in many cases we will only process your data as a data processor, i.e. someone only processing data in accordance with the instructions of another person. This is usually as a data processor of one of our customers. In these cases, we will not process your personal data as a data controller, i.e. someone is able to control and decide how personal data is used.
This distinction is important. You have certain rights in relation to your personal data, for example the right to be provided with the personal data held about you and details of its use and the right to have certain of your personal data either erased or anonymised, commonly referred to as the right to be forgotten. These rights can generally only be exercised against a data controller of your data. In some cases, this means that you cannot exercise these rights against us directly (i.e. where we only act as a data processor), but you can do so against the data controller (i.e. the person who controls how we process the personal data). In these cases we will endeavour to inform you who is the data controller of your personal data so that you can direct any such requests to them.
Also it is only a data controller that will provide you with a privacy notice about your personal data, so where we process your personal data as a data processor for a third party, that third party should provide you with a privacy notice which will set out details regarding the processing of your personal data, which should also include the processing to be carried out by us on their behalf.
Privacy
We respect your privacy and take additional steps safeguard your personal data. We always aim to treat personal data with respect, and to treat it as we would wish our own personal data to be treated and to keep it secure. We do not sell personal data to third parties.
What personal data do we collect?
You will be asked for personal data such as your name, address and email address when you register an appeal, make an enquiry or order products and services from us.
We also collect images of you and/or your vehicle when visiting the sites we operate on.
How do we use your personal data?
Where appropriate, we use your personal data to:
- enter into, or perform, a contract or arrangement;
- comply with a legal duty;
- for our own legitimate interests (such as marketing, internal record keeping, market research or to improve our products or services), provided your rights don’t override these.
This may include:
– providing you with retailer related news / reports
– letting you know about our new products and services in which you may be interested
– informing you about changes and improvements to our products and services and to this website
– for profiling and internal research purposes.
More details will be included in the privacy notice provided to you about the processing of your personal data.
If you register to receive email communications from us alerting you to news and offers, you can opt-in or out of receiving these at any time. You can do this by completing the contact us form on the Website or by sending an email to: enquiries@district-enforcement.co.uk
| Privacy Notice – Visitors to ANPR/CCTV Car Park |
Entry into the car park may result in your personal data being obtained, retained and processed. The data processed may include, the vehicle registration number, time and movements of the vehicle and images of the vehicle.
The purpose of the processing of data is twofold:
- To ensure compliance with your obligations under the contract entered into when you entered and remained on the car park and for the legitimate purpose of pursuing the driver and/or any other party who may become liable for payment of any fees.
- To deter criminal activity on the car park and help detect crimes which have been committed.
Our lawful bases for processing data is;
- The processing is necessary for a contract which has been entered into.
- There is a legitimate interest as detailed below;
a.To pursue motorists for unpaid parking tariff
b.To pursue motorist for unpaid parking charges
c.To ensure safety and security and help deter/detect crimes
Where there is a fee which is payable we may request personal details of the registered keeper of the vehicle from the DVLA and other third parties (for example the registered keeper or hire companies where applicable) who may possess information which could assist in resolving any dispute.
Where your data is obtained it will be retained for a maximum of 30 days where there is no unpaid fee. Where there is an unpaid fee the data will be held for sufficient time to enable to fee to be settled, by you or another person and resolve any dispute. However, your data will not normally be held for longer than 6 years in such circumstances. In some circumstances your data may be held for longer than 6 years. Examples of when we may hold your data for longer are;
- When there is an ongoing dispute which requires us to hold the data for longer than normal.
- Where a court order has been made allowing us to pursue outstanding money after the expiration of 6 years.
Your personal data may be shared with third parties as outlined below.
Please refer to Rights Regarding Your Personal Data for details of how to obtain information we may hold or how to enforce your rights.
Privacy Notice – Received a Notice to Keeper
If you have received a Notice to Keeper from us, then we have obtained the name and address of the registered keeper of the vehicle from the DVLA for the purposes of enforcing the unpaid charge as set out in the notice. If you are not the registered keeper then we may have obtained your details from the registered keeper who has identified you as the keeper of the vehicle on the time and date of the parking event.
The purpose of the processing of data is:
- To ensure compliance with your obligations under the contract entered into when you entered and remained on the car park and for the legitimate purpose of pursuing the driver and/or any other party who may become liable for payment of any fees.
