Data protection and freedom of information

Chichester District Council (CDC) manages personal data in accordance with the General Data Protection Regulation (GDPR) 2016 and is a public authority as defined within the GDPR.

CDC is the data controller for:

• Season tickets applications and administration
• ANPR (Automatic Number Plate Recognition) in the Avenue de Chartres car park (Metric)
• Off-street Penalty Charge Notices (PCN)
• Off-street pay and display (Parkeon/Flowbird)
• MiPermit cashless parking and virtual season tickets

CDC is the data processor for:

• On-street penalty charge notices
• On-street permits, applications and administration

For MiPermit cashless parking,on street permits and virtual season tickets, Chipside Ltd is the data processor and for on-street penalty charge notices and permit applications and administration, West Sussex County Council is the data controller.

Whether CDC is the data controller or the data processor, we are committed to doing the right thing when it comes to how we collect, use and protect your personal data. Examples of personal data we collect are, your address and other contact details, proof of residency such as bills or tenancy agreements, vehicle registration marks and DVLA data, Blue Badge information and other documents submitted in relation to Penalty Charge Notices.     

We will protect your privacy and any personal data that you provide in relation to the work we undertake and your contact with us will be stored securely and used only for the correct purposes.

Why we need your information and how we use it

Season Tickets Applications and Administration

The purpose of processing your personal data is to enable us to deliver a service whereby we can operate waiting lists and administer season tickets for parking in off-street car parks within the district.

We rely on GDPR Articles 6 (1) (b) and (e) which means that processing is necessary in order to permit use of a parking space in a car park and for us to perform a public task in line with the Chichester District Council (Off-Street Parking Places) (Civil Enforcement and Consolidation) Order.

ANPR in the Avenue de Chartres Car Park

The purpose of processing your personal data is to allow a vehicle access to use Avenue de Chartres Car Park.

By way of the information we obtain we will use your data to ensure that vehicles can gain access to the car park, make a payment using a payment machine and exit the car park. 

We rely on GDPR Articles 6 (1) (e) and (f) as the lawful basis for processing data as it is necessary to enable us to perform a task in the exercise of official authority. We also process data in pursuit of our [and/or another's] legitimate interests in accordance with the Chichester District Council (Off-Street Parking Places) (Civil Enforcement and Consolidation) Order.

Penalty Charge Notices (PCNs)

The purpose of processing your personal data is to administer CDC's processing of PCNs and appeals under Civil Parking Enforcement. We will use your data to process PCNs which are issued to vehicles in respect of parking contraventions.

We rely on GDPR Articles 6 (1) (c) and (e) which means that processing is necessary in order for us to comply with a legal obligation and/or to carry out a task in the public interest and/or in the exercise of official authority given to us as the data controller, namely the traffic management and civil enforcement legislation.

Where special category data is provided and processed, such as medical evidence or a death certificate the relevant legal basis we are relying on is the GDPR Article 9 (1) (f), as processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.   

All processes are carried out in line with traffic management / parking-related legislation and using secure systems. The information you provide will only be used for the parking-related purposes for which it was obtained.

Off Street Pay and Display and MiPermit

The purpose of processing your data is to enable a customer to obtain pay and display tickets in rural and coastal car parks, to use MiPermit for a season ticket or to validate a stay in a car park for a specific period of time against a specific vehicle registration.

We rely on GDPR Articles 6 (1) (b) and (e) which means that processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract or for us to perform a public task which is carried out in line with the Chichester District Council (Off-Street Parking Places) (Civil Enforcement and Consolidation) Order.

On Street Permits, Applications and Administration

The purpose of processing your personal data is to administer civil parking enforcement, the processing of on-street parking and for permit administration.

We rely on GDPR Articles 6 (1) (b) and (e) which means that processing is necessary to for us to perform a public task which is carried out in line with the West Sussex County Council (Chichester District) (Parking Places and Traffic Regulation) (Consolidation) Order 2010 - as amended.

Where special category data is provided and processed, such as medical evidence or a death certificate the relevant legal basis we are relying on is the GDPR Article 9 (1) (f), as processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.

Who your information may be shared with

The Parking Services department may share personal data with other organisations for law enforcement and regulation purposes, criminal prosecutions and court proceedings. We may also share it in order to establish, exercise or defend our legal rights which include the prevention and detection of fraud.

