Pembrokeshire Coast National Park Authority Privacy Notice – Keeping Your Information Safe [Last updated: October 2023]

How we use your personal information for the rental and use of E-Bikes

This privacy notice is to let you know how Pembrokeshire Coast National Park Authority will look after your personal information in relation to the rental and use of E-Bikes.

Personal data processed for these purposes include:

  • The information about yourself that you enter into the E-Bike booking Smartphone App ‘MOQO’.

This notice explains how we do this and tells you about your privacy rights and how the law protects you. This notice may change from time to time, so please check our website occasionally to ensure that you are happy with any changes.

 

Who we are

Pembrokeshire Coast National Park Authority was created as a freestanding special purpose local authority under the 1995 Environment Act (the Act).

You can find out more about us here.

If you have any questions, or want more details about how we use your personal information, you can contact our Data Protection Officer.

DPO@pembrokeshirecoast.org.uk

01646 624800

You can also write to us at:

Data Protection Officer
Pembrokeshire Coast National Park Authority
Llanion Park
Pembroke Dock
Pembrokeshire
SA72 6DY

Pembrokeshire Coast National Park Authority is registered as a Data Controller with the ICO (Information Commissioners Office). Registration number: Z6910336.

 

How the law protects you

Your privacy is protected by law and this section explains how that works.

We set out how we meet accountability measures in the law and how we keep your information safe in our Data Protection Policy.

Your rights

Under data protection regulations you have the following rights:

  1. The right to be informed
  2. The right of access
  3. The right to rectification
  4. The right to erasure
  5. The right to restrict processing
  6. The right to data portability
  7. The right to object
  8. Rights in relation to automated decision making and profiling

The lawful basis of processing influences which rights are available to the individual.

 

The data we collect

The personal data we collect about you for the purpose of renting and using the E-Bike includes:

  • your name
  • address
  • telephone number
  • date of birth
  • email address
  • payment data

We collect this personal information about you when you input it into the MOQO E-Bike Booking Smartphone App.

 

Proper reasons (lawful basis) for using your personal data

The information that you provide us will be processed according to the UK General Data Protection Regulation and the Data Protection Act 2018.

Data Protection law says that we are allowed to use personal information only if we have a proper reason (lawful basis) to do so.

The lawful basis relied upon for the rental and use of the E-Bike is :

  • To fulfil a contract we have with you, or
  • When it is our legal duty, or
  • Legitimate Interest, or
  • Consent

No special categories of data will be collected for the purpose of the rental and use of the E-Bike.

 

The information we collect about you, the lawful basis and what it is used for

What we use your personal information for Our reasons (lawful basis) Our public tasks or legitimate interests
Keeping in contact and seeking feedback about the service we provide Legitimate interest Managing ongoing relationships and improving services
To carry out our obligations arising from the rental contract Fulfilling contracts Fulfilling Authority duties
Processing Payments – including getting in contact with you about it if needed Contract
Our legal obligations
Legitimate interest
Effective processing of payments
Processing queries, comments, feedback and complaints you submit Legal obligations
Legitimate interest
Fulfil the Authority’s National Park service standards

 

CCTV Footage

We operate Closed Circuit Television (CCTV) throughout various locations within the Pembrokeshire Coast National Park Authority.

Our CCTV captures live visual images only (there is no audio captured by our CCTV) and any recordings are retained for a period of 30 days. This may be extended however in circumstances where the CCTV footage is necessary to support the investigation into incident or is required as evidence.

Please note clear signage is in place within PCNPA areas that are being monitored by CCTV.

Camera positions are reviewed annually to ensure that they remain proportionate to their purpose. Where the purpose can no longer be justified against the intrusion on personal privacy, they will be removed or switched off.

The Authority will monitor and respond to any concerns or complaints that it receives relating to the positioning of cameras and their field of vision. Where the position and purpose can no longer be justified against the intrusion on personal privacy or property, they will be removed or switched off.

What we use your personal information for Our reasons Our public tasks or legitimate interests
To protect staff, Members, volunteers, visitors and members of the public with regard to their personal safety.

Deterring violent or aggressive behaviour towards PCNPA staff.

To protect the Authority’s buildings and equipment, and the personal property of, staff, Members, volunteers, visitors and members of the public.

Preventing and detecting crime at its sites and retail facilities and assist in the identification and apprehension of offenders.

To provide evidence of damage or loss to the Authority’s insurance company.

Legitimate Interest

If criminal offence data is captured in these cases the capture of the image would relate to substantial public interest and test 10. preventing and detecting of unlawful acts and 11. Protecting the Public

Legitimate Interest in terms of protecting staff, Members, volunteers, visitors and members of the public with regard to their personal safety.

Deterring violent or aggressive behaviour towards PCNPA staff.

