Privacy notice – Blue Badges

North Somerset Council is registered with the Information Commissioner’s Office for the purposes of processing personal data.  The blue badges service is administered by our partner Agilisys Ltd www.agilisys.co.uk

The information you provide will be held and used in accordance with the requirements of UK and European data protection law.  The information will form part of your blue badge account, and held for 18 months from expiry of badge.

Unless otherwise agreed with you, we will only collect the minimum personal data required to deliver the service, which includes name, contact details, benefit entitlement, photo, and medical conditions.  It does not include information relating to criminal convictions or offences.

The information will be used for the administration of the blue badge service; our statutory duty under the Section 21 of the Chronically Sick and Disabled Persons Act 1970 and The Disabled Persons Parking Badges Act 2013, in accordance with Article 6(1)(c) of GDPR.  We require medical information to determine eligibility for the blue badge, lawful in the public interest, in accordance with Article 9(2)(g) of GDPR.

We will not use your personal information in a way that may cause you unwarranted nuisance.  Failure to provide the information could result in us being unable to assess your eligibility for the blue badge.

The information provided will be shared with other local authorities, who have demonstrated that they have a lawful and legitimate interest in the information, for the purposes of fraud prevention.  The information may also be shared with Parking Services, who enforce the misuse of blue badges.  At no point is your data shared or processed outside of the UK.

We may lawfully disclose information to public sector agencies to prevent or detect fraud or other crime, or to support the national fraud initiatives and protect public funds under the Local Audit and Accountability Act 2014.  Under the conditions of the Digital Economy Act 2017, we may also share personal data provided to us with other public authorities as defined in the Act, for the purposes of fraud or crime detection or prevention, to recover monies owed to us, to improve public service delivery, or for statistical research.  We do not share the information with other organisations for commercial purposes.

You have the right to see the personal data we process about you, as well as the right of rectification and restriction (to destruction of records only).  For details of how to make such a request, please click here.

If you have any questions or concerns about the way we process your personal data, our Data Protection Officer can be contacted at DPO@n-somerset.gov.uk