EPC Group Privacy Notice

General Provisions

How will the EPC Group use your personal information?

Euro Parking Collection plc and its subsidiaries, Contractum Limited, incorporated and registered in England and Wales with company number GB3515275 and GB5755117 respectively, and EPC Hungary Kft., registered in Hungary with number 01-09-908128, constitute the EPC Group (‘EPC’).

EPC specialises in the identification, notification and collection of unpaid traffic and public transport related fees, charges and penalties issued to foreign registered vehicles or rental vehicles with foreign or non-resident hirers (‘FRV’) across Europe.

We respect your right to privacy, and in this privacy notice explain why EPC collects your personal data and how we process them. If you wish to contact us regarding the way your data has been handled, please write to EPC on privacy@epcplc.com

EPC does not transfer your personal data to third parties outside the European Economic Area, unless we obtain an express consent from you to do so. Territories outside the EEA may not have equivalent legal protections to those that apply within the EEA but we ensure that our partners located outside the EEA continue to take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy. The information you provide will be held securely by us and/or our data processors whether the information is in electronic or physical format.

All information about you will be processed only for as long as the relevant legislation and the legal basis for data processing require this. All personal data is stored in encrypted form and where possible, it is pseudonymised.

EPC does not require you to provide us with any data that falls under category of special data which reveal your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, any genetic or biometric data, data concerning health or data concerning your sex life or sexual orientation. Please note that if at any point, especially during the appeals process, you provide us with such data, we adopt a pragmatic approach and aim to use information necessary for consideration of the appeal.

As the data subject, you have a number of rights that you can exercise. Please note that we must verify your identity in order for you to exercise your rights. To make this process safe we require you to provide us with: EPC’s invoice/reference/case number and the Vehicle Registration Mark (‘VRM’).

EPC intends to meet the highest standards when processing personal data. Therefore, we take any complaints very seriously. If you wish to make a complaint about the way we have processed your personal information, you can contact the Information Commissioner’s Office in their capacity as the statutory body which oversees data protection law: https://ico.org.uk/concerns/

EPC does not carry out solely automated decision making.

If you make a payment to EPC, it will be processed by our partner- Payex, who is Payment Card Industry Data Security Standard (PCI DSS) compliant. EPC does not store any of your card information. All information is processed by Payex, see details here.

To understand how we process your personal data, please read the relevant section of this notice. Please note that you may belong to more than one of the below groups:

Visitors To Our Website

EPC Web Account Holders (Tolls and Penalties)

AutoPASS Account Holders

Recipients Of Penalty Charges

Recipients Of Invoices

People Who Call Our Helpline

People Who Contact Us Via Post

People Who Use ‘Contact EPC’ Form On The Website

People Who Send Us Emails

Job Applicants



Visitors To Our Website

EPC is a data controller for information that we collect on our website.

When you visit www.epcplc.com, www.contractum.eu or www.epchungary.hu, we collect standard internet log information and details of visitor patterns; for details please see our Cookies Policy. We do this to improve your browsing experience.

By continuing to browse you accept the above policy.

None of your personal data, in this case your IP address, is being passed on to any third party. We protect our website from brute force attacks by blocking the IP addresses from which such attack originates and therefore EPC collects IP addresses which are then used for troubleshooting and ensuring security. The logs are retained for 12 months.

Back to General Provisions


EPC Web Account Holders (Tolls and Penalties)

EPC is a data controller for information that you provide us with when you register for the easy to use online service allowing managing payments of tolls and traffic related notices. The personal data consists of: your name, address, email address, and vehicle registration mark.

EPC processes your personal data on the basis of a contract which you enter into when registering for a web account on terms set out in EPC Website Terms of Service, and will process your data for the duration of the contract and if applicable, for a period of 7 years after the date you paid any charges.

If you register your vehicle, you will gain an easy access to notices, email delivery, payments, pictures and communications.

If the charges remain unpaid, your case may be passed to a debt collection agency or you may be summoned to court, which may increase the amount owed.

Back to General Provisions


AutoPASS Account Holders

By registering your existing AutoPASS account, you provide us with information on your vehicle’s environmental differentiation in order for a correct invoice to be issued. EPC processes this data on written instructions from Statens Vegvesen (SVV), who is a data controller and can be contacted on firmapost@vegvesen.no. EPC will process your data for as long as instructed by SVV.

Back to General Provisions


Recipients Of Penalty Charges

When you receive a Penalty Charge Notice (‘PCN’) from EPC, it means that you have outstanding payment due to one of the Issuing Organisations.

EPC processes your data displayed on the relevant notification on behalf of the Issuing Organisation which authorised its issue. The Issuing Organisation has delegated their function of tracing, issuing and collecting monies due by FRVs, to EPC. The delegation by power of attorney is available for viewing by clicking here and here.

Your data will not be used for any other purpose than those specified above.

EPC obtains a VRM and contravention details from the Issuing Organisation, and furthermore, your name and address from the relevant official national or regional Vehicle Licensing Authority. If you wish to be informed who we obtained your data from, please email us at privacy@epcplc.com.

