Q-Park Operations Denmark A/S (hereinafter referred to as “Q-Park” or “We” or “Us”), with registered office at Gladsaxevej 378, 2860 Søborg, Denmark, is a Danish Company providing high-quality services in purpose-built parking facilities and off-street parking at strategic locations in Denmark.
Q-Park aims to be the most preferred and recommended parking partner at strategic locations, offering you the best possible service, based on functional quality, operational excellence, customer satisfaction and sustainable financial performance.
In the execution of its business activities, Q-Park is required to process personal data. Therefore, we are committed to protecting personal data and compliance to the General Data Protection Regulation (‘GDPR’) and applicable privacy legislation in order to protect your personal data, which is made known to us in the course of our business and to process it only for the specific purposes for which it is collected, used and retained.
Q-Park acts as the controller for the processing of your personal data as described in this Privacy Statement. In addition, Q-Park B.V., responsible for the general management of the Q-Park Group, is the data controller together with Q-Park for the processing of personal data for the purpose of analysing company information.
The purpose of this document is to be transparent about and explain how and why we process your personal data. For more information on this, please contact our Data Protection Officer, whose contact details you can find below.
Q-Park has appointed a Privacy Officer. Our Privacy Officer is your primary point of contact for all questions, comments and complaints about this Privacy Statement and our processing of your personal data. You can contact our Privacy Officer via privacy@q-park.dk
1. Parking
When you park in our facility and in our spaces, you provide us with some information, which will typically be when paying for the parking permit. This can be done either via our digital solutions, if you buy a parking permit on our website or use the EasyPark app, or if you pay at our payment machines. The collection of information can also take place if you are issued a parking or guest parking permit, e.g. via our E-Park system, either by entering your information yourself or by having a space administrator do it. In addition, collection can take place when you drive into our parking areas, where we use automatic number plate recognition, in which case we will record your registration number via a camera. Finally, we carry out video surveillance in our parking facilities with a background in crime prevention and the desire to provide service in connection with your parking.
Q-Park constantly innovates to make parking easier for you. Q-Park has introduced Parking as a Smart Service ("PaSS") in parking facilities to let you enjoy a carefree parking experience.
Q-Park has its own smartphone app. One of its functions is to download and display a parking ticket. When you use the Q-Park app for these "smart parking facilities", we collect and use your QR code or number plate to make parking possible. For example to automatically open the exit barrier when you leave. When you use our services with your QR code, you have your QR code scanned when you drive in and out. If you use our services with your number plate, we use automated number plate recognition. We take a photo of your number plate. We do not take a photo of your vehicle or its occupants.
In both cases we register the date, time and parking facility you park with us. We then use digital payment solutions to enable billing. This means we charge you automatically, without you having to manually pay for a parking ticket.
When you have given your consent, we register your current location via the Q-Park app. This allows us to help you search for the best parking facility nearby and to provide you a better user experience by centring the virtual map around your current location.
When you do not accept sending your location information by the app or your mobile device settings, location information will not be sent to us.
1.1 Categories of recipients
Your personal data may be passed on to public authorities in the form of SKAT, the police, the Danish Data Protection Authority, the Parking Complaints Board and the courts. In addition, disclosure is made to those of our data processors who provide solutions for payment and issuing parking permits, as well as to space administrators.
1.2 The purposes and legal basis for processing
The overall purpose of the processing of the personal data is to make your parking possible, whether it is to receive your payment for parking or to issue you a parking permit. The processing takes place on the basis of Article 6, subsection of the Data Protection Regulation. 1, letter b, and section 6, subsection of the Data Protection Act. 1, which relates to processing on the basis of a contract. This contract will be the so-called quasi-agreement that you have entered into by parking in one of our parking areas.
As far as video surveillance is concerned, the processing takes place on the basis of section 2, subsection of the TV Surveillance Act. 1, no. 1, and § 3, subsection 1, as well as Article 6 of the Data Protection Ordinance. In certain cases, the surveillance images may be passed on to the police or insurance companies, either on the basis of Section 4c of the TV Surveillance Act or Article 6, Subsection of the Data Protection Ordinance. 1, letter f.