Under civil parking enforcement we will also share data with the Traffic Penalty Tribunal, the Traffic Enforcement Centre, the courts, enforcement agents and agents providing services to CDC in carrying out its role in pursuing unpaid PCNs.

How we protect your information

Parking services uses secure back office systems to hold data. Only authorised officers will access data and systems. Where another body/organisation accesses or owns the system, there is a data sharing agreement or contract in place which outlines data protection requirements.  

Your right of access

You have the right to obtain from the data controller confirmation as to whether or not personal data concerning you is being processed and other information such as why and how it is being processed. Where this is the case, you have a right to access the data we hold and can contact using the contact details in the 'How to contact us' section.

How long we keep your information

The time CDC generally considers that it needs to hold onto data will relate directly to the reason why it is processing it and for which parking function or service as set out in the Parking Services Retention Policy, which you can see on CDC's website under Retention guidelines.

How you can contact us

If you would like to discuss anything in this privacy notice, please contact the Parking Services team, either by email at parkingservices@chichester.gov.uk or by phone: 01243 534500.

Your rights

You have certain rights under UK data protection legislation, including:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• Rights in relation to automated decision making and profiling.

If you have a concern about the way we are collecting or using your personal data, we request that you raise this with us in the first instance. Alternatively, you can contact the Information Commissioner's Office (opens new window).

Pay on foot privacy impact assessment

Pay on foot privacy impact assessment (Word doc) [31KB]

For the purposes of the General Data Protection Regulation 2016 (GDPR):  Chichester District Council (the Council) is a data controller and JDI Solutions Ltd is a data processor.

Data is held in order to comply with the Council's legal obligations in relation to consulting on the preparation of a range of local planning policy documents including the Local Plan.

Data is held with your consent where you have asked to be added to our consultee list. This consent is assumed to be ongoing until you notify us otherwise. You may notify us of this or of any changes to your details in any of the following ways:

• By logging on to the consultation system at https://chichester.oc2.uk/login and either updating or deleting your record under "My Account".
• By email: planningpolicy@chichester.gov.uk
• By letter to:

Planning Policy
Chichester District Council
East Pallant House
East Pallant
Chichester
PO19 1TY

Information we collect

Name

Address

Email (where provided)

Telephone number (where provided)

Agent contact details (if applicable)

Site information (if applicable)

How we use the information we collect

We will use the details you have provided to contact you about planning policy matters.

The Council is required to register and publish representations made in relation to planning policy consultations. For this we require a name and address, and preferably an email address, to be provided. Only your name (and where relevant your organisation) will be published alongside your representation.  At examination stage your contact details and representations will be passed to the Programme Officer and Planning Inspector as part of the examination process.

Further information can be found in the register of data processing on our https://www.chichester.gov.uk/dataprotectionandfreedomofinformation webpage (note that this document is currently under review):

How long will we keep the data

Contact details for those organisations identified as relevant authorities or specific consultation bodies in the Town and Country Planning (Local Planning) Regulations 2012 will be held for as long as those organisations retain that status.

Contact details for individuals who wish to be kept informed but who are not making formal representation  on any planning policy consultation will be kept until the Local Plan has been adopted and passed the period for judicial review - unless you ask us to remove your details sooner (see above for ways to do this).

Where individuals have made a formal representation their data becomes part of the public record and will be stored and processed for as long as the data is required. You can however opt out of further communications about planning policy matters such as the Local Plan by notifying us by email or letter as above.  

Once the Local Plan has been adopted individuals will be asked to opt in again to be informed of subsequent planning policy related consultations.

The Council's information retention scheme (currently under review) is available on our website.

Please note that any personal information will be processed by the Council in line with the principles and rights set out in the GDPR and the Data Protection Act 2018.  This means for example that (other than in the ways identified above) your personal details will only be accessed by authorised persons and will not be shared with anyone else.  

Changes to our privacy notice

We reserve the right to update this privacy notice at any time.  You will be notified if there are significant changes.  The privacy notice can be viewed on the Council's website.

Please read our contact services data protection policy:

  Data Protection Policy - Contract Services (Word doc) [73KB]

Chichester District Council manages personal data in accordance with the provisions of the General Data Protection Regulations (GDPR). The Regulations apply to personal information about living, identifiable, persons.

When you contact the Customer Services team we will ask you for certain personal information in order to be able to assist with your enquiry. Some of this information will need to be recorded and stored on our systems.

This notice explains why we ask for your personal information, how that information will be used and how you can access your records.

