Blue Badge Parking Permit Scheme Privacy Notice

Introduction

This privacy notice is intended to provide information about how Rhondda Cynon Taf County Borough Council (referred to as ‘RCTCBC’, ‘Council’, ‘Local Authority’, ‘we’) will use (or ‘process’) personal data about individuals for the purpose of the Blue Badge Scheme.

Whilst we have tried to make this privacy notice as clear and concise as possible, the categories of personal data we process may vary depending on the evidence you provide as part of your application. Should you require further information relating to a Blue Badge application please do not hesitate to contact us using the contact information below.

This notice should be read in conjunction with;

• The Council’s corporate privacy notice 

The Data Controller

The Council is the data controller for the personal data processed for the purposes of the Blue Badge Scheme

The Council is registered with the Information Commissioner’s Office (ICO) as a controller under reference Z4870100. 

Queries relating to this privacy notice

If you have any questions or queries relating to this privacy notice please contact:

By email : FirstResponseTeam@rctcbc.gov.uk 

By telephone : 01443 425003 

In writing : First Response Team, Ty Elai, Williamstown, CF40 1NY 

Who we are what we do 

Blue Badge Parking is managed by our Customer Services department. The scheme is developed to assist people with disabilities or health conditions that affect their mobility park closer to their destination, whilst displaying their Blue Badge Parking Permit. 

You can make an application for a Blue Badge Permit online via the Gov.uk website, or by making an appointment at a One4all Centre

Whose personal data we process

We process personal data relating to applicants or their representatives who are applying for a Blue Badge.

The categories of personal data we process

We may process the following categories of personal data to provide a Blue Badge

• Contact details such as name, address, telephone number, email address.
• Your date of birth and national insurance number.
• Proof of your identification such as birth certificate, passport or driving licence.
• Financial Information, including receipt of benefits.
• Information about the applicant’s health and medical details.
• Details of your current Blue Badge if re-applying.
• Your image, to be published on your blue badge 

Why we process the personal data

We process the personal data to provide Blue Badges. This may include but is not limited to the following activities;

• Process your application and check your eligibility to receive a Blue Badge.
• Arrange an occupational therapist to review your application if required.
• Review any evidence provided by your GP / Professional in support of you application.
• For successful applications, issue you with your Blue Badge.
• For the prevention and detection of Blue Badge misuse. 

Our lawful basis for processing the personal data

Under the General Data Protection Regulation (GDPR), our lawful basis for processing the personal data is;

• Legal Obligation -  Article 6 (1)(c) – processing is necessary for compliance with a legal obligation to which the controller is subject.  
• Public Task - Article 6 (1)(e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. 
• Employment and social security and social protection law – Article 9(2)(b) - Processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by domestic law or a collective agreement pursuant to domestic law providing for appropriate safeguards for the fundamental rights and the interests of the data subject. 

The primary legislation, regulations and guidance that supports this includes, but is not limited to;

• Disabled Person’s Parking Badges Act 2013
• Chronically Sick and Disabled Persons Act 1970, Section 21
• The Disabled Persons (Badges for Motor Vehicles) (Wales) Regulations 2000

Who or where we get the personal data from

We may receive the personal data from the following categories of individuals or organisations;

• Directly from you the applicant, or someone acting on your behalf
• Other Internal Council departments
• Your GP / Local Health Board
• Occupational Therapists acting on our behalf
• Department of Work & Pensions 

Who we share personal data with

We may share the personal data with the following key organisations.

When sharing the personal data, we only share the minimum amount necessary in relation to the purpose 

Who	Purpose
Internal Council Departments   Fraud Enforcement Social Services	To check eligibility for a Blue Badge
Local Health Board / GP	To check evidence provided as part of an application
Valtech Ltd	To print out the Blue Badge
Department of Work & Pensions	To confirm receipt of benefit entitlement
The Occupational Therapy Service (TOTS)	Assessment of applications.

Data Processors

A data processor is a company or organisation that processes personal data on our behalf. Our data processors act only upon our instruction. They cannot do anything with the personal data unless we instruct them to do so. They will not share the personal data with any organisation apart from us or use it for their own purposes. They will hold it securely and retain it for the period we instruct.

The category of data processors we use for the purpose of the Blue Badge Scheme is

IT system suppliers etc. 

How long we retain the personal data 

We retain the personal data contained within Blue Badge records for: 

Length of time	Reason
Applications and associated documents – 3 years	Business Requirement

In keeping with the General Data Protection Regulation storage limitation principle, records are periodically reviewed. Not all personal data is retained. Only personal data that is relevant to the record is retained for the entire retention period   Information that has no long term or evidential value is routinely destroyed in the normal course of business.  

Your data protection rights

The General Data Protection Regulation (GDPR) gives individuals important rights, including the right of access to the personal data that the Council holds about you. 

Click here for further information on your information rights and how to exercise them.  

Your right to make a data protection complaint to the Council

You have the right to complain to the Council if you believe we have not handled your personal data responsibly and in line with good practice.

You can do this by contacting the Blue Badge team directly via one of the following communication methods. Most concerns can be resolved relatively quickly through a simple phone call or email;

By email : FirstResponseTeam@rctcbc.gov.uk 

By telephone : 01443 425003 

In writing : First Response Team, Ty Elai, Williamstown, CF40 1NY 

Alternatively, you can raise a formal complaint via the Council’s Customer Feedback Scheme using the following link (Make a comment, compliment or complaint online) or you can contact the Council’s Data Protection Officer at Information.management@rctcbc.gov.uk.

Your right to make a data protection complaint to the ICO

You also have the right to complain to the ICO if you are unhappy with how we have used your data. However, we encourage you to contact us first and provide us with an opportunity to look into your concern and put things right.

The ICO can be contacted:           

• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline number: 0303 123 1113
• Website: https://www.ico.org.uk