Contract Car Parking – Privacy Notice

Looking after your personal information is very important to us, and we want you to be confident that your personal data is kept safely and securely.

Eureka! The National Children’s Museum (“Eureka!”) is committed to complying with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. We will only use your personal data on relevant lawful grounds as permitted by the GDPR and the Data Protection Act.

Eureka! will be what is known as the ‘Data Controller’ for the personal data visitors provide to us.

We have published this notice to help you understand:-

  • how and why Eureka! collects information from you;
  • who we share your information with, why and on what basis; and
  • what your rights are.

What information we gather and how and why we use it

What How Why Legal Basis*
Contact and Vehicle Details Application form To effectively administrate your contract parking pass Legitimate Interest
Direct Debit Details Direct Debit Mandate To process payments Legitimate interest
Closed Circuit TV Cameras are located in communal areas inside and outside the Eureka! building To ensure safety of visitors, contractors and staff Legitimate interest

* Explanation of legal basis for processing

Legitimate interest: where it is necessary for us to hold your personal data in order for us to effectively facilitate your contract parking at Eureka!

Keeping your information safe and up-to-date

Eureka! is committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.

We input and store your contact and vehicle details in our local computer network.

Any personal information held in paper formats is securely stored either within Eureka! or in secure off-site storage.

When you cease parking at Eureka! we will securely dispose of all personal data we hold about you, except that which we are required to retain for legal purposes i.e. invoicing and payment records.

We will not transfer information to a country or territory outside the EEA (European Economic Area) unless that country or territory ensures an adequate level of protection for the rights, and freedoms of data subjects in relation to the processing of personal data. In the unlikely event that personal data needs to be transferred outside the EEA, your personal information will be anonymised.

The organisation will only share your data with third parties in the context of a sale of some or all of its business. In these circumstances the data will be subject to confidentiality arrangements.

We will not use your personal data for marketing purposes without your express consent.


Automated decision-making

Automated decision-making occurs when an electronic system uses your personal information to make a decision without human intervention. Eureka! does not make decisions based on automated decision-making.


Your rights

You have the right to:

  • Request access to your personal information
    This is usually known as making a data subject access request and it enables you to receive a copy of the personal information we hold about you.
  • Request rectification of your personal information
    This enables you to have any inaccurate or incomplete personal information we hold about you corrected.
  • Request the erasure of your personal information where there is no compelling reason for its continued use – although this may prevent us from providing a service.
  • Restrict the processing of your personal information
    This enables you to ask us to suspend the processing of your personal information e.g. if you contest its accuracy and so want us to verify its accuracy.
  • Object to the processing of your personal information
    This enables you to ask us to stop processing your personal information where we are relying on the legitimate interest of the organisation as our legal basis for processing and there is something relating to your particular situation which makes you decide to object to processing on these grounds.
  • Data portability
    This gives you the right, in specific circumstances only, to request the transfer of your personal information to another party so that you can reuse it across different services for your own purposes.

If you would like to exercise any of these rights, or for any other data protection queries, please contact us at:

Data Compliance Manager
Eureka! The National Children’s Museum
Discovery Road

Changes to this privacy notice

We will keep our privacy policy under regular review and we will place any updates on our website. This policy was last updated on 22 May 2018.

Eureka! The National Children’s Museum
Discovery Road, Halifax HX1 2NE. Map