Gemini - hospital parking

Blossom1963

Hello Coupon Mad
I wrote to Gladstones - emailed on the 5th December as follows
'This email is in regards to the Letter before claim letter I have received through my door on 3rd December 2018.

I have sent a SAR to your client Gemini Parking Solutions' on 5th December 2018 and in doing so require a restriction of data processing along with my case in question to be put on hold.

Please note that I will report you and your client to the Information Commissioners Office if you refuse to put the case on hold during this short duration whilst awaiting SAR data and additionally be afforded fair opportunity in which to read the data and documents in order to narrow the issues of dispute and re-start the pre-action protocol (PAP) 30 day period.

See below my address for service along with your reference number:'

and emailed Gemini the following also on the 5th December
Subject access request (Data Protection Act 2018 / General Data Protection Regulations (GDPR) )

Please supply the data about me that I am entitled to under data protection law relating to myself.

Please also provide the following:
- ALL photos taken relating to any claim, including a close up of any signage relevant to this claim
- copy of the parking fine left on said vehicle
- evidence supporting your claim of an extra £60 due to resourcing and time spent facilitating the recovery of the charge via Gladstones Solicitors.
- all letters/emails sent and received, including any appeal correspondence earlier as this is the first communication I have received

If you need any more data from me to confirm my identity please let me know as soon as possible. It may be helpful for you to know that data protection law requires you to respond to a request for data within one calendar month.

If you do not normally deal with these requests, please pass this letter to your Data Protection Officer, or relevant staff member. If you need advice on dealing with this request, the Information Commissioner’s Office can assist you. The website is ico.org.uk or it can be contacted on 0303 123 1113.



I've not received a response from Gladstones yet but received the following reply from Gemini requesting I supply proof of my i.d. as follows:-

RE: Data Subject Access Request

Many thanks for your Data Subject Access Request received by email on 5th December 2018.

In addressing your right of access to data that we Gemini Parking Solutions London Ltd (the Data Controller) hold and are processing about you, we are required under the General Data Protection Regulation to firstly verify your identity.

To facilitate this, we would be grateful if you could provide the following;

1. An item of personal identification (e.g. Copy of passport or driving licence)
2. An item of address identification (e.g. copy of domestic bill or bank statement)

Once identification has been verified, Gemini Parking Solutions will respond to your request within 30 days. However, this could be increased to 90 days if the request(s) is/are either complex or numerous, in accordance with GDPR. If we extend the time for responding we will of course inform you.

We look forward to receiving your identification documentation whereupon, we will if verified respond to your request as outlined above

Yours Sincerely


Data Protection Officer
Gemini Parking Solutions London Ltd


Presumably I just comply?? Please advise. Thank you!!

steve1500

Which Trust

yes you have to supply them with a copy of the ID

As well as the SAR as outlined by CM also put in an FoI to the Trust asking for the Contract between them & Gemini You can make the request by email, you don't have to give you real name - but you cannot use M Mouse.

You may also want to ask them this question which is from the NHS Data Security & Protection Toolkit & is mandated on all NHS organisations by DH

"The organisation can name its suppliers, the products and services they deliver and the contract durations"

"Contracts with all third parties that handle personal information are compliant with GDPR"


Ask them what steps they have taken to ensure they have complied

You can put your house on it that they are not GDPR compliant

Blossom1963

Thanks Steve1500
The hospital is Stepping Hill, Stockport. I do actually work there too so probably best if I take the anonymity approach
Thank you for your assistance.
Just curious why do you suggest I don't put the SAR in til after 25th May?

Umkomaas

Just curious why do you suggest I don't put the SAR in til after 25th May?

That's part of Steve's 'signature' which I guess he wrote as the commencement of the SAR/GDPR facility approached. It's not in any way directly related to your case. A 'signature' appears at the foot of every post a poster makes.

Redx

as above, he meant 25 may 2018 and has not changed his signature since


he doesnt mean 25th may 2019 , so as we are past that 2018 date its now irrelevant

steve1500

Signature suitably amended.

Also ask, did they use standard NHS Contract, if not, ask for the documents authorising the use of a non NHS Contract.

A non NHS contract is supposed to be signed off by the lawyers

Blossom1963

Morning!
I have received a text message from Gladstones this morning chasing the £120 saying that I haven't responded to their Pre-Action Letter to avoid court action. Yet they clearly have as they've been able to contact me via my phone!!