Information held about you

To provide parking services, it is necessary for us to collect and hold personal information about you. The information collected and held will vary and depend on the nature of the service used. Examples of the parking services in which personal information will be gathered are:

• blue badge discount, car park season tickets, card payments for parking

This information may include:

• basic details about you and businesses your work for such as address, telephone number, email address
• your credit/debit card details if you have paid for a service by card

Who is processing your data?

All personal data held is processed in accordance with data protection law for the purposes of processing card payments in accordance with Payment Card Industry standards in a secure manner. The system data controller are listed below.

Cambridge City Council

• Process applications
• Issue car park season tickets
• Take payments for season tickets

APT Skidata

• Apply Blue Badge discounts

JustPark 

• Create customer accounts
• Take payments for parking sessions

Global payments

• Take payments for parking sessions

Credit call - NMI

• Take payments for parking sessions

Where necessary, personal information may be shared with the police or other statutory prosecuting or investigative agencies to prevent or investigate crime.

Any transfer of data between the Council and other organisations will be conducted in a secure manner.

How the law allows us to use your information

The legal basis for processing the data is:

• carrying out of a contract to which you are a party (season tickets)
• our legal obligations under the Traffic Management Act 2004
• our legal obligations under the Road Traffic Regulation Act 1984
• in the public interest or in the exercise of official authority

Who we will share your information with

We will not normally share your information with organisations without your consent. However, there may be certain circumstances where we would share without consent, such as where we are required to do so by law, to safeguard public safety, and in risk of harm or emergency situations.

We will only share the minimum information for the purpose, on a need to know basis and with appropriate individuals.

How long we keep your personal information

We will only keep your information for the minimum period necessary. The information outlined in this privacy notice will be kept for the amount of time as detailed within the parking retention schedule.

All information will be held securely and destroyed under confidential conditions.

Voice recordings

Intercom calls' voice recordings are collected and processed in our multi-storey car parks to ensure public safety, prevent and detect crimes, enhance customer service, and staff administration purposes.

If needed, personal data may be shared with law enforcement or security agencies to prevent or investigate crimes. Data transfers between the Council and external parties will be carried out securely. Voice recordings are retained for up to 30 days.

Lawful condition

The legal grounds for processing your data may vary based on factors such as payment methods and parking enforcement actions. The primary basis will typically be contractual necessity – this is provided under Article 6 (1)(b) of GDPR which states "processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract."

Enforcement actions are provided for under Article 6 (1)( e) of GDPR which states "processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller."

Your data rights

You possess a range of rights concerning the data held about you:

• Right of access (to receive a copy of your personal data)
• Right to rectification (to request data is corrected if inaccurate)
• Right to erasure (to request that data is deleted)
• Right to restrict processing (to request we don’t use your data in a certain way)
• Right to data portability (in some cases, you can ask to receive a copy of your data in a commonly used electronic format so that it can be given to someone else)
• Right to object (generally to make a complaint about any aspect of our use of your data)
• Right to have explained if there will be any automated decision-making, including profiling, based on your data and for the logic behind this to be explained to you.

Any such request can be submitted to the Data Protection Officer. Whether we can agree to your request will depend on the specific circumstances and if we cannot then we will explain the reasons why.

Retention of your personal information

We retain your information as required by law or for specific purposes. More details can be found in our retention policy [PDF, 0.2MB].

Contact and further information

Cambridge City Council is a registered data controller with the Information Commissioner’s Office.

For more insights into how we handle your data, please review our privacy notice. If you have questions about your rights, contact our Data Protection Officer at infogov@3csharedservices.org.

If you believe any aspect of this statement is unlawful, you have the right to file a complaint with the Information Commissioner’s Office (ICO).

CCTV Surveillance

CCTV images are being recorded across all of our multi-storey car parks to ensure public health and safety, and the prevention and detection of crime. The system data controller is Huntingdonshire District Council.

Where necessary, personal information may be shared with the police or other statutory prosecuting or investigative agencies to prevent or investigate crime. Any transfer of data between the Council and other organisations will be conducted in a secure manner.

CCTV recordings are retained for a maximum of 31 days and automatically overwritten unless downloaded for permitted purposes. More info can be found the Huntingdonshire District Council Shared CCTV scheme page.

Civil Enforcement

Our car parks are monitored by Civil Enforcement Officers who utilise handheld and body worn cameras to enforce parking terms and conditions in line with The City of Cambridge (Off-street Traffic Regulation Order). The system data controller is Cambridgeshire County Council.

In cases of non-compliance with parking Traffic Regulation Order, personal data might be collected, processed, shared, and retained to fulfil public duties and legal obligations.

This may include obtaining vehicle ownership details from the DVLA for issuing Penalty Charge Notices, sharing with third parties for appeals and enforcement, and cooperating with law enforcement for crime prevention and detection. More information can be found on the Cambridgeshire County Council Privacy Notice page.