Advice needed on next steps - HX Car Park Management - Site 1085 Salterhebbble Halifax HX3 0QE

Umkomaas

yes, I`ve corrected this now. My suggest was to submit a SAR to gladstones in addition to HX, as its gladstones I`ve been receiving the text messages from. 

What do you intend asking Gladstones in a SAR?

nosferatu1001

Just block them. Sheesh. You know and we know how they got your number. Takes 5 minutes. 

Le_Kirk

Do not offer to give them any further information or proof of ID.  According to eh rules of GDPR you only need to submit a scan/photo of your V5C and, if you have disposed of the car since the event, a scan of the PCN.  No licence or passport!

PCN_BoBeB

Le_Kirk said:

Do not offer to give them any further information or proof of ID.  According to eh rules of GDPR you only need to submit a scan/photo of your V5C and, if you have disposed of the car since the event, a scan of the PCN.  No licence or passport!

They have responded to say that they require PCN ref and / or Vehicle registration, stating that data subjects must provide 3 parts of information. Name and address was provided in the initial SAR
please could someone confirm whether this is correct and whether I should proceed?

KeithP

You only need to provide enough information so that they can ensure that they are only sending personal information to the rightful owner.

If they have already written to you at your address, then a copy of that letter/notice will satisfy the Information Commissioner's Office that you have supplied enough information.

But as you know, this unregulated industry tries to make up it's own rules.

KeithP

Give them seven days to provide the information requested and warn them that if they fail to do so you will report them to the ICO.

Le_Kirk

PCN_BoBeB said:

Le_Kirk said:

Do not offer to give them any further information or proof of ID.  According to eh rules of GDPR you only need to submit a scan/photo of your V5C and, if you have disposed of the car since the event, a scan of the PCN.  No licence or passport!

They have responded to say that they require PCN ref and / or Vehicle registration, stating that data subjects must provide 3 parts of information. Name and address was provided in the initial SAR
please could someone confirm whether this is correct and whether I should proceed?

Nothing wrong with supplying any of that, they do have to identify the vehicle and the PCN that you are asking about.  If you want to be able to go at them all guns blazing, you could check out the GDPR and the section on SAR for your self.

nosferatu1001

As they will have retrieved the OPs name and address, they must be able to interrogate their system based on that as a key. 
Otherwise their system is not fit for purpose, and in breach of the DPA2018 (as they cannot fulfill their obligations)
For example, sending a SAR should not require you to identify the pieces of info you want them to send; theyre supposed to send all of it

PCN_BoBeB

Having received a LBC - could this be a delaying tactic to hamper my completing AOS / WS etc.
Gladstone’s have received their letter which was sent to them.

nosferatu1001

I dont know what you mean by the above? 
Have you received a new LBC? About the same incident(s)? What letter did you send Gladstones?