June 2018 - start of the new PPC and DVLA fightback (GDPR related)

jeremiahjingle

Got this email reply from BW Legal after submitting a SAR:

Good Afternoon

Thank you for contacting BW Legal, before we are able to reply we need you to confirm a few Data Protection Questions which we have specified below to allow us to be able to locate your details as you have not provided us with any further details.

We also need confirmation from you that this is your authorised email address and that you wish us to correspond with you via this address?

Full Name:

Full Address & Postcode:

DOB:

Telephone Contact Number:

Authorised Email address:

Alternatively, please contact our offices on 0113 323 4497 to discuss this matter further.

They already have my name and address. There's no way I'm giving them my phone number. Is it reasonable to ask for DOB? What could they possibly need that for?

abedegno

I assume BWLegal have contacted you by post, but you requested the SAR by email. BWLegal are quite rightly trying to make sure the same person who sent the email is the same on they have been writing to by post.

Whenever I make a SAR by email I normally send a copy of my driving license as proof of identity.

beamerguy

jeremiahjingle ....

just reply with your name and address as per your car registration document.

No phone number, no copies of bills etc etc.

They already have your name an address and that's all they get

BWLegal CANNOT be trusted with personal info

Pirate_Parker

https://forums.moneysavingexpert.com/discussion/5934530premier+parking+solutions#6

After reading this post I was wondering if the GDPR thread and newbies guides could be updated to inform people that while these companies hide behind a PO box rather than use their own business addressed their actual addresses are located on the companies house website.

Example, Premier Parking Solutionds Ltd has a PO box but on company's house you can see their registered address is 13 Devon Square Newton Abbot.

https://beta.companieshouse.gov.uk/company/06659134

Computersaysno

jeremiahjingle wrote: »

Is it reasonable to ask for DOB? What could they possibly need that for?

The ICO issued great advice on this 'we need more info before we can release your SAR'...and is basically says that whatever info they used to first contact you is all that you need to give them to get your SAR.


So for parking scum it should be no more than the RK details and the Car reg...possibly at a stretch a copy of the V5...

sparkyhx

Reply from HX-Car-Park-Management

They supplied everything already exchanged between us, but nothing extra not even any 'communication' to Gladstones solicitors.

However they go on to say,

we provide you with blah blah re the PCN. which equates to all personal data we hold on yourself.

We do not hold any other personal data for yourself. except in relation to the above Parking Charge Notice.

So unless they immediately delete all photos if there is no infringement (we probably enter the car park weekly) I don't see how there can be no other data.


What do you reckon? There are a few other things they have not supplied - but this one raises the most questions.

Umkomaas

Go back to them with a list of the other data they might potentiall have, so you paint them into a bit of a corner. Further denial or refusal - you carefully pen your complaint to the ICO.

steve1500

jeremiahjingle wrote: »

Got this email reply from BW Legal after submitting a SAR:

Good Afternoon

Thank you for contacting BW Legal, before we are able to reply we need you to confirm a few Data Protection Questions which we have specified below to allow us to be able to locate your details as you have not provided us with any further details.

We also need confirmation from you that this is your authorised email address and that you wish us to correspond with you via this address?

Full Name:

Full Address & Postcode:

DOB:

Telephone Contact Number:

Authorised Email address:

Alternatively, please contact our offices on 0113 323 4497 to discuss this matter further.

They already have my name and address. There's no way I'm giving them my phone number. Is it reasonable to ask for DOB? What could they possibly need that for?

Since part of my day job is advising on complex SAR's I have one word - Rollocks

Could I also suggest that when anyone puts in a complaint to the ICO, also make it clear the pondlife have not complied with Article 13 of GDPR

They are getting the info from DVLA by breaking the law.

We all know they have form for breaking the law

Castle

sparkyhx wrote: »

So unless they immediately delete all photos if there is no infringement (we probably enter the car park weekly) I don't see how there can be no other data.


What do you reckon? There are a few other things they have not supplied - but this one raises the most questions.

They will still have to keep a record of your entry and exit times for each visit as it's required for accounting purposes because the driver is entering into a different contract each time they visit.

nigelbb

Castle wrote: »

They will still have to keep a record of your entry and exit times for each visit as it's required for accounting purposes because the driver is entering into a different contract each time they visit.

Plus it could be a different driver each time.