Our lawful bases for processing data is;
- The processing is necessary for a contract which has been entered into.
- There is a legitimate interest as detailed below;
a.To pursue motorist for unpaid parking charges
Your data will be retained for sufficient time to enable the fee to be settled, by you or another person and resolve any dispute. However, your data will not normally be held for longer than 6 years in such circumstances. In some circumstances your data may be held for longer than 6 years. Examples of when we may hold your data for longer are;
- When there is an ongoing dispute which requires us to hold the data for longer than normal.
- Where a court order has been made allowing us to pursue outstanding money after the expiration of 6 years.
Your personal data may be shared with third parties as outlined below.
Please refer to Rights Regarding Your Personal Data for details of how to obtain information we may hold or how to enforce your rights.
| Privacy Notice – Visitors to Mooring Sites |
Arrival at our Moorings Sites may result in your personal data being obtained, retained and processed. The data processed may include, the vessel registration number, Vessel Name, Vessel Licence Number, time and movements of the vessel and images of the vessel.
The purpose of the processing of data is twofold:
- To ensure compliance with your obligations under the contract entered into when you moor and remained on the managed land and for the legitimate purpose of pursuing the vessel user and/or any other party who may become liable for payment of any fees.
- To deter criminal activity on the managed land and help detect crimes which have been committed.
Our lawful bases for processing data is;
- The processing is necessary for a contract which has been entered into.
- There is a legitimate interest as detailed below;
a.To pursue vessel users for unpaid mooring tariffs
b.To pursue vessel users for unpaid mooring charges
c.To ensure safety and security and help deter/detect crimes
Where there is a fee which is payable we may request personal details of the registered owner of the vessel from the Licensing Authority and other third parties (for example the registered owner or hire companies where applicable) who may possess information which could assist in resolving any dispute.
Where your data is obtained it will be retained for a maximum of 30 days where there is no unpaid fee. Where there is an unpaid fee the data will be held for sufficient time to enable to fee to be settled, by you or another person and resolve any dispute. However, your data will not normally be held for longer than 6 years in such circumstances. In some circumstances your data may be held for longer than 6 years. Examples of when we may hold your data for longer are;
- When there is an ongoing dispute which requires us to hold the data for longer than normal.
- Where a court order has been made allowing us to pursue outstanding money after the expiration of 6 years.
Your personal data may be shared with third parties as outlined below.
Please refer to Rights Regarding Your Personal Data for details of how to obtain information we may hold or how to enforce your rights.
Privacy Notice – Received a Mooring Charge Notice
If you have received a Mooring Charge Notice from us, then we have obtained the name and address of the registered owner of the vessel from the Licensing Authority (the Environment Agency or the Canal and River Trust) for the purposes of enforcing the unpaid charge as set out in the notice. If you are not the registered owner then we may have obtained your details from the registered owner who has identified you as the user of the vessel on the time and date of the mooring event.
The purpose of the processing of data is:
- To ensure compliance with your obligations under the contract entered into when you moored and remained on the managed land and for the legitimate purpose of pursuing the vessel user and/or any other party who may become liable for payment of any fees.
Our lawful bases for processing data is;
- The processing is necessary for a contract which has been entered into.
- There is a legitimate interest as detailed below;
a.To pursue the vessel user for unpaid mooring charges
Your data will be retained for sufficient time to enable the fee to be settled, by you or another person and resolve any dispute. However, your data will not normally be held for longer than 6 years in such circumstances. In some circumstances your data may be held for longer than 6 years. Examples of when we may hold your data for longer are;
- When there is an ongoing dispute which requires us to hold the data for longer than normal.
- Where a court order has been made allowing us to pursue outstanding money after the expiration of 6 years.
Your personal data may be shared with third parties as outlined below.
Please refer to Rights Regarding Your Personal Data for details of how to obtain information we may hold or how to enforce your rights.
| Privacy Notice – Issued with a Fixed Penalty Notice |
If you have been issued with a Fixed Penalty Notice (FPN), then we have obtained your personal data to verify your identity and issue the FPN on behalf our Clients, namely Local Authorities. We retain this information until the FPN has been settled or challenged, or the matter has been processed through the Courts.