Is some cases, EPC obtains your personal data, in form of VRM, your name and address directly from the Issuing Organisation, vehicle rental company or former vehicle registered keeper. The latter occurs when the official register was not updated with transfer of ownership.

However, if you are an EPC Web Account Holder, you would have provided us with the data displayed on the PCN yourself.

Your data will not be used for any other purpose than those specified above. EPC will process your data for as long as instructed by the Issuing Organisation and, if applicable, for a period of 7 years after the date you paid any charges

Back to General Provisions


Recipients Of Invoices

When you receive an invoice from EPC, it means that you need to make a payment for usage of facilities provided by one or more of the Issuing Organisations.

EPC processes your data displayed on the relevant notification on behalf of the Issuing Organisation which authorised its issue. The Issuing Organisation has delegated their function of tracing, issuing and collecting monies due by FRVs, to EPC. The delegation by power of attorney is available for viewing by clicking here and here.

If the charges remain unpaid, your case may be passed to a debt collection agency or you may be summoned to court, which may increase the amount owed.

EPC obtains a VRM and contravention details from the Issuing Organisation, and furthermore, your name and address from the relevant official national or regional Vehicle Licensing Authority. If you wish to be informed who we obtained your data from, please email us at privacy@epcplc.com.

Is some cases, EPC obtains your personal data, in form of VRM, your name and address directly from the Issuing Organisation, vehicle rental company or former vehicle registered keeper. The latter occurs when the official register was not updated with transfer of ownership.

However, if you are an EPC Web Account Holder, you would have provided us with the data displayed on the PCN yourself.

Your data will not be used for any other purpose than those specified above. EPC will process your data for as long as instructed by the Issuing Organisation and, if applicable, for a period of 7 years after the date you paid any charges

Back to General Provisions


People Who Call Our Helpline

EPC’s helpline is advisory in nature and we accept no appeals other than in writing. A recording of your call may be retained in encrypted form for six months for monitoring quality, training and auditing purposes. If you wish to request copy of it in the future, you need to let us know the date and time of your call.

Back to General Provisions


People Who Contact Us Via Post

When you contact us via post, you voluntarily submit your personal data and agree for us to process the data contained in that communication.

If you contact us to make a representation, you must agree that your personal data may be disclosed to the relevant Issuing Organisation which may be located outside the UK and the EEA. If you submit your representation by post or fax, please include the following written statement: ‘I hereby agree, that my personal data may be disclosed to the relevant Issuing Organisation.’ Correspondence without this statement will not be considered.

EPC processes your data displayed on the relevant notification on behalf of the Issuing Organisation which authorised its issue. The Issuing Organisation has delegated their function of tracing, issuing and collecting monies due by FRVs, to EPC. The delegation by power of attorney is available for viewing by clicking here and here.

EPC will process your data for as long as instructed by the Issuing Organisation and, if applicable, for a period of 7 years after the date you paid any charges

If the charges remain unpaid, your case may be passed to a debt collection agency or you may be summoned to court, which may increase the amount owed.

Back to General Provisions


People Who Use ‘Contact EPC’ Form On The Website

When you make a representation against a charge via ‘Contact EPC’ form on EPC’s website, you provide us with additional data to the data that we already process (see Recipients of Penalty Charges and Recipients of Invoices).

EPC processes your data displayed on the relevant notification on behalf of the Issuing Organisation which authorised its issue. The Issuing Organisation has delegated their function of tracing, issuing and collecting monies due by FRVs, to EPC. The delegation by power of attorney is available for viewing by clicking here and here.

For your representation to be considered, you must agree that your personal data may be disclosed to the relevant organisation which may be located outside the UK and the EEA. Please follow the instructions on our website

EPC will process your data for as long as instructed by the Issuing Organisation and, if applicable, for a period of 7 years after the date you paid any charges

If the charges remain unpaid, your case may be passed to a debt collection agency or you may be summoned to court, which may increase the amount owed.

Back to General Provisions


People Who Send Us Emails

When you send us an email, you voluntarily submit your personal data and agree for us to process the data contained in that email, including your email address.

EPC processes your data displayed on the relevant notification on behalf of the Issuing Organisation which authorised its issue. The Issuing Organisation has delegated their function of tracing, issuing and collecting monies due by FRVs, to EPC. The delegation by power of attorney is available for viewing by clicking here and here.

Furthermore, please note that if your charge remains unpaid your case, including the email communication, will be passed for further enforcement with potentially increased fees.

EPC will process your data for as long as instructed by the Issuing Organisation and, if applicable, for a period of 7 years after the date you paid any charges

Back to General Provisions


Job Applicants

EPC is a data controller for the information you provide during recruitment process and we process it on the basis of legitimate interest. If you have any queries about how we handle your information please contact us at privacy@epcplc.com.

All of the information you provide during the recruitment process will only be used for the purpose of progressing your application, or to fulfil legal or regulatory requirements and will be stored for 12 months from the date of filling the post.

We will not share any of the information you provide during the recruitment process with any third parties for marketing purposes or store any of your information outside of the European Economic Area. The information you provide will be held securely by us and/or our data processors whether the information is in electronic or physical format.

Back to General Provisions