Bus Reform Privacy Notice

Our core data protection obligations and commitments are set out in the organisation’s primary privacy notice.

This notice provides additional privacy information for: customers and employees of bus companies operating in Greater Manchester, and respondents to our consultations on bus reform.

---

Purposes

We collect [or obtain] your personal information for the following purpose(s):

• To research current bus provision in Greater Manchester;
• To plan future bus provision in Greater Manchester; and

---

Categories of personal data

In order to carry out these purposes we collect and obtain:

• Personal details;
• Employment and education details;
• Journey history;
• Business activities of individuals;
• Family details;
• Special category data, such as ethnicity

---

Legal basis for processing

The legal basis we rely on for processing your personal information is:

• The processing is necessary for compliance with our legal obligations under Part II of the Transport Act 1968, and the Transport Act 2000 (as amended by the Bus Services Act 2017);
• The processing is necessary for the performance of a task carried out in the public interest;

If you fail to provide certain information when requested, we may be prevented from complying with our legal obligations (for example, our duty to obtain data about persons employed by the bus operating companies in Greater Manchester).

The legal basis we rely on for processing your special category personal information is:

• Processing is necessary on substantial public interest grounds, namely for the purpose of carrying out our duties under s123E (4)(c) of the Transport Act 2000 (as amended by the Bus Services Act 2017), and the Equalities Act 2010

---

Information sharing recipients

We do not share personal information about you with any other organisations.

---

Sources of personal data other than the data subject

As well as information directly collected directly from you, we also collect or receive information from:

• Bus operating companies

---

Automated decisions

For this processing, all the decisions we make about you involve human intervention.

---

Data retention criteria

Our Retention Schedule outlines how long we retain certain types of information for.

---

Rights of individuals

You have a right to be informed about how and why your personal information is being processed. This notice fulfils that obligation. You also have a number of other rights.

Information about the following rights is available in our Guide to Exercising Your Rights:

• Contacting our Data Protection Officer;
• Raising a concern with us; and/or
• Making a compliant to the Information Commissioner

---

Updates

We may update or revise this Privacy Notice from time to time and provide supplementary privacy information as is necessary to TfGM’s current workforce.

---