Our Officers wear Body Worn Cameras for the purpose of safety and for the purpose of accountability and evidence gathering. These cameras only become active once an offence has been identified and recording is terminated at the end of the issuance of each FPN. All footage is encrypted and is stored on secure servers within the UK. Our retention periods are outline herein and are proportionate for the purpose of issuing FPNs and handling complaints.
The purpose of the processing of data is:
- To verify your identity and issue the FPN for offences under Environmental Protection Legislation and similar legislation. Where the FPN is not paid, we process the data to enforce the FPN via the Courts.
Our lawful bases for processing data is;
- Legal Obligation to enforce FPNs issued under Environmental Protection legislation and under Public Spaces Protection Orders.
- Where we process personal data on behalf of our Clients, namely Local Authorities, the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Your data will be retained for sufficient time to enable the FPN to be settled and resolve any dispute. However, your data will not normally be held for longer than 6 years in such circumstances. In some circumstances your data may be held for longer than 6 years. Examples of when we may hold your data for longer are;
- When there is an ongoing dispute which requires us to hold the data for longer than normal.
- Where a court order has been made requiring us to retain the data.
Your personal data may be shared with third parties as outlined below.
Please refer to Rights Regarding Your Personal Data for details of how to obtain information we may hold or how to enforce your rights.
Transfer of data
If we transfer personal data about you outside the European Economic Area (EEA), we will ensure that all reasonable security measures are taken and that any 3rd party processers will be required to process the data in accordance with data protection laws and we will notify you in your privacy notice if we are the data controller. However, we only currently store personal data within the European Economic Area (EEA).
Who we will disclose your personal data to
We do not sell, trade or rent your personal information to others. Where we collect your personal data directly, your details will be added to our database to process your request, and so that you can be kept up to date with relevant details relating to our products and services or to handle challenges and/or disputes against charges issued.
Your personal data may be required to be passed to a third party if they need it to fulfil your order(s)/requests for our products and services, or to execute the communications we send to you, or to process charges issued.
We may need to process your personal data where there is a legal requirement for us to do so; such as reporting accidents or where you have been involved in an incident. In such circumstances, any disclosure of these details will be strictly in accordance with Data Protection legislation.
Where we process your personal data as a data processor for a third party, then your personal data will be accessible to and may be transferred to the third party who is the data controller.
Disclosure of the information to the “Category” of third parties listed in the table below is for a legitimate aim of providing our service to our clients and in performance of our contractual obligations. We also set out in the table below, under each “Category”, non-exclusive examples of the actual third parties we may disclose your account information, together with the purpose of doing so, and the actual information we disclose (these third parties are limited by law or by contract from using the information for secondary purposes beyond the purposes for which the information was shared).
| Category | Party Name | Purpose | Data Disclosed |
| Payment Processors | Barclays Bank plc | To allow the processing of payments by BACS, credit and debit card, or cheques. Fraud checking. | Name, date of transaction, amount, currency and payer’s bank account or credit/debit card information. Some address information is used for verification purposes in the case of card payments. |
| First Data Merchant Solutions | To allow the processing of payment by credit or debit card. Fraud checking. | Name, date of transaction, amount, currency and payer’s card details/account information. Some address information is used for verification purposes. | |
| GoCardless Ltd | To allow the processing of payment by credit or debit card. Fraud checking. | Name, date of transaction, amount, currency and payer’s card details/account information. Some address information is used for verification purposes. | |
| EComm6 | To allow the process of payment by credit or debit card. Fraud checking | Name, date of transaction, amount, currency and payer’s card details/account information. Some address information is used for verification purposes. | |
| Operational Services | ZatPark | To store records of charges issued and payment history. Retain whitelist of vehicles. | Vehicle Details, Name, address, (of vehicle driver and/or registered keeper) telephone number, payment history. |
| Gladstones Solicitors | Pre-court actions and litigation. | Vehicle Details, Name, address, (of vehicle driver and/or registered keeper) telephone number, payment history. | |
| Various debt collection agencies | To pursue unpaid debt. To trace debtors prior to litigation. | Vehicle details, Name, address (of vehicle driver and/or registered keeper), telephone number or email address. | |
| International Parking Community (IPC) | To comply with our accreditation requirements and respond to complaints. | Vehicle details, Name, address, email and/or phone number. | |
| Agencies | Driver Vehicle Licensing Agency | To request current keeper’s details. | Vehicle registration, vehicle description (make, model, colour), time, date and location of charge notification. |
| Environment Agency | To request current vessel owner’s details. | Vessel registration, vessel description (make, model, colour), time, date and location of charge notification. | |
| Canal and River Trust | To request current vessel owner’s details. | Vessel registration, vessel description (make, model, colour), time, date and location of charge notification. | |
| Clients | Our Clients | To validate Parking Permit Applications. To discuss and respond to parking challenges. To add self-ticketing operatives. | Name, Address, contact details (telephone numbers, email addresses) employee, resident or other form of personnel identification in order to validate eligibility for permit issue and to communicate application and any relevant or connected payment status to Our Clients. |
Except as set out above, we shall not disclose your personal data unless obliged to, or allowed to do so by law, or where we need to do so in order to run our business (e.g. where other people process data for us). In such circumstances, we will normally put in place confidentiality or non-disclosure undertakings and other arrangements to protect your personal data.