To protect the Authority’s buildings and equipment, and the personal property of, staff, Members, volunteers, visitors and members of the public.

Preventing and detecting crime at its sites and retail facilities and assist in the identification and apprehension of offenders.

To provide evidence of damage or loss to the Authority’s insurance company.

 

How long we keep your information for

We will only hold your personal information in the MOQO E-Bike Booking App whilst your account is active or for as long as is necessary for any relevant matters relating to the rental to be resolved in full or in meeting any legal obligations.

 

Who we share your personal information with

We may share your personal information internally with relevant departments within the Authority in order to meet our contractual and legal obligations, to respond to any queries you may have or when communicating with you about our E-Bike rental service.

When you input your data into the MOQO E-Bike Booking App your data is shared with Digital Mobility Solutions who are based in Germany and as well as any other third parties necessary for the sole purpose of fulfilling our contractual and legal obligations and for the smooth booking of the E-Bike rental.

When sharing your data we ensure appropriate due diligence is undertaken and Data Processing or Sharing Agreements are in place. We will not make any disclosures to third parties for marketing purposes.

 

How we use your personal information to make automated decisions

Currently we don’t use your information to make automated decisions. If this changes in the future we will update this section of the notice.

 

If you choose not to give personal information

We may need to collect personal information by law, or under the terms of a contract we have with you.

If you choose not to give us this personal information, it may delay or prevent us from meeting our obligations. It may also mean that we cannot perform tasks related to a service you are looking to access.

Any data collection that is optional would be made clear at the point of collection

 

Consent and withdrawing consent

Where individual consent is needed to process personal information we will make you aware. Consent will not generally be a precondition of signing up to a service.

You can withdraw your consent at any time. Please contact us if you want to do so at info@pembrokeshirecoast.org.uk or the relevant team within the Authority who you provided consent to.

If you withdraw your consent, we may not be able to provide certain information or services to you. If this is the case, we will tell you.

 

How to get a copy of your personal information

You can access your personal information we hold by writing to us to the address below:

Administration and Democratic Services Manager
Pembrokeshire Coast National Park Authority
Llanion Park
Pembroke Dock
Pembrokeshire
SA72 6DY

If you need assistance please contact: info@pembrokeshirecoast.org.uk , Tel: 01646 624800.

 

Letting us know if your personal information is incorrect

All data processed about you within the MOQO E-Bike Booking App is data that you have provided. You are permitted to make any changes wherever necessary in order to ensure the information is kept accurate and up to date.

 

What if you want us to stop using your personal information?

You have the right to object to our use of your personal information, or to ask us to delete, remove, or stop using your personal information if there is no need for us to keep it.

There may be legal or other official reasons why we need to keep or use your data. But please tell us if you think that we should not be using it.

We may sometimes be able to restrict the use of your data. This means that it can only be used for certain things, such as legal claims or to exercise legal rights. In this situation, we would not use or share your information in other ways while it is restricted.

You can ask us to restrict the use of your personal information if:

  • It has been used unlawfully but you don’t want us to delete it
  • It is not relevant any more, but you want us to keep it for use in legal claims
  • You have already asked us to stop using your data but you are waiting for us to tell you if we are allowed to keep on using it.

If you want to object to how we use your data, or ask us to delete it or restrict how we use it or, please contact us at DPO@pembrokeshirecoast.org.uk.

 

Cookies

As most of the online services, our website uses cookies first-party and third-party cookies for a number of purposes. The first-party cookies are mostly necessary for the website to function the right way, and they do not collect any of your personally identifiable data.

The third-party cookies used on our websites are used mainly for understanding how the website performs, how you interact with our website, keeping our services secure, providing advertisements that are relevant to you, and all in all providing you with a better and improved user experience and help speed up your future interactions with our website.

You can manage your cookies preferences by clicking on the “Cookie settings” button and enabling or disabling the cookie categories on the popup according to your preferences. Alternatively, most web browsers allow some control of most cookies through the browser setting.

Further information is provided in our Cookie Policy.

 

Sending data outside the UK

We will only send your data outside of the UK to:

  • Comply with a legal duty
  • Or, when data processors we use send data outside the UK, but have relevant safeguards in place.

If we, or a processor we use, does transfer information outside of the UK, we will make sure that it is protected in the same way as if it was being used in the UK. We’ll use one of these safeguards:

  • Ensure the receiver is located in the EEA (European Economic Area), or a third country or territory or is an international organisation, covered by UK ‘adequacy regulations’.
  • Put in place a contract with the recipient that means they must protect it to the same standards as the UK.

 

How to complain

Please let us know if you are unhappy with how we have used your personal information. Please contact our data protection officer at DPO@pembrokeshirecoast.org.uk or 01646 624800

You also have the right to complain to the Information Commissioner’s Office. Find out on their website how to report a concern. There helpline number is 0303 123 1113.