Concessionary Pass Survey privacy policy

1. Summary of the survey

Transport for Greater Manchester ["TfGM"] wants to understand the reasons behind changing travel patterns for older people and the potential impact of those changes. The finding for this survey will help inform the work of GM Older Persons Network and the development of specific initiatives to help older people travel throughout the region.

TfGM is the Data Controller for personal information collected in the survey. This means that we decide how your personal data is processed and for what purposes.

---

2. What information we will collect from you

If you have been contacted to participate in this research, it is because you previously completed a survey for us and consented for TfGM to contact you with future research. You can find the privacy notice for the previous research on our privacy policy page. You can remove yourself from that research list by either clicking 'unsubscribe' from the email you received about this current research or by simply emailing research@tfgm.com with UNSUBSCRIBE.

The survey will collect details of frequency of use of different modes of transport before the COVID-19 pandemic and currently, reasons for changes, and the personal impact of changes.

No personal information is gathered during this survey.

Findings from the research will not be published.

---

3. How information is collected

This online survey will be distributed by TfGM and is completed online.  This is collected via SNAP Survey software. SNAP Surveys is ISO 27001 certified. More information can be found here: [https://www.snapsurveys.com/survey-software/privacy-policy-uk/]

---

4. Our lawful basis for processing personal data under GDPR

Article 6 1(e): the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

For the more sensitive data:

Article 9 2(g): the processing is necessary for reasons of substantial public interest.

---

5. How we ensure the security of your data

TfGM comply with their obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

All electronic survey information will be encrypted with a secure password and access will be restricted the research teams.

---

6. Information retention

TfGM will retain the survey data for as long as it is considered useful for the research objectives.

---

7. Transferring data

Data collected and stored by TfGM will be stored in the United Kingdom.

---

8. Data sharing

The information collected as part of this survey will only be used by TfGM for the purposes explained above. TfGM may in the future share the results of this survey or aggregated/anonymised data with our research partners, such as universities. You will not be identifiable in any results or data shared.

---

9. What rights do individuals have?

Under data protection law, your rights include:

• Your right of access - You have the right to ask us for copies of your personal information.

• Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

• Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.

• Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.

• Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. If you wish to make a request, please contact us at: data.protection@tfgm.com

---

10. How can I make a complaint?

If you would like to make a complaint regarding how TfGM is processing your personal information, please contact our Data Protection Officer by emailing: data.protection@tfgm.com

If you are not satisfied with our response, you have the right to make a complaint to the Information Commissioners Office (ICO). The ICO can be contacted at ico.org.uk or by calling 0303 123 1113.

---