Links
This website contains links to other websites. We are not responsible for the privacy practices of these other websites, and if you provide them with any of your personal data they will be a data controller of your personal data and you should read their own privacy policies before you provide them with your personal data. The policy described here applies only to personal data collected or processed by District Enforcement Limited.
Security
We are committed to handling all information with high standards of information security. We use computer safeguards such as firewalls and data encryption, we enforce physical access controls to our buildings and files, and we authorise access to personal information only for those employees or agents who require it to fulfil their job responsibilities. Password control applies to all data systems and we operate a strict policy on their use. All access is logged and we will not hesitate to report any suspicious or criminal activity to the Police and/or to the user’s ISP.
Rights regarding your personal data
You have a qualified right to access the data we hold about you. If you wish to do this please submit a request to:
Data Protection Officer
District Enforcement Limited
PO Box 10487
Ashby de la Zouch
LE65 9EJ
or by email to dpo@district-enforcement.co.uk
We will:
- tell you whether any of your personal data is being processed by us
- provide a description of the personal data, the reasons it is being processed, and whether it will be given to any other organisations
- provide to you a copy of your personal data and, where available, the source of the data.
We will do this within the prescribed 1-month period allowed, however, should the request involve complicated data flows across multiple systems, this time period could be extended, but we will always make contact with you at the point a request is raised.
You also have a qualified right to have your personal data either erased or anonymised, which is commonly referred to as the right to be forgotten. Again, if you wish to do this please submit a request to:
Data Protection Officer
District Enforcement Limited
PO Box 10487
Ashby de la Zouch
LE65 9EJ
or by email to dpo@district-enforcement.co.uk
We will:
- Assess what if any of your personal data is covered by the right to be forgotten
- Explain to you the reasons for any personal data which is held by us not being subject to the right to be forgotten, for example its retention is required by law
If you wish to invoke any of the other rights that you may have in relation to your personal data, for example rights to rectification, right to restrict processing, right to portability, right to object to processing and the right to object to automated decision making then you can only do so to the data controller. We may not always be the data controller of your personal data, so you may not always be able to invoke these rights against us.
Cookies
In order to provide you with the best, tailored experience, our site will need to place small text files, or ‘cookies’, on your computer.
Most cookies that we use are ‘session’ cookies and only exist for the time that you are using our site. They perform functional tasks such as remembering that you are logged in as you move from page-to-page, or to pre-load your personal details into forms to save you time.
You can set your browser to reject all cookies. Please note that if you do this then certain areas of this website may not be able to function for you. Choose a browser setting that rejects third-party cookies but allows the benign, functional ones that make the good stuff work.
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org.
Copyright
The District Enforcement, Where2Moor and Snap-Park logos and contents of this website and our other websites (including text, design and graphics) are unregistered trademarks and copyrighted materials of District Enforcement Limited. All rights are reserved.
Contact regarding this Privacy Policy
All communications regarding Information Security and Data Protection should be directed to our Data Protection Officer, at
Data Protection Officer
District Enforcement Limited
PO Box 10487
Ashby de la Zouch
LE65 9EJ
or by email to dpo@district-enforcement.co.uk
Should you wish to make a Subject Access Request or to make a request to invoke other rights, please do so by sending to the address above or directly to dpo@district-enforcement.co.uk.
