June 2018 - start of the new PPC and DVLA fightback (GDPR related)

steve1500

Just went to HX's website and read their process for a SAR - You have to laugh

They obviously don't realise that the Data Protection Officer has to be an expert in Data Protection!!

"A data subject should have the right of access to personal data which has been collected concerning him or her, and to exercise that right easily and at reasonable intervals.

Within the this page, you will see a form you must fill out to request your data.

We will only respond to the request if the answers you supply exactly match the data we hold. If it doesn’t, we will notify you that you have failed data protection and we can’t proceed with your request. "

abedegno

LoneStarState wrote: »

I definitely want to test the ICO with regards to Britannia's privacy policy that stipulates they will retain personal data for 7 years after the contractual relationship ends (i.e. non infringement parking).

The data that the PPCs are collecting are not contractual, they are based on legitimate interest - therefore the retention should be much, much shorter.

beamerguy

steve1500 wrote: »

Just went to HX's website and read their process for a SAR - You have to laugh

They obviously don't realise that the Data Protection Officer has to be an expert in Data Protection!!

The problem is that companies like HX are only scammers, their mentality thinks scam ...... lack of intelligence is obvious.

The parking companies must expect SAR after SAR in 2019 that includes the four dodgy legals.

Whether the ICO can cope with the complaints thereafter remains to be seen. ?

abedegno

beamerguy wrote: »

Whether the ICO can cope with the complaints thereafter remains to be seen. ?

They can cope, but only because they won't do anything. In my case where a company (not a PPC) failed to respond to a SAR the ICO advised I could bring my own action against the company using the county courts.

beamerguy

abedegno wrote: »

They can cope, but only because they won't do anything. In my case where a company (not a PPC) failed to respond to a SAR the ICO advised I could bring my own action against the company using the county courts.

I guess 2019 will keep them non busy

steve1500

The problem the ICO has is that a lot of staff left last year for some very lucrative jobs.


GDPR requires numerous organisations (not everyone)to have a Data Protection Officer, pre requisite for the job, expert in Data Protection, where better to go

abedegno

abedegno wrote: »

I've now sent an email to ParkingEye to poke the bear - if they are still non-compliant will send an LBC and see what happens

So I poked the ParkingEye bear and got a response from no other than Rachel Ledson (Commercial Director and former Head of Legal Services).

She is refusing to provide me details of ParkingEye's retention periods as they are currently under review. I have challenged her this and asked her to point me to the relevant legislation that permits an organisation to refuse to release information as required under Article 15 of GDPR because it's under review.

She also accidentally emailed me using her direct email address, which also supplied me with her direct mobile number :rotfl:

steve1500

abedegno wrote: »

So I poked the ParkingEye bear and got a response from no other than Rachel Ledson (Commercial Director and former Head of Legal Services).


She also accidentally emailed me using her direct email address, which also supplied me with her direct mobile number :rotfl:

Quite clearly knows how to look after personal information


Go on don't be embarrassed, she put it into the public domain by handing it over to a member of the public

The_Deep

Would publishing such be bad form?

steve1500

The_Deep wrote: »

Would publishing such be bad form?

Boot & other foot spring to mind.

PE are always very keen to contact Drivers / RK

Also cuts out the middle person, if you have a complaint. You can say to the ICO I contacted the top person!