Privacy Notice Fleet Imagery - DPD UK

GB_2019_DPD-VAN-LONDON-Tower-Bridge.jpg GB_2019_DPD-VAN-LONDON-Tower-Bridge.jpg

If you are reading this information notice, this is probably because you scanned one of the QR codes displayed on a delivery vehicle of DPDgroup UK Limited, member of Geopost delivery network.  

Geopost, a company based at 26 rue Guynemer, 92130 Issy-les-Moulineaux, France, is a European leader in parcel delivery and solutions for e-commerce. Geopost operates in more than 50 countries across all continents through its network of expert delivery brands, including: DPD, Chronopost, SEUR, BRT, Speedy and Jadlog. Geopost via its network members operates a fleet of vehicles in charge of delivering and transporting products and merchandise.  

Geopost Vision, a member of Geopost network, is recording video footage of the road and street environment  via connected dashcams installed inside the delivery vehicles of DPDgroup UK Limited, member of Geopost network.  

By doing so, Geopost Vision may incidentally collect faces of individuals and licence plates of vehicles in the road and street environment - although this is not the initial purpose, and the footage provided to our customers should not contain any personal data.

To achieve this, personal data that may be present in the video footage such as faces, and licence plates are blurred using industry standard secure blurring mechanisms. This means that faces of individuals and licence plates of vehicles are no longer visible on the final video footage shared with our customers via a secure means of transfer.

Geopost Vision is processing such personal data as a controller for the purpose of providing road and street environment data to our customers for the improvement of their own services such as: 

  • Mapping optimization: Identifying the locations of traffic lights, speed limits, road signs, and other elements to update online maps accordingly.

  • Infrastructure management: Identifying areas requiring repair, maintenance, or improvement.

  • Traffic management: Analysing traffic patterns, congestion, and safety issues.

  • Urban planning: Developing efficient and sustainable transportation systems.

  • Environmental impact assessment: Evaluating the environmental effects of road infrastructure.

  • Insurance and road traffic incidents. 

 

Geopost Vision is processing your personal data jointly with Geopost. 

 

 

Further information about dashcams installed in our delivery vehicles?

Our connected dashcams are forward facing cameras installed inside our delivery vehicles and they record everything in front of the vehicles.

Our dashcams are provided by our service provider located in Europe who is in charge of installing, maintaining the dashcams and providing a data storage and transmission platform.

How does it work in practice?

  • Geopost Vision record video footage via connected dashcams installed in our delivery vehicles;

  • Once recorded by our dashcams, Geopost Vision extract video footage from the dashcams if we receive a request from one of our customers (such as Map Providers);

  • Personal data that may be present in the video footage such as faces, and licence plates are then blurred using industry standard secure blurring mechanisms. This means that faces of individuals and license plates of vehicles are no longer visible on the final video footage.

  • After having blurred the video footage, Geopost Vision provides the blurred video footage to our customers via a secure means of transfer.

Geopost Vision’s customers will use such blurred video footage for the purpose of improving their services (as listed above) and might be provided to data subjects in case of data subject rights request.

The blurred video footage may be used as evidence for insurance and or road traffic accident purposes and will not be used for any other purposes.

The unblurred (raw) video footage may be used for any regulatory data access requests.

Most importantly, the blurred video footage communicated to Geopost Vision’s customers will not be displayed or published by our customers and will therefore not appear or be visible on our customer’s services or products. Solely information contained in the video footage, such as road and street environment data (traffic lights, stop signs, speed limits, etc.) will be used by our customers.

This incidental processing of personal data is based on Geopost Vision’s legitimate interests to develop its business activities and provide blurred video footage to its customers.

Who will be recorded?

Any individual (data subject) in the field of vision of the dashcams when it is turned on (during delivery only). 

What personal data do we collect?

The personal data collected and processed are faces of individuals and license plates of the vehicles in the road and street environment.  

How long do we keep unblurred (raw) video footage for?

  • Video footage recorded by the dashcams is stored on the dashcams for a maximum of 30 days and then automatically deleted; 
  • The extracted video footage is stored up to 1 day on the service provider servers, and then automatically deleted; 
  • The extracted unblurred footage is immediately deleted after its blurring on the Geopost Vision servers. 

Who can access your personal data?

Only authorised Geopost Vision, Geopost and our service provider’s staff have access to the unblurred (raw) video footage provided they require access in order to perform their duties. 

Our service provider is our data processor in charge of installing and maintaining the dashcams. In this context, it processes personal data on our behalf. We have in place a data processing agreement which imposes strict security and confidentiality obligations on any of its staff members that are authorised to access the video footage. The unblurred (raw) video footage will not be transferred outside of the European Economic Area (EEA) or outside of a country that has been recognised by the European Commission as providing an adequate level of protection to personal data.  

Your rights

You have the right to, provided that your request complies with the requirements of the applicable data protection legislation UK GDPR and EU GDPR:

  • Request access to your personal data: In that case, please note that we will only be able to provide you with blurred video footage for privacy and security reasons because the purpose of processing does not require identification of any individuals and that we do not have, in any case, the technical capacity to identify you in the video footage we record.
  • Request the erasure of your personal data. In that case, we will delete the relevant video footage.
  • Request the rectification of your personal data: In that case, because the purpose of processing does not require identification of any individuals and that we do not have, in any case, the technical capacity to identify you in the video footage we record, we will delete the relevant video footages.
  • Restrict the processing of your personal data: in that case, we will no longer process the relevant video footage and delete it after 30 days.
  • Object to the processing of your personal data: As we do not have the technical capacity to identify you in the video footage, if you object to the processing of your personal data, we’ll erase the video footage in which you appear.

 

You can exercise your data subject rights at any time by sending an email to the following email address: [email protected].

 

You have the right to lodge a complaint with your local Data Protection Authority if you are not satisfied with the way in which we have handled your personal information. Find your local Data Protection Authority here.

Contact

If you have any questions, you can contact our data protection officer at [email protected]

 

Data Subject Rights Request: 

 

As the Data Controller, Geopost Vision has an obligation to fulfil these requests therefore, should you wish to exercise your data subject rights in relation to any video footage that has been recorded, please send an email to our DPO email address: 

[email protected] 

 

To ensure the correct processing of your request please include the following information in your email: 

  • Your first name  

  • Your last name 

  • If you are the data subject or acting on behalf of the data subject 

  • The right you want to exercise:

    • Access 

    • Erasure 

    • Objection 

    • Restriction 

    • Rectification 

To help us locate and retrieve the relevant footage we would require: 

  • The date of the recording 

  • The time of the recording (GMT) 

  • The location of the recording (road, street, Country) 

After the reception of your email, we will acknowledge the reception of your data subject right request and proceed to answer it. The data protection legislation provides a Data Controller a timescale of one month from the date of receipt to respond to a data subject rights request.  Should there be a need to clarify or extend your request, we will notify you without undue delay.