Bullring Limited Partnership ("the Company") has certain obligations under the Data Protection Act 1998 ("DPA") to notify individuals about how it will process any personal information it collects from or about them. The Company treats your data privacy very seriously and it understands that you will wish to know how it will use that personal information.
The Company is part of the Hammerson group of companies ("the Group"), which may also be provided with personal information about you. This Privacy Notice will inform you of what personal information the Company collects, how that information is used, who it is shared with and why, where it is transferred, and how you may view and amend such information.
What personal information is collected?
The Company collects various "personal data" about you in order to provide you with this car park service, as set out in our terms and conditions, including to ensure the security of our car park. If you are using any of our other services, please consider our website for other applicable privacy policies (www.bullring.co.uk/privacy-policy).
Under the DPA, personal data is information which relates to you and which can identify you as a living individual, on its own or when combined with other information. Common examples of personal data which may be collected and used by the Company in its provision of the car park service include your:
vehicle registration number (collected by automatic number plate recognition cameras ("ANPR")
photograph (which may be collected as part of ANPR image)
video recording (without sound) (collected by CCTV)
time and date of use of our services (and consequently location) and/or
Payments, payment methods and credit/debit card details.
In addition, should we need to carry out further enquiries, in accordance with our terms and conditions and/or to deal with an enquiry raised by you, we may also collect your:
contact details (business or personal)
opinions or suggestions on our services
Payments, payment methods and bank account details
We may (unintentionally) also process your sensitive personal data, in particular when your image is captured by CCTV or ANPR cameras. For example, your race/ethnicity, health information, sexual life, religious beliefs, political opinions, or trade union membership. We may also process your personal data with relates to the commission, or alleged commission of offences.
How will your personal information be used?
The Company will process your personal information for the purposes of, from time to time:
legitimate business reasons - providing car park services to you in accordance with our terms and conditions, management reporting, accounting, other internal business (including joint ventures and business sales) and sales management, if any personal data is involved;
customer relationship management - dealing with any queries or correspondence from you; and/or
Compliance with legal, regulatory and other good governance obligations, including to request additional information from third parties (e.g. the DVLA) to allow us to meet these obligations.
Who will see my personal information?
Your personal data will be made available and used for the purposes mentioned above within the Hammerson Group and may also be made available to West Midlands Police, British Transport Police, Mailbox and other operators of car parks in this area, third parties providing relevant services under contract to the Company and as set out below, in accordance with this Notice. Your personal data may also be made available:
When the Company believes that disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding illegal activity, suspected fraud, or other wrongdoing; to protect and defend the rights, property or safety of the Company, its customers, staff, suppliers or others; to comply with applicable law or co-operate with law enforcement; or to enforce its terms or other agreements (including, for example, where a vehicle has been abandoned in our car park);
In response to a request from a third party insurance company (with your authority to request your personal data);
In response to a court order, or a request for cooperation from a law enforcement or other government agency; to establish or exercise its legal rights; to defend legal claims; or as otherwise required or permitted by applicable laws and/or regulations; and/or
To prospective or actual buyers in the event that the Company sells or buys any of its business or assets.
Will my personal data be transferred abroad?
Your personal data may be transferred to recipients who are not located within the European Economic Area ("EEA") and who may not offer the same level of protection as jurisdictions within the EEA.
The Company takes precautions including administrative, technical and physical measures to protect your personal data against loss, theft and misuse, as well as against unauthorised access and disclosure.
What rights do I have in relation to my personal data?
You have a right to review your personal data held by the Company and to have certain inaccurate information about you corrected. If you wish to do so, or to notify the Company of a change in your details, please use the contact details below.
How can I contact the Company?
Please contact Data Controller at 0121 632 1500 with any queries or concerns relating to this Privacy Notice.