Privacy Notice - Blue Badges

Background

In providing us with your personal information you hereby acknowledge that Neath Port Talbot County Borough Council is the Data Controller for all the personal information you provide on this form (for the purpose of the General Data Protection Regulation 2016 (GDPR) and the Data Protection Act 2018 (DPA)).

The personal data which we collect from you via this form will be used by the Council (pursuant to it carrying out its various statutory and business functions) for the following purposes:

• For the administration and assessment of the Blue Badge application in accordance with governing legislation.
• For the purposes of Blue Badge parking enforcement
• For the prevention and detection of crime or fraud including data matching under the National Fraud Initiative

Controlling your personal information

As a Data Controller the Council is required under GDPR to inform you which of the Article 6 GDPR “Data Processing Conditions” it is relying upon to lawfully process your personal data. In this respect please be advised that in regards to the data provided by you on this form we are relying on the following two Article 6 conditions;

• “The data processing is necessary for compliance with a legal obligation to which the controller is subject”. (Article 6(c) GDPR).
• “The data processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.” (Article 6(e) GDPR).

What we do with the information we gather

• We may share your personal data securely with the following third parties (i.e. persons/bodies/entities outside the Council) in accordance with data sharing arrangements which we have in place with those third parties
• Northgate Public Services as part of a contract for the production of the blue badge
• The Council’s parking enforcement team – this includes routine sharing of information on lost and stolen badges.
• Other local authority Blue Badge enforcement teams
• Your name, address, date of birth, contact information and blue badge details will be shared with the Cabinet Office for data matching under the National Fraud Initiative

If you move address to another local authority, your Blue Badge Registration record may be transferred if requested by the new Local Authority.

The personal information collected from you on this form will be held by the Council for a period of:

• 3 years after badge valid from date in the case of successful applications OR 3 years for unsuccessful applications

We would inform you that under Article 21 GDPR you have the right at any time to object to the Authority about the fact that we are processing your personal data for the purposes of carrying out a public task or exercising our official authority.

The Council will not transfer any of your personal data outside of the European Union. All processing of your personal data by us will be carried out in the United Kingdom or other European Union countries.

The Council will not use your personal data for the purposes of automated decision making.

Please be advised that under GDPR individuals are given the following rights in regards to their personal data:

• The right of access to their personal data held by a data controller.
• The right to have inaccurate data corrected by a data controller.
• The right to have their data erased (in certain limited circumstances).
• The right to restrict the processing of their data by a data controller (in certain limited circumstances).
• The right to object to their data being used for direct marketing.
• The right to data portability (i.e. electronic transfer of data to another data controller).

Further information on all the above rights may be obtained from the Information Commissioner’s website.

Please be advised that in the event that you make a request or a complaint to the Council’s Data Protection Officer (see 10 above) and you are dissatisfied with the Council’s response you are entitled to complain directly to the Information Commissioner’s Office. Details of the Commissioner’s Office contact details and further information on your rights may be obtained from the Commissioner’s website.