DDRG filming and photography privacy notice

Introduction

Transport for Greater Manchester (TfGM) is committed to making sure that we tell you about the ways in which we use your personal information and that we have the right controls in place to make sure it is used responsibly and kept safe from inappropriate access, theft, or misuse.

TfGM has a contract with Breakthrough UK to help deliver engagement sessions with the Disability Design Reference Group (DDRG). DDRG is a group made up of disabled individuals from across Greater Manchester who experience a wide range of disabling barriers. They provide advice from their own lived experience, which assists TfGM to ensure that, as far as possible, an inclusive, barrier-free environment is developed across public transport in Greater Manchester and helps to ensure that we comply with our obligations under the Equality Act 2010.

Outside of this contract, on an ad hoc basis TfGM commissions specific pieces of work (e.g. filming and photography) from this group. These films and images may be used for training purposes, social media, images on publications etc.

This notice explains how we will use your information and tells you about your privacy rights and how the law protects you.
For further information about our core data protection obligations and commitments please see TfGM’s primary privacy notice.

---

What information do we collect and why?

The personal information we process and collect will be provided to us directly by yourself. Personal data that may be collected includes:

• Name and email addresses to organise the photography / filming session
• Photographs and videos

---

How do we keep your information safe?

TfGM is committed to the security of the information we collect, and we use reasonable measures to prevent unauthorised access to that information. We are required to demonstrate that our solutions meet the required levels of personal, procedural, policy, data and technical security. We will only process personal information for the purposes it has been collected or subsequently authorised.

All information will be stored on a secure TfGM server. TfGM will restrict access to your personal information.

---

How long is the information kept for?

As your image / footage is being collected for use in the public domain (e.g. on websites and social media) they may be visible for a long period of time.

---

Lawful basis for processing your information

The legal basis for processing the information is that it is necessary for the performance of a task carried out in the public interest.

---

Who we will share your information with

Images collected via photography / filming could be used to train staff, used on social media, on printed materials etc.

The photography / filming will be used in the context for which it has been obtained (detailed on the permission form). For example, if the filming has been undertaken for a training video, it will not be used for any other purpose without additional permission.

---

Your rights as a data subject (any individual person who can be identified)

The GDPR gives you the following rights over your information:

• Your right to get copies of your information - You have the right to ask for a copy of any information about you that is used.
• Your right to get your information corrected - You have the right to ask for any information held about you that you think is inaccurate to be changed.
• Your right to limit how your information is used - You have the right to ask for the use of any information held about you to be restricted. For example, you can ask this where you think the information TfGM is using is inaccurate.
• Your right to object to your information being used - You can ask for any information held about you not to be used. This is not an absolute right and TfGM may need to continue to use your information. We will tell you why if this is the case.
• Your right to get your information deleted - You can ask for any information held about you to be deleted. This is not an absolute right and TfGM may need to continue to use your information. We will tell you why if this is the case.

To find out what information we hold about you, you need to make a Subject Access Request. If you wish to exercise any of your information rights including making a Subject Access Request, please contact us on data.protection@tfgm.com.

If you are not satisfied with the response from us, you can complain to the Information Commissioner’s Office. For further details on this and your information rights please visit the Information Commissioner’s Website.

---

Data Protection Officer (DPO)

TfGM is required by law to have a DPO. The DPO has several duties, including:

• Monitoring the organisation’s compliance with data protection law;
• Providing expert advice and guidance on data protection;
• Acting as the point of contact for data subjects; and,
• Co-operating and consulting with the Information Commissioner’s Office (see ‘Complaints’ below).

TfGM’s DPO can be contacted at data.protection@tfgm.com.

Further details of how TfGM process your data and how you can exercise your rights are available in TfGM's primary privacy policy. Further information about data privacy and your rights under the General Data Protection Regulation (the “GDPR”) can be found at the ICO website.

---