Our core data protection obligations and commitments are set out in the organisation’s primary privacy notice.
This notice provides additional privacy information for: customers and employees of bus companies operating in Greater Manchester, and respondents to our consultations on bus reform.
Purposes
We collect [or obtain] your personal information for the following purpose(s):
- To research current bus provision in Greater Manchester;
- To plan future bus provision in Greater Manchester; and
Categories of personal data
In order to carry out these purposes we collect and obtain:
- Personal details;
- Employment and education details;
- Journey history;
- Business activities of individuals;
- Family details
We do not collect, store or use any special category personal information:
Legal basis for processing
The legal basis we rely on for processing your personal information is:
- The processing is necessary for compliance with our legal obligations under Part II of the Transport Act 1968, and the Transport Act 2000 (as amended by the Bus Services Act 2017);
- The processing is necessary for the performance of a task carried out in the public interest;
If you fail to provide certain information when requested, we may be prevented from complying with our legal obligations (for example, our duty to obtain data about persons employed by the bus operating companies in Greater Manchester).
The legal basis we rely on for processing your special category personal information is:
- Processing is necessary on substantial public interest grounds, namely for the purpose of carrying out our duties under s123E (4)(c) of the Transport Act 2000 (as amended by the Bus Services Act 2017), and the Equalities Act 2010
Information sharing recipients
We do not share personal information about you with any other organisations.
Sources of personal data other than the data subject
As well as information directly collected directly from you, we also collect or receive information from:
- Bus operating companies
Automated decisions
For this processing, all the decisions we make about you involve human intervention.
Data retention criteria
Our Retention Schedule outlines how long we retain certain types of information for.
Rights of individuals
You have a right to be informed about how and why your personal information is being processed. This notice fulfils that obligation. You also have a number of other rights.
Information about the following rights is available in our Guide to Exercising Your Rights:
- Contacting our Data Protection Officer;
- Raising a concern with us; and/or
- Making a compliant to the Information Commissioner
Updates
We may update or revise this Privacy Notice from time to time and provide supplementary privacy information as is necessary to TfGM’s current workforce.
