Privacy Policy

The purpose of this Privacy Policy is to let you know what to expect when Parking Group Limited (company number 12424996) collect your personal information.

This privacy policy explains how we will use any personal data we collect from you, or that you provide to us, to provide parking services.

This privacy policy aims to give you information on how we collect and process your personal data, including any data collected when you enter or remain at one of our car parks, contact us in any way or use our services. This privacy policy supplements other notices about privacy.

What do we do?
We are a data controller and offer a complete range of solutions for car parking on private land throughout the UK.

What data do we collect?
We collect images of your vehicle, vehicle registration mark (VRM) and occupants either by ANPR, CCTV or Parking Attendant. When there is a requirement for us to issue a Parking Charge, your name, address, VRM and vehicle movements within the parking area will be processed.
We also collect personal data from those employees of our clients authorised to access our parking management portal.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

VRM, images of your vehicle;
First name, last name; employee status (if employee of a client authorised to access our portal)
Address, email address and telephone numbers;
Payment details; limited to the method and amount of the payment; we do not store any bank or credit card details.
Any information you provide to us in correspondence;
Cookies, IP information;
Details of your marketing and communication preferences;
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). However, if you provide us with any of this information, for example within correspondence or as part of an Appeal, we will treat it accordingly.
All information we collect and receive about you will be processed in accordance with this policy.
How do we collect your data?
Images collected via ANPR,CCTV or parking attendant;
Information provided via a client portal (for permit parking only);
Where terms and conditions of parking have not been complied with by requesting registered keeper details of your vehicle from the DVLA;
From our clients who employ you and authorise you to assist with car park management by accessing our Portal;
You may give us your personal data when you make an appeal or contact us for any other reason; and
We collect personal data by using cookies on our website.
What is our Lawful Basis for processing your data?
We process your data as it is necessary under the following lawful bases for processing personal data:
Contract – Processing is necessary for performance of the parking contract which has been formed when you entered and remained in the parking area;
Legitimate Interests – Processing is required to protect and enable pursuit of legitimate interests in ensuring the car park is effectively managed; pursuing unpaid parking tariffs, charges and sums due; the prevention and detection of crime including the investigation and validation of insurance claims; Vehicle and traffic analytics, and and promoting the safety and security of the parking area.

Who do we share data with and why?
We will only share data in a way that is proportionate to the purposes explained above and ensure your information is processed securely. We will only share information about you and/or your vehicle with the types of organisations listed below:
DVLA
The police and other organisations involved in crime detection and prevention
Organisations involved in investigation and validation of insurance claims
The landowner and/or their agents
Organisations involved in traffic and vehicle analytics
Our clients and suppliers
Vehicle hire companies
Debt collection agents both UK and European for enforcement
British Parking Association (BPA)
Parking on Private Land Appeals (POPLA)
Internal departments
This data is processed for the purpose of
Ensuring compliance with our parking terms, signage is displayed throughout each car park.
Issuing a Parking Charge where the parking terms have been breached.
Progressing any issued Parking Charge until payment is received
Reviewing appeals (both internal and with POPLA)
Recovery, including instructing a debt collection agency or another legal process
The prevention and detection of crime
The investigation and validation of insurance claims
Vehicle and traffic analytics
Your rights
Under the GDPR and data protection law, you have rights as an individual which you can exercise in relation to the information that we hold about you.
You have the right to access any personal information that we process about you and to request information regarding:
What personal data we hold about you
The purposes of the processing
The categories of personal data concerned
The recipients to whom the personal data has/will be disclosed
How long we intend to store your personal data for
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information, and we will strive to do so as quickly as possible, by writing to the address below in the ‘How to contact us’ section.
Access to personal information
You have the right to obtain a copy of the information that is held about you.  This is known as making a subject access request. This right of subject access means that you can make a request under the Data Protection Act 2018 to any organisation processing your personal data asking that they
Provide you with a description of it;
Tell you why they are holding it;
Tell you who it could be disclosed to; and
Let you have a copy of the information in an intelligible form
In order to request a copy of personal information that you believe we may hold about you, please contact us using the details within the ‘How to contact us’ section of this document.  There is no fee involved in making a subject access request, although a reasonable fee may be charged for duplicate, excessive or clearly unfounded requests.
Registered users – required information
Registered users access the secure portal to enter permit parking details of visitors, staff, contractors and guests, as well as view statistics on car park usage. The personal data entered on the portal is provided by the client, not collected by GroupNexus. The client obtains the consent of the individual to enter all or some of the following personal data onto the portal;
Full name;
Department;
Employee number;
Permit type;
VRM;
Make model and colour of the vehicle;
From and to dates that a parking permit covers;
Site location and department/tenant; and
Free text box for extra information entered only by the client.
On each occasion that you access the website and portal we also automatically collect:
IP address;
Web browser type and version;
Operating system;
A list of URLs starting with a referring site and the site you exit to; and
Details of all activity undertaken by you when using the website.
How long will we keep your data?
We will keep your personal data for no longer than is necessary to carry out the purposes explained above, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
Security and performance
Data security is of great importance to Parking Group Limited. To protect your data, we have put in place appropriate physical, electronic and managerial procedures to safeguard and secure data collected online.
We will keep all your information including DVLA keeper details, information provided to us by third parties, your written and electronic correspondence and telephone messages securely and confidentially. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.
We cannot guarantee the security of your data transmitted from our site; any transmission via the internet is at your own risk. Once we have received your information, we will apply our security safeguards to prevent unauthorised access.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Complaints or queries
We try to meet the highest standards when collecting and using personal information.  For this reason, we take any complaints we receive about this very seriously. We encourage you to bring it to our attention if you believe that our collection or use of your information is unfair, misleading or inappropriate.
If you want to make a complaint about the way we have processed your personal information, please do so via the contact details.  If you are not satisfied with our response, then you can contact the Information Commissioner’s Office (ICO) at www.ico.org which is the statutory body overseeing data protection law in the UK.
How to contact us
If you would like more information about how we process your data or if you wish to assert any of your rights set out above, please contact our data protection officer/ privacy team by:
Email: dpo@parking-group.co.uk.
OR
Write to us at:
Data Protection Officer
Parking Group Limited
Portland House
Belmont Business Park
Durham
DH1 1TW