JAQU privacy notice
This privacy notice sets out how the Joint Air Quality Unit (JAQU), a partnership between the Department for Environment, Food and Rural Affairs (Defra) and the Department for Transport (DfT) will use your personal data to monitor the impact of policies designed to tackle roadside nitrogen dioxide (NO2) pollution.
JAQU is a Joint Data Controller for your personal data with Councils responsible for implementing Local Plans to tackle roadside NO2 pollution.
Your Data
Purpose
Your personal data is being collected to monitor the impact of policies designed to reduce roadside NO2 pollution.
The data
We will process the following personal data:
- Vehicle registration mark (VRM)
Vehicle registration mark data will be collected over a seven-day period by the Council responsible for implementing the Local Plan and transferred to JAQU.
Vehicle registration mark data is collected prior to the introduction of the Local Plan and at regular intervals (every three months/ year dependent on the Local Plan area) following Local Plan inception and ending once it has been confirmed that compliance has been reached and will be maintained in the future.
Lawful basis for processing
Data protection legislation sets out when we are lawfully allowed to process your personal data.
The lawful basis that applies to this processing is that it is necessary for the performance of a task carried out in the public interest. This is set out under Article 6 (1) (e) of the UK GDPR (Processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller).
The task in the public interest is to monitor and evaluate progress towards meeting the legal requirement to reduce NO2 set out in the Air Quality Standards Regulations 2010 which sets legally binding limits for concentrations in outdoor air of major air pollutants that impact public health
and the Air Quality Directions issued to specific local authorities under section 85(5) of the Environment Act 1995.
Who we will share your data with and why?
JAQU shares your vehicle registration mark data with DfT so your vehicle characteristics, such as type, age, size, engine size and emissions data, can be identified.
DfT remove your vehicle registration mark data before returning anonymised vehicle data to JAQU for the purpose stated above.
This means information on vehicle characteristics cannot be linked back to you.
Who we will share anonymised data with and why?
JAQU makes anonymised vehicle data available to Council implementing Local Plans and third parties for research purposes (e.g. Ricard Energy and Environment, the Institute for Transport Studies at the University of Leeds).
Retention
DfT and the Council delivering the Local Plan may retain your number plate data for up to twelve months to enable it to be (1) matched to vehicle characteristics, (2) quality assured and (3) anonymised.
If these activities can be completed promptly, your number plate data is deleted at the earliest opportunity.
What is the arrangment between the Joint Controllers regarding other matters concerning my personal data?
The Joint Controllers have agreed the following arrangement to determine their respective obligations under the UK GDPR:
- They have jointly prepared this privacy notice.
- They will cooperate with each other in responding to any request each receives from data subjects exercising their rights under data protection legislation in relation to their personal data (a ‘Data Subject Request’). The party which receives the Data Subject Request will fulfil the obligations of the controller to respond to the request in accordance with data protection legislation.
- They will provide reasonable assistance to each other to enable a Data Subject Request to be dealt with in an expeditious and compliant manner.
- Each shall be responsible for fulfilling the controller’s responsibilities under data protection legislation as to security of personal data when that personal data is processed on systems controlled by that party.
- If one Joint Controller discovers a data breach, that party (the ‘Reporting party’) will be responsible for assessing whether the breach constitutes a personal data breach that is required to be notified to the Information Commissioner’s Office and (where applicable) to the data subjects under Articles 33 and 34 of the UK GDPR. The Reporting party shall fulfil the obligations of the controller to give such notice, if it is required, in accordance with data protection legislation.
- They have agreed to provide reasonable assistance to each other in order to facilitate the handling of any data breach in an expeditious and compliant manner.
- In the event of a dispute brought by a data subject or a data protection authority concerning the processing of personal data against either or both of them, the Joint Controllers will inform each other about any such disputes or claims, and will cooperate with a view to settling them amicably in a timely fashion.
Irrespective of the above arrangement, you can exercise your rights under the UK GDPR in respect of and against each of the Joint Controllers if you wish.
International Transfers
Your number plate data is not transferred outside of the UK.
Your Rights and Complaints
If you have any questions about how your vehicle registration mark data is processed or are interested in exercising your rights in relation to that processing contact:
Data Protection Manager for JAQU
Defra
Information Rights Team
Area 1E
Nobel House
17 Smith Square
London
SW1P 3JR
Email: data.protection@defra.gov.uk
A list of your rights under the General Data Protection Regulation and Data Protection Act 2018 is provided by the Information Commissioner’s Office
Defra’s and DfT’s Personal Information Charters are available on their respective websites:
Review
We review our privacy policy regularly to ensure you are always aware of what personal data we collect, how we use it and under what circumstances (if any) we will share it with other parties.
Please check this website regularly for future updates.