Why we need your information and how we use it

When you contact the Customer Services team we will collect certain personal information from you. The type of information we collect will depend on the service you are requesting.

We use your information in a variety of ways:

To process your service request, for example to let our waste management service know that they have missed your bin collection

To check your identity when you contact us asking for information; for example if you want to discuss personal Housing related issues with us

1.     To help us investigate any concerns or complaints that you may have about services that you receive from the Council.

What type of information is collected from you

The information we collect is recorded and then stored on our secure Customer Record Management (CRM) system.  In order to administer our services we collect the following information from you:

1.     name

2.     address

3.     Contact Details (phone, email etc.)

We will only ask for personal information that is appropriate to enable us to deliver our services. In some cases, you can refuse to provide your details if you deem a request to be inappropriate. However, you should note that this may impact on our ability to provide some services to you.

Who your information may be shared with (internally and externally)

Sometimes, in order to process your enquiry we need to share the information that you give us; either with other departments within the Council or with other agencies; WSCC who control the parking zones within Chichester and South Downs National Park Planning Authority, Chichester act as their agent for all park applications within our district.

We will often have to share the information you have given us with other teams or services within The Council; but this will be for the express purpose of processing your enquiry.  For example if you contact Customer Services to report  a problem with parking in your area, then when we pass this to our Parking team they may wish to get in touch with you for more information.

How we protect your Information

We have implemented generally accepted standards of technology and operational security in order to protect personal data from loss, misuse, or unauthorised alteration or destruction.  

For any payments which we take from you online we will use a recognised online secure payment system.

How long we keep your data

The time the Council generally considers that it needs to hold onto data will relate directly to the reason why it is processing it and for each area that is detailed on the processing register.  More detail of this can be seen in the Retention Scheme (below)

Accuracy

The accuracy of your information is important to us to be able to provide relevant services more quickly. We are working to make our record keeping more efficient. In the meantime, if you change your address or email address, or if any of your circumstances change or any of the other information we hold is inaccurate or out of date please email us or write to us at:

Name: Customer Service Centre

Address:

Chichester District Council
East Pallant House
Chichester
West Sussex
PO19 1TY
United Kingdom

Email: contact@chichester.gov.uk

Tel: +44 01243 785166
 

What we do with your information

To allow us to make decisions on planning applications, individuals must provide us with some personal data (e.g. name, address, contact details). In a small number of circumstances individuals will provide us with 'special category data' in support of their application (e.g. evidence of medical history).

We use the information provided to us to make decisions about the use of land in the public interest. The legal basis for this is known as a public task (opens new window), and is why explicit consent is not required for personal or special category data to be used.

Some information provided to us we are legally obliged to make available on planning registers. This is a permanent record of our planning decisions that form part of the planning history of a site, along with other facts that form part of the 'land search'.

How we share your information

We do not sell your personal information or special category data to other organisations. We do not move your information beyond the UK. We do not use your information or special category data for automated decision making.

We make details of planning applications we receive available online so that other people can contribute their comments. Please note:

• We do publish the name of the person applying for planning permission along with the address
• We don't publish their signature or contact details
• We do publish comments received on planning applications by members of the public. We redact telephone numbers, signatures and email addresses.
• We do publish comments received on planning applications by town and parish councils / amenity groups / statutory consultees

We make some planning applications available to our statutory consultees for their advice on safety, infrastructure and other matters. We will sometimes need to share the information we have with other parts of the Council - for example, to establish how long a building has been used as a dwelling.

In circumstances where a planning application is appealed, we are required to share data from a planning application with the Planning Inspectorate, which includes any comments made by statutory consultees and members of the public.

Redaction ('blanking things out')

We operate a policy where we routinely redact the following details before making forms and documents available online:

• Personal contact details for the applicant, e.g. telephone numbers, email addresses
• Signatures
• Special Category Data - e.g. supporting statements that include information about health conditions or ethnic origin
• Information agreed to be confidential
• Content considered by us to be defamatory, or in breach of equality laws or other legal obligations

Sometimes we might decide it is necessary, justified and lawful to disclose data that appears in the list above. In these circumstances we will let you know of our intention before we publish anything.

If you are submitting supporting information which you would like to be treated confidentially or wish to be specifically withheld from the public register, please let us know as soon as you can - ideally in advance of submitting the application. The best way to contact us about this issue is via email to dcplanning@chichester.gov.uk for the attention of the Registration, Performance and Customer Care Lead Officer.

