Data Subjects' Information Vehicle Access Applications

To be provided to the data subject at the time of obtaining personal data from them

Data Controller

Wiltshire Council is registered as a data controller with the Information Commissioner's Office. Full details of the registration are available at ICO register of data controllers (ico.org.uk) (opens new window).

Data Controller Contact Details

We can be contacted by phone, in person or in writing.

Data Protection Officer

Our DPO may be contacted as above or online at dataprotection@wiltshire.gov.uk (opens new window).

Purpose of processing

The Vehicle Access Applications will process your personal information for the following purposes:

• maintaining our own accounts and records
• managing our property
• licensing and regulatory activities
• corporate administration and all activities we are required to carry out as a data controller and public authority
• the provision of all commercial services including the administration and enforcement of parking regulations and restrictions
• internal financial support and corporate functions
• managing archived records for historical and research reasons

Legal basis for processing

Our processing shall be lawful because at least one of the following will apply:
(a) the data subject has given consent to the Council for processing of their personal data for one or more specific purposes;

(b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

(c) processing is necessary for compliance with a legal obligation to which the Council is subject; under S184 of the Highways Act 1980

(d) processing is necessary in order to protect the vital interests of the data subject or of another natural person;

(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Council;

(f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the
data subject which require protection of personal data, in particular where the data subject is a child.

If your special category data is processed, in addition to one of the above, processing will be necessary because at least one of the following shall also apply:

(a) the data subject has given explicit consent to the processing of those personal data for one or more specified purposes,

(b) to carry out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law.

(c) to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent;

(d) processing relates to personal data which are manifestly made public by the data subject;

(e) for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity;

(f) processing is necessary for reasons of substantial public interest,

(g) processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services;

(h) for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices,

(i) for archiving purposes in the public interest, scientific or historical
research purposes or statistical purposes

Recipients or categories of recipients

Where necessary and lawful, or when required by legal obligation, we may share information with:

• customers
• family, associates or representatives of the person whose personal data we are processing
• current past and prospective employers
• educators and examining bodies
• providers of goods and services
• service providers
• financial organisations local and central government
• ombudsman and regulatory authorities
• press and the media
• professional advisers and consultants
• professional advisers
• police forces
• housing associations and landlords
• data processors
• regulatory bodies
• local and central government
• Partner agencies, approved organisations and individuals working with the police
• licensing authorities
• service providers
• press and the media
• current past and prospective employers and examining bodies
• law enforcement and prosecuting authorities
• legal representatives, defence solicitors

Retention period

Wiltshire Council will process your personal data for the above purposes for no longer than necessary. Full details of our retention schedule may be found at: www.wiltshire.gov.uk 8.

Your rights

Your rights are set out in the current Data Protection legislation and includes:

• The right to access your personal information, to request rectification or erasure of certain personal information and to object to processing in certain circumstances.
• The right to withdraw any consent you may have given to process your personal information.
• The right to complain to the Information Commissioner (opens new window) if you feel we are processing your personal information unlawfully.
• The right to restrict processing activity in certain circumstances.
• The right to object to certain types of processing activity

Contracts

The information you are giving us is a contractual requirement. You are obliged to provide this information.

Automated decision-making

Wiltshire Council does use automated decision-making in respect to your personal information. We will provide you with an explanation of the decision-making criteria and significance or likely consequences of such data processing.