General Data Protection Regulations (GDPR) Privacy Notice
Highways England have fully committed to adherence of the General Data Protection Regulations (GDPR) following implementation on the 25th May 2018. In relation to our collection and processing of personal data, please see the below information.
Section 1 – Collection of Data
- Highways England will be the data controller and the contact details for the company are:
- Data Protection Officer: Graham Woodhouse
- E-mail: DataProtectionAdvice@highwaysengland.co.uk
- The data is being collected for provision of vehicle stickers to business and private addresses.
- The data processors, working on behalf of Highways England in relation to this will be:
- Collected data will stored within secure electronic records management systems, with the system being dependant on the nature of information. The systems used by Highways England are:
Government Secure Network and Outlook.
- Information stored by third parties will be held on the following systems:
Secure FTP (File Transfer Protocol) site.
Section 2 – Processing of data
In addition to the information referred to in section 1, at the point of collection we will, at the time when personal data are obtained, provide you with the following further information necessary to ensure fair and transparent processing:
- The personal data will be stored for a duration of two months
- Under GDPR you have rights to request information from the company
- Right of access to the data (Subject Access Request)
- Right for the rectification of errors
- Right to erasure of personal data – not an absolute right
- Right to restrict of processing or to object to processing
- the right to data portability;
- If the processing is based on receiving the consent of the data subject then we have to inform the data subject that they have the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
- You have the right to lodge a complaint with a supervisory authority (in the UK that is the Information Commissioners Office)
- If we are to process the personal data we hold for a purpose other than that for which it was originally collected then we will provide the you with information on what that other purpose is prior to that further processing taking place. The extra information will include any relevant further information as referred to above including the right to object to that further processing.
Take me back to Space Invaders