In addition, processing may take place when we check vehicles in our parking areas to ensure that all parked vehicles have a valid parking permit. Processing takes place when our parking attendants scan your vehicle's registration number to look it up in our systems. The legal basis is the same as just above.
Information may be passed on to the administrator for the parking area in question, where the purpose is to give the administrator the opportunity to continuously regulate the parking permits that are issued. This disclosure takes place on the basis of Article 6, subsection of the Data Protection Regulation. 1, letter f, and section 6, subsection of the Data Protection Act. 1, which relates to processing on the basis of a balancing of interests. We have an interest in passing on the information in order to fulfill the cooperation agreement with the administrator, just as this must be able to control and regulate who has parking permits.
Another treatment based on the balancing of interests may be disclosure to certain authorities, if there are significant reasons for this. In particular, this may be disclosure to the police with the aim of preventing terrorism and crime and otherwise safeguarding societal interests, just as it may be disclosure of information to the Danish Data Protection Authority in connection with a complaint you have initiated with them.
Finally, the processing of your contact information as a space administrator will take place with the aim of registering you in our systems and giving you the necessary access, which is why processing is based on Article 6, paragraph 1 of the Data Protection Regulation. 1, letter b, and section 6, subsection of the Data Protection Act. 1.
1.3 Where your personal data originates
Predominantly, your personal data will come directly from you when you pay for or otherwise obtain a parking permit in one of our parking areas, e.g. via purchase from our website or use of a payment app or registration for a digital parking permit. The personal data can also come from a site administrator, to whom you yourself originally provided the personal data for the purpose of issuing a parking permit. Furthermore, the information can also come from automatic number plate reading and photography when entering our parking areas, where this is offered.
1.4 Storage of your personal data
For you as a partner, your information is stored for as long as it is necessary to achieve the purpose of the processing, including so that a legal claim can be established, asserted or protected, or if we are covered by legislation that obliges us to store it . Automatic number plate recognition is normally stored for 3 days, but in special cases this information can be stored for 92 days. Video surveillance from our parking facility is stored for 30 days. According to Section 10 of the Accounting Act, payment information must be stored for 5 years. Other personal data is continuously deleted from our various systems when it is no longer needed. The personal information relating to parking permits is stored for a maximum of 3 years after the permit expires, as this reflects the general rules on limitation and because for that reason disputes about payment and the like may arise during this period.
For you as a space administrator, your information is stored for up to 1 year and 30 days after all parking permits have expired and you have not responded to an inquiry about inactivity.
2. Subscription agreement in car park – Business
When your workplace chooses to enter into a subscription agreement regarding the use of our parking facilities, they provide some personal data which is necessary for the creation of the subscription and the ongoing relationship. This happens when creating a subscription with Salgssupport.
2.1 Categories of Information
We collect your name and email address from you, who is the contact person on behalf of your workplace. If you use the parking options that your workplace has with us, we will get your number plate from your workplace via the appointed contact person.
2.2 Categories of recipients
Your personal data may be passed on to your workplace. We also use our data processors who supply our customer systems. The data processor only processes personal data according to instructions from Q-Park, and may therefore not use the personal data for its own purposes.
2.3 The purposes and legal basis for processing
The purpose of processing your personal data is to be able to fulfill the agreement we have entered into with your workplace regarding the use of our parking facilities. The processing takes place on the basis of Article 6, subsection of the Data Protection Regulation. 1, letter f, and section 6, subsection of the Data Protection Act. 1, which relates to processing on the basis of a legitimate interest. The legitimate interest is fulfillment of a concluded agreement.
2.4 Where your personal data originates
We receive information from you as a contact person. If you use your workplace's parking facilities with us, we will pass on the necessary information from your workplace.
2.5 Storage of your personal data
We will store your information as long as you are employed by your employer who has an agreement with us. In some situations, your information will be saved in relation to the invoicing of your workplace. If this is the case, we will have your information in the current year + 5 years after the Accounting Act.