Retention ('how long we keep your information for')

We process many different types of information according to our retention policy. A brief summary of how long we keep things before they are usually destroyed:

• Statutory registers (e.g. planning decisions, approved plans): In perpetuity
• Supporting documents, reports: In perpetuity
• Representations, letters, general correspondence: In perpetuity

Complaints and problems

Making decisions on planning matters is a public task and you do not have the right to withdraw consent for your data to be processed. However, if you think we have got something wrong or there is a reason you would prefer for something to not be disclosed, please ask us by contacting via email to dcplanning@chichester.gov.uk for the attention of the Registration, Performance and Customer Care Lead Officer.

If you need to make a complaint specifically about the way we have processed your data, you should in the first instance use our corporate complaints policy . If we fail to respond properly you can direct your concerns to the Information Commissioners Office (opens new window).

Chichester District Council manages personal data in accordance with the General Data Protection Regulations 2016 and is a public authority as defined within those regulations.

The revenues department refers to - council tax, business rates, housing benefit, council tax reduction and the collection and enforcement of the BID levy. The revenues department also administers and processes data on behalf of the Government to allow it to deliver financial assistance to both individuals and businesses within the Chichester District. Revenues department related personal data will be processed for the public purpose of the exercise of duties related to the local authority functions of the revenues department, including related processing specifically financial and criminal investigations or any administrative tasks reasonably required to carry out those functions.

Revenues department data will be provided to the Cabinet Office for data matching purposes in accordance with Section 6 of the Local Audit and Accountability Act 2014 as part of the National Fraud Initiative or where otherwise provided for in law.

This data will be used for cross-system and cross-authority comparison for the prevention and detection of fraud.

For more information, please see our data protection policy section, which provides further guidance on your rights and access to the Cabinet Office's National Fraud Initiative web pages, or contact the relevant revenues department on 01243 785166.

The revenues department will share information including personal data with other departments in the council to support the effective carrying out of this work in particular IT, legal and finance departments. The council will also share personal data with partner bodies where statute allows sharing information and personal data with those bodies. These partner bodies include the Department for Business Energy and Industrial Strategy, and the Department for Levelling Up Housing and Communities. The sharing of data may include an assessment for council tax liability.

The revenues department will share personal data externally where it is reasonably required to carry out elements of the revenues department's work of the council under a data processing or data sharing agreement including where that processing is required to improve our services to you. Information will also be shared when requests are received by legitimate law enforcement bodies carrying out their own public role.

Chichester District Council's benefits department manages personal data in accordance with the General Data Protection Regulations 2016 and is a public authority as defined within those regulations.

Chichester District Council, as the data controller, is committed to protecting your privacy and any personal data that you provide in relation to your application, claim or as supporting evidence will be stored securely and used only for this purpose. We will not use your information for any other purpose or give it to anyone else unless it is necessary to establish entitlement or we are required to do so by law.  

This gives you the legal right to put right any information about you which we get wrong. It also means that we must not share details about your claim, except where we need to do so to establish entitlement.  However the law also says that we must protect the public funds we handle and we may share information that is given to us with other organisations that inspect or handle public funds, to prevent and detect fraud. Examples are:

• The Department for Work and Pensions
• HM Revenues & Customs
• The National Audit Office
• The Cabinet Office.

The National Audit Office appoints an auditor who checks the council's accounts. The Cabinet Office is responsible for the National Fraud Initiative (NFI) which carries out data matching exercises. Data matching is comparing computer records held by one organisation with other computer records held by the same organisation or a different one. This is usually personal information.

Computerised data matching allows us to identify claims and payments that may be fraudulent. A match means that there is an inconsistency between the two sets of records, and identifies the need for this inconsistency to be investigated. The inconsistency may be because of fraud or because of incorrect data, however this would not be known until the matter had been investigated.

The Council has to give information to the NFI for data matching exercises you can find out more about the kind of data required in their guidance at:

• Gov.uk - National Fraud Initiative: public sector data specifications (opens new window)

The law says that the Audit Commission has legal powers to use data in data matching exercises and that it does not have to get agreement of the people whose details are being matched.

