Contract Car Parking – Privacy Notice

Eureka! The National Children’s Museum (“Eureka!”) is committed to complying with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. We will only use your personal data on relevant lawful grounds as permitted by the GDPR and the Data Protection Act.

Eureka! will be what is known as the ‘Data Controller’ for the personal data visitors provide to us.

We have published this notice to help you understand:-

• how and why Eureka! collects information from you;
• who we share your information with, why and on what basis; and
• what your rights are.

What information we gather and how and why we use it

Keeping your information safe and up-to-date

Eureka! is committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.

We input and store your contact and vehicle details in our local computer network.

Any personal information held in paper formats is securely stored either within Eureka! or in secure off-site storage.

When you cease parking at Eureka! we will securely dispose of all personal data we hold about you, except that which we are required to retain for legal purposes i.e. invoicing and payment records.

We will not transfer information to a country or territory outside the EEA (European Economic Area) unless that country or territory ensures an adequate level of protection for the rights, and freedoms of data subjects in relation to the processing of personal data. In the unlikely event that personal data needs to be transferred outside the EEA, your personal information will be anonymised.

The organisation will only share your data with third parties in the context of a sale of some or all of its business. In these circumstances the data will be subject to confidentiality arrangements.

We will not use your personal data for marketing purposes without your express consent.

Automated decision-making

Automated decision-making occurs when an electronic system uses your personal information to make a decision without human intervention. Eureka! does not make decisions based on automated decision-making.

Your rights

You have the right to:

• Request access to your personal information
  This is usually known as making a data subject access request and it enables you to receive a copy of the personal information we hold about you.
• Request rectification of your personal information
  This enables you to have any inaccurate or incomplete personal information we hold about you corrected.
• Request the erasure of your personal information where there is no compelling reason for its continued use – although this may prevent us from providing a service.
• Restrict the processing of your personal information
  This enables you to ask us to suspend the processing of your personal information e.g. if you contest its accuracy and so want us to verify its accuracy.
• Object to the processing of your personal information
  This enables you to ask us to stop processing your personal information where we are relying on the legitimate interest of the organisation as our legal basis for processing and there is something relating to your particular situation which makes you decide to object to processing on these grounds.
• Data portability
  This gives you the right, in specific circumstances only, to request the transfer of your personal information to another party so that you can reuse it across different services for your own purposes.

If you would like to exercise any of these rights, or for any other data protection queries, please contact us at:

Data Compliance Manager
Eureka! The National Children’s Museum
Discovery Road
Halifax
HX1 2NE
data@eureka.org.uk