SAR Request - Premier Parking Enforcement

Brummie4life

I received a letter before claim from Gladstones so I submitted SAR request to Premier Parking as follows:-

Please advise as to the following:

1.    Please confirm to me whether or not my personal data is being processed. If it is, please provide me with the categories of personal data you have about me in your files and databases.

a.    In particular, please tell me what you know about me in your information systems, whether or not contained in databases, and including e-mail, documents on your networks, or voice or other media that you may store.

b.    Additionally, please advise me in which countries my personal data is stored, or accessible from. In case you make use of cloud services to store or process my data, please include the countries in which the servers are located where my data are or were (in the past 12 months) stored.

c.    Please provide me with a copy of, or access to, my personal data that you have or are processing.

2.    Please provide me with a detailed accounting of the specific uses and lawful basis that you have made, are making or will be making of my personal data.

3.    Please provide a list of all third parties with whom you have (or may have) shared my personal data.

 .      If you cannot identify with certainty the specific third parties to whom you have disclosed my personal data, please provide a list of third parties to whom you may have disclosed my personal data.

a.    Please also identify which jurisdictions that you have identified in 1-1 above that these third parties with whom you have or may have shared my personal data, from which these third parties have stored or can access my personal data. Please also provide insight in the legal grounds for transferring my personal data to these jurisdictions. Where you have done so, or are doing so, on the basis of appropriate safeguards, please provide a copy.

b.    Additionally, I would like to know what safeguards have been put in place in relation to these third parties that you have identified in relation to the transfer of my personal data.

4.    Please advise how long you store my personal data, and if retention is based upon the category of personal data, please identify how long each category is retained.

5.    If you are additionally collecting personal data about me from any source other than me, please provide me with all information about their source, as referred to in Article 14 of the GDPR.

6.    If you are making automated decisions about me, including profiling, whether or not on the basis of Article 22 of the GDPR, please provide me with information concerning the basis for the logic in making such automated decisions, and the significance and consequences of such processing.

 The response received back with 5 attachments, two of which were the front and back of the PCN and the remaining 3 were pictures of the vehicle (with me visible in one of them) the remaining two were as on the PCN. The response was as follows:-

Premier Parking Enforcement are a Parking Enforcement Company. We obtain and share personal data as far as any parking charge notice remains unpaid. 

 Data sharing will be disclosed between a number of organisations all of whom have a responsibility to comply with the current Data Protection including fairness provisions. These may include Direct Collection Bailiffs Ltd and Gladstone Solicitors Ltd and any other debt or court organisations we work with.

 The processing is necessary in relation to a contract which the individual entered into.

 All data is held on secure databases.

 - All photographic evidence enclosed.

- Data held name, address, photographs of vehicle

- email requesting subject access request along with relevant identification.

 With regards to your data held with other companies ie Independent appeals, online payment companies, you will need to contact them yourself and request the data held”.

Sorry for the long post but my question is has the parking company complied with the SAR and if not what should I say back to them.

Also my next step is to request the same from Gladstones, only because following the letter from them, I also received a text message and am a bit concerned as to where they got my telephone number, which I haven’t divulged to anyone.

Umkomaas

Sorry for the long post but my question is has the parking company complied with the SAR and if not what should I say back to them.

Question better raised with the ICO. 

Also my next step is to request the same from Gladstones, only because following the letter from them, I also received a text message and am a bit concerned as to where they got my telephone number, which I haven’t divulged to anyone.

They will have used a trace agency. We've seen many puzzled motorists asking similar questions. Send you SAR, and ask Gladstones the specific question.

Castle

Brummie4life said:

I received a letter before claim from Gladstones so I submitted SAR request to Premier Parking as follows:-

Please advise as to the following:

6.    If you are making automated decisions about me, including profiling, whether or not on the basis of Article 22 of the GDPR, please provide me with information concerning the basis for the logic in making such automated decisions, and the significance and consequences of such processing.

I don't see an answer to this question.