The NFI documents setting out the code of practice for data matching can be found at:

• Gov.uk - National Fraud Initiative: public sector data specifications (opens new window)

Data sharing with credit reference agencies

We may also share information with a credit reference agency to prevent and detect fraud.  Where the Authority deems it necessary additional checks may be made on a claim, this includes obtaining information from a credit reference agency. This is additional check is carried out via the National Anti-Fraud Network and does not leave a footprint on an individual's credit account. Such checks may be carried out where there is a reasonable level of doubt that the information given on an application or a declaration of a change is correct.      

Other ways we may use your details

As well as sharing details with the Audit Commission and other organisations that inspect or handle public funds, we may also use our customers' details within the council for

• Keeping the electoral roll correct
• Collecting debts owed to the Council (for example Council Tax): and
• Preventing and detecting fraud and other crime.

Privacy notice for Building Regulations applications

Building legislation (The Building Act 1984 and The Building Regulations 2010 (as amended)) requires Chichester District Council to keep records of any person that deposits or has an application deposited on their behalf for proposed building work that is subject to the Building Regulations.

Who processes my data?

The information that you provide with the Building Regulations application will be processed by Chichester District Council, which is the data controller for the purposes of the Data Protection Act.

What is my data used for?

The information provided including any personal data, will only be used to deal with your Building Regulations application.

Who sees my data?

The Building Regulations applications are closed and as such no personal data is uploaded to the councils website.

We will keep your data after completion of your project.  Your information will not be shared unless there are legal reasons to do so.

Information you provide will only be used for the stated purpose.  You can find further information about the processing of your data on the data protection page.  Individuals have a number of rights under data protection law, including the right to request their information.

The  Environmental Information Regulations (EIR) came into force on 01 January 2005 giving members of the public the right to access environmental  information held by the council.

What information do they cover?

They cover information on the state of the environment, such as:

• air, water, soil, flora, fauna (including humans), diversity, genetically modified organisms.
• information on emissions and discharges, noise, energy, radiation, waste and other such substances.
• measures and activities such as policies, plans, and agreements.
• reports, cost benefit and economic analyses.
• the state of human health and safety, contamination of the food chain.
• cultural sites and built structures (as they may be affected by environmental factors).

Obtaining information

Requests can be made in writing, verbally or online using the Environmental Information Regulations request form.

Environmental regulations payment form

Your request must include your name and address and details of the information required.

Our response to your request

Within 20 working days of your request, we will:

• confirm if we hold the information.
• advise if a fee will be charged.
• provide you with the information (after any relevant fee has been paid), unless an exemption applies.

If your request is complex and voluminous, then we can have up to 40 working days to respond.

Exemptions

Some information requested may not be provided by the council as there are some grounds for refusing to disclose environmental information.

Fees

The Regulations permit the council to charge for providing environmental information except in two instances mentioned below:

• access public registers or lists of environmental information; or,
• to examine the information (at a place chosen by the council).

We reserve the right to charge for the following activities at a fixed rate of £25 per person engaged per hour, for:

• determining whether we hold the information requested.
• locating the information, or a document containing the information.
• retrieving the information.
• extracting the information from documents containing it.
• other costs of making available the information (e.g. supervision of scanning and photographing of documents, postage and photocopying costs).
• postage and other means of transmission (e.g.CD-Roms) will be charged at cost and photocopying at 10p per A4 sheet.

The council will waive the first £5 of any fees or costs chargeable.

Complaints

If you are dissatisfied with the response from the council, you must write to the Head of Business Improvement Services within 40 days to ask for a review of the decision (please contact Freedom of Information). You will receive an acknowledgement of the request within 3 working days and a full response will be provided within 20 working days.  If you are still dissatisfied, you may contact the Information Commissioner.

Privacy Impact Assessment Body Worn Video (Word doc) [32KB]

Privacy Impact Assessment Chichester CCTV (Word doc) [214KB]

Chichester District Council retention scheme (Word doc) [216KB]


 

Re-Use of information is defined as: 'The re-use of Council owned information by a third party for a purpose other than the initial purpose for which that information was produced.'

On 1 July 2005 the Reuse of Information Regulations came into effect. The aims of the regulations are to encourage the re-use of public information by third parties and to remove barriers to re-use.

The following documents have been prepared to help with Re-use of information enquiries.

Application to Re-use Council Information (Word doc) [36KB]

Re-Use of Information Regulations Policy (Word doc) [46KB]

Re-use of Public Sector Information Regulations 2005 - Charging Policy (Word doc) [27KB]

Terms and Conditions for Re-use of Information (Word doc) [25KB]