3. Subscription agreement in car park – Private
When you choose to enter into a subscription agreement regarding the use of our parking facilities, you provide some personal data which is necessary for the creation of the subscription and the ongoing relationship. This happens when creating a subscription with Salgssupport.
3.1 Categories of information
We collect your name, address, email address and telephone number from you.
3.2 Categories of recipients
We use our data processors who supply our customer systems. The data processor only processes personal data according to instructions from Q-Park, and may therefore not use the personal data for its own purposes.
3.3 The purposes and legal basis for processing
The purpose of processing your personal data is to be able to fulfill the agreement we have entered into with you regarding the use of our parking facilities. The processing takes place on the basis of Article 6, subsection of the Data Protection Regulation. 1, letter b, and section 6, subsection of the Data Protection Act. 1, which relates to processing on the basis of a contract.
3.4 Where your personal data originates
The personal information originates solely from you, as we do not obtain any additional information from third parties.
3.5 Storage of your personal data
We will keep your information for as long as you have an agreement with us. In addition, we have stored your information in relation to invoicing for the current year + 5 years after the Accounting Act.
4. Control fee
If you do not comply with the private law requirements and rules that have been determined for a given parking area, we can issue an inspection fee that you must pay for the illegal parking.
4.1 Categories of information
Only the personal data that is necessary is processed. This will include contact information in the form of the name and address of you as the owner or driver of the vehicle, the registration number, the tax number for the tax, time and place of the violation as well as pictures of the vehicle and any comments on the tax from the guard. If you raise objections to an imposed tax, all the personal data you provide will also be part of the processing.
4.2 Categories of recipients
Your personal data may be passed on to public authorities in the form of SKAT, the police, the Danish Data Protection Authority, the Parking Complaints Board and the courts. In addition, disclosure is made to those of our data processors who provide solutions for issuing control fees, as well as to space administrators. Information about you as the owner of a vehicle can also be passed on to the user of the vehicle, if it is he who is responsible for the imposed inspection fee. Finally, a recipient may be our associated debt collection companies that assist us with the recovery of control fees in the event of non-payment.
4.3 The purposes and legal basis for processing
The overall purpose of the processing of your personal data is the issuance and recovery of a control fee if you park in violation of the applicable parking rules for a given parking area. The processing takes place on the basis of Article 6, subsection of the Data Protection Regulation. 1, letter b, and section 6, subsection of the Data Protection Act. 1, which relates to processing on the basis of a contract. This contract will be the so-called quasi-agreement that you have entered into by parking in one of our parking areas.
Processing can also take place in connection with any objection proceedings you choose to initiate if you dispute the validity of the control fee. In this situation, we will use the information we collected about you when we issued the control fee and the other information you may have provided in connection with your objection. If you have objected directly to a space administrator and not to us, we may in particular provide them with images to clarify why the control fee has been issued. The processing takes place on the basis of Article 6, subsection of the Data Protection Regulation. 1, letter f, and section 6, subsection of the Data Protection Act. 1, regarding the balancing of interests rule, where our legitimate interest consists in processing your objection case and corresponding with you about it and in general providing good customer service.
Another treatment based on the balancing of interests may be disclosure to certain authorities, if there are significant reasons for this. In particular, this may be disclosure to the police with the aim of preventing terrorism and crime and otherwise safeguarding societal interests, just as it may be disclosure of information to the Danish Data Protection Authority in connection with a complaint you have initiated with them.
In the event that you, as the owner, were not the driver of the vehicle when the control tax was issued, we can pass on a control tax to the actual driver, either by you as the owner contacting us or by the driver contacting us to pay. The transfer takes place on the basis of Article 6, subsection of the Data Protection Regulation. 1, letter c, and section 6, subsection of the Data Protection Act. 1, as we are legally obliged according to § 1, subsection 2, of the executive order on the conclusion of certain agreements on parking and the issuing of control charges in private parking areas, to inform the driver of a vehicle that he has been charged a control charge.
If you have complained about an imposed control fee to the Parking Complaints Board, we can also pass on information about the fee to the board. This will be based on the data protection regulation's article 9, subsection 2, letter f, and section 7, subsection of the Data Protection Act. 1, regarding processing that is necessary to establish, enforce or defend a legal claim.
