Commercial Services Privacy Notice

Our core data protection obligations and commitments are set out in the organisation’s primary privacy notice.

This notice provides additional privacy information for: Metrolink corporate season ticket holders; customers who have signed up for newsletters and other updates; competition entrants; market research survey respondents and focus group members; tenants of TfGM owned property; and landlords of property rented by TfGM.

---

Purposes

We collect [or obtain] your personal information for the following purpose(s):

• Marketing TfGM goods and services to customers who have signed up for newsletters and other updates;
• Undertaking market research and analysis;
• Administration of Metrolink Corporate season tickets; and
• Administration of the rental of TfGM owned properties, and rental of properties by TfGM.

---

Categories of personal data

In order to carry out these purposes we collect and obtain:

• Personal details;
• Financial details;
• Business activities of individuals;
• Case file information
• Visual images, personal appearance and behaviour;
• Incident and accident details;
• Licenses, permits or certificates held;
• Details of complaints; and
• Goods and services provided.

We may also collect, store and use the following special category personal information:

• Health.

---

Legal basis for processing

The legal basis we rely on for processing your personal information is:

• The processing is necessary for the performance of a contract with the data subject;
• The processing is necessary to meet one of our legal obligations in Part II of the Transport

Act 1968, and s99 of the Local Transport Act 2008; and/or

• The processing is necessary for the performance of a task carried out in the public interest.
• Marketing purposes: where we have asked and you have consented to receive electronic marketing information about our services (you may withdraw your consent at any time).

The legal basis we rely on for processing your special category personal information is:

• The data subject has given explicit consent to the processing.

If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you (such as enabling you to pay rent under the terms of your lease for the rental of property owned by TfGM), or we may be prevented from complying with our legal obligations (such as our powers to promote the use of public transport in order to improve the social, economic and environmental wellbeing of Greater Manchester).

---

Information sharing recipients

We may share personal information about you with the following types of organisations:

• Suppliers – in order for them to deliver services on our behalf; and
• Utility companies – for their legitimate interests in billing the correct party for utilities at properties.

---

Sources of personal data other than the data subject

As well as information directly collected directly from you, we also collect or receive information from:

• Social Media – when administering social media based competitions; and
• Businesses – in order to administrate Metrolink Corporate tickets.

---

Automated decisions

For this processing, all the decisions we make about you involve human intervention.

---

Data retention criteria

Our Retention Schedule outlines how long we retain certain types of information.

---

Rights of individuals

You have a right to be informed about how and why your personal information is being processed. This notice fulfils that obligation. You also have a number of other rights.

Information about the following rights is available in our Guide to Exercising Your Rights

• Contacting our Data Protection Officer;
• Raising a concern with us; and/or
• Making a compliant to the Information Commissioner

---

Updates

We may update or revise this Privacy Notice from time to time and provide supplementary privacy information as is necessary to TfGM’s current workforce.

---