Destination Bee Network Consultation privacy policy

Introduction

Transport for Greater Manchester (TfGM) is committed to making sure that we tell you about the ways in which we use your personal information and that we have the right controls in place to make sure it is used responsibly and kept safe from inappropriate access, theft, or misuse.

---

The Bee Network

The Mayor has set a clear vision for intracity transport – the Bee Network – which is integration across bus and tram by 2024. Throughout the Autumn in the run up to the comprehensive spending review (CSR), GM has the opportunity to set out to government, partners and the public our vision for how this can be achieved.

Launching on the week commencing 11 October 2021, a Destination Bee Network public conversation will launch and run through into November. This will consist of an online survey to find out what the public and key stakeholders think the vision for the Bee Network should be, a ‘bus tour’ with a Bee Network branded vehicle across all 10 GM local authority areas, and targeted stakeholder engagement with key groups.

This notice explains how we will use your information and tells you about your privacy rights and how the law protects you. For further information about our core data protection obligations and commitments please see TfGM’s primary privacy notice.

---

What information do we collect and why?

The consultation will ask you questions in relation to the vision for Destination Bee Network to understand your views. The personal information we process and collect will be provided to us directly by yourself. Whilst it is not compulsory some personal data may be collected in the process of this consultation. Personal data that may be collected includes:

• Age Groups
• Name
• Email address
• Address/postcode
• Local Authority area
• Gender
• Job role/Organisation details
• Photographs/videos

We may use your personal details to keep you informed on the development of Destination Bee Network. We may also use your details to contact you if you are willing to take part in further research/consultation activity.

We may also collect some special category personal data within the consultation/engagement activity. Special category data is data that is deemed more sensitive. For the purpose of this consultation/engagement activity we may collect the following special category data:

• Physical or mental health information
• Racial or ethnic group information
• Religious believes or similar
• Sexual life/orientation

We ask for this data so that we can check the impact of the proposals on different demographic groups and to show we reach a proportionate amount of the community.

You do not have to answer the questions on personal data if you do not want to.

Data collected from this consultation/engagement activity will be aggregated, so you will not be identified.

---

How do we keep your information safe?

TfGM is committed to the security of the information we collect, and we use reasonable measures to prevent unauthorised access to that information. We are required to demonstrate that our solutions meet the required levels of personal, procedural, policy, data and technical security. We will only process personal information for the purposes it has been collected or subsequently authorised.

The online survey is hosted by TfGM using SNAP Surveys. SNAP Surveys is a survey platform which has the highest standards of data security achieving ISO27001 accreditation.

All electronic consultation information will be encrypted with a secure password. TfGM will restrict access to your personal information.

All information relating to engagement activity and photographs/videos will be saved securely on TfGM’s server.

---

How long is the information kept for?

Your information will only be kept for as long as necessary.

TfGM will retain your data for two years, or as long as required if there are any legal challenges to the consultation.

---

Lawful basis for processing your information

The lawful basis for TfGM collecting this information is:
Article 6 1(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

And for the more sensitive data:

Article 9 2(g) processing is necessary for reasons of substantial public interest.

---

Who we will share your information with?

The information collected as part of this consultation/engagement activity will only be used by TfGM. Your personal data will not be shared with any other third parties.

---

Your rights as a data subject (any individual person who can be identified)

The GDPR gives you the following rights over your information:

• Your right to get copies of your information - You have the right to ask for a copy of any information about you that is used.
• Your right to get your information corrected - You have the right to ask for any information held about you that you think is inaccurate to be changed.
• Your right to limit how your information is used - You have the right to ask for the use of any information held about you to be restricted. For example, you can ask this where you think the information TfGM is using is inaccurate.
• Your right to object to your information being used - You can ask for any information held about you not to be used. This is not an absolute right and TfGM may need to continue to use your information. We will tell you why if this is the case.
• Your right to get your information deleted - You can ask for any information held about you to be deleted. This is not an absolute right and TfGM may need to continue to use your information. We will tell you why if this is the case.

To find out what information we hold about you, you need to make a Subject Access Request. If you wish to exercise any of your information rights including making a Subject Access Request, please contact us on data.protection@tfgm.com.

If you are not satisfied with the response from us, you can complain to the Information Commissioner’s Office. For further details on this and your information rights please visit the Information Commissioner’s Website.

---

Data Protection Officer (DPO)

TfGM is required by law to have a DPO. The DPO has several duties, including:

• Monitoring the organisation’s compliance with data protection law;
• Providing expert advice and guidance on data protection;
• Acting as the point of contact for data subjects; and,
• Co-operating and consulting with the Information Commissioner’s Office (see ‘Complaints’ below).

TfGM’s DPO can be contacted at data.protection@tfgm.com.

Further details of how TfGM process your data and how you can exercise your rights are available through TfGM's primary privacy notice.

Further information about data privacy and your rights under the General Data Protection Regulation (the “GDPR”) can be found at the ICO website.

---