The same legal basis is used in relation to the processing that takes place where we are forced to hand over a case for the recovery of an inspection fee to our associated debt collection company on the basis of non-payment. If payment is still not made, a case can be initiated before the Danish courts.
4.4 Where your personal data originates
Personal information as mentioned above is collected when the control fee is issued by a parking attendant. Images of the vehicle and the registration number are collected directly on site, while your contact information as the owner of the vehicle is collected from the Danish Motor Register. In the event that your information does not appear in this register, we contact SKAT and are then provided with the missing information.
4.5 Storage of your personal data
Storage takes place as long as the personal data is necessary to achieve the purpose of the processing, including so that a legal claim can be established, asserted or protected, or if we are covered by legislation that obliges us to store them.
Pursuant to § 10 of the Accounting Act, we are obliged to store the information for 5 years from the end of the year in which the tax is paid or cancelled.
5. Recruitment
When you choose to apply for a job at Q-Park, you provide some personal data that is necessary for the recruitment process. This happens by creating a profile on our recruitment portal and by submitting your application.
5.1 Categories of personal data
This is primarily your contact information, but also information that appears in your CV and your application. You can also choose to provide information about gender, date of birth and marital status.
5.2 Categories of recipients
We only process your personal data internally for use in the recruitment process, which is why no disclosure takes place.
3.3 The purposes and legal basis for processing
The purpose of the processing is to process your application for a position at Q-Park. The processing takes place on the basis of Article 6, subsection of the Data Protection Regulation. 1, letter f, and section 6, subsection of the Data Protection Act. 1, as both you as the applicant and we have a legitimate interest in the processing.
5.4 Where your personal data originates
The personal information originates solely from you, as we do not obtain any additional information from third parties.
5.5 Storage of your personal data
Your personal data is stored during the recruitment process. If you are not offered employment at the end of the process, the personal data will be deleted after 6 months, unless you actively choose to have it stored for a longer period of time. If you are offered employment, your personal data will be transferred to your personnel folder in our HR archive and stored there during the entire employment relationship.
6. Video recordings
We use video surveillance in our parking facilities to protect our property and parking facilities against vandalism, optimise our services, support our operational processes and prevent fraud. Video surveillance can involve the collection and otherwise processing of your personal data like your image.
7. Bodycams
We want to create a safe environment for our P-guards, which is why our P-guards are equipped with a bodycam (body-worn camera) that can be used to prevent and solve episodes of violence and threats against the P-guards.
7.1 Categories of information
We collect sound and image recordings of you. The recordings may contain criminal matters.
7.2 Categories of recipients
Your personal data may be passed on to public authorities in the form of the police and the courts. In addition, we use those of our data processors who provide solutions for secure storage and transmission of the recordings. The data processor only processes personal data according to instructions from Q-Park, and may therefore not use the personal data for its own purposes. In addition, a disclosure is made to our lawyers in relation to specific legal cases.
7.3 The purposes and legal basis for processing
The overall purpose of the processing of your personal data is the prevention and clarification of incidents of violence and threats against our security guards. The processing takes place on the basis of Article 6, subsection of the Data Protection Regulation. 1, letter f, and section 6, subsection of the Data Protection Act. 1, which relates to processing on the basis of a legitimate interest. The legitimate interest is security considerations, including the prevention and investigation of criminal matters.
Information about criminal offenses is processed in relation to to protect a legitimate interest according to Section 8, subsection of the Data Protection Act. 3 and the data protection regulation art. 10. The legitimate interest is security considerations, including the prevention and investigation of criminal matters.
7.4 Where your personal data originates
We get information from the recordings with the cameras worn by the security guards. Recordings only take place when the camera is activated. This can be seen by the camera lighting up.
7.5 Storage of your personal data
We will store recordings from bodycams for 30 days, after which the recordings will be deleted. Recordings to be used in connection with criminal proceedings are kept until they are handed over to the police and the like.
8. Marketing purposes
When you register an account with us, we may use your personal data like your name and email address to advertise our services to you, including to provide you with promotional materials or offers for products and services from Q-Park, or send you other communications relating to our services.
9. Information we collect when you use our websites and app
We use cookies, web beacons (small graphic data, that recognize user activity, such as if and how often a user has visited a website) and other technologies to collect information that helps us enhance your experience. Cookies and other similar technologies that we use allow our website and app to function and help us to understand how to better tailor these to your interests.
We collect information related to the device, browser and the app that you are using (such as your device identifiers and your operating system), and network information (telecommunications carrier’s name, IP address, etc.) to better understand how our website visitors use our website and app, and to monitor and protect the security.
This allows us to customise and improve your experience and to analyse trends, administer the website, track your movements around our website and gather demographic information about our user base as a whole. Q-Park uses a combination of essential, statistic, analytical and marketing cookies. You can control or reset your cookies and similar technologies through your web browser, which will allow you to customise your cookie preferences and to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Service may not function properly if the ability to accept cookies is disabled.
You can read more about our use of cookies in our cookie policy.
10. Analysis of business information
Q-Park and Q-Park B.V. may use data collected when providing the parking services, such as QR code, date, parking location or place of residence, in aggregated form to gain insight and make decisions based on this. This allows us to improve and optimise our parking services. For example, by monitoring how many vehicles are in which parking locations at which times, we can manage any congestion.
In principle, Q-Park undertakes to process your personal data within the European Economic Area (“EEA”) as much as possible. When we process your personal data outside the EEA, we undertake to process your personal data only in countries for which the European Commission has issued an Adequacy Decision. When the European Commission has not issued an Adequacy Decision, we undertake to implement appropriate and suitable safeguards to provide an appropriate level of protection of your personal data.
Q-Park wants to make you fully aware that you are entitled to the following rights:
THE RIGHT TO ACCESS
You have the right to ask us whether we process your personal data. In case we process your personal data, you can request access to them in the form of a copy.
THE RIGHT TO RECTIFICATION
You have the right to ask us to correct or complete any personal data you believe is inaccurate.
THE RIGHT TO ERASURE
You have the right to ask us to erase your personal data. Please note that we are unable to execute your erasure request when the processing of your personal data is necessary to comply with applicable law or to establish, exercise or defend legal claims.
THE RIGHT TO RESTRICTION
You have the right to ask us to restrict the processing of your personal data for a certain period. Please note that we can continue to process your personal data to establish, exercise or defend legal claims.
THE RIGHT TO DATA PORTABILITY
You have the right to ask us to send you your personal data in a structured, common and machine-readable format and to transfer them to another controller.
THE RIGHT TO OBJECTION
You have the right to object to our processing of your personal data, but we may be unable to respond to your objection when we have weightier legitimate grounds for processing your personal data. You have the right to object to our processing of your personal data for direct marketing purposes.
THE RIGHT TO WITHDRAW CONSENT
You have the right to withdraw your consent for our processing of your personal data at any time.
THE RIGHT AGAINST AUTOMATED DECISION-MAKING
You have the right to contact us about and object to decisions based on the solely automated processing of your personal data that has legal or similarly significant effects on you.
If you wish to exercise your rights, please contact our Data Protection Officer, whose contact details you can find below. Please note that before responding to your request, we may ask you for additional information to confirm your identity.
Q-Park endeavours to get back to you as soon as possible and at the latest within one month after receiving your request. We may have to extend this period by up to two additional months. In that case, we will inform you of the extension within one month after receiving your request.
THE RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
You can apply to or lodge a complaint about our processing of your personal data with your local supervisory authority, whose contact details you can find via https://edpb.europa.eu/about-edpb/board/members_en
As we are continuously trying to handle your personal data in the best possible way, reflect changes, incorporate your suggestions and to satisfy legal requirements, we may update this Privacy Statement from time to time. We will alert you about material changes to the Privacy Statement by posting a notice on our website (www.q-park.dk). Any changes or modifications will be effective immediately upon posting the updated Privacy Statement on our website.
Your continued use of our services is subject to the updated Privacy Statement.