Facilities management privacy notice

Our core data protection obligations and commitments are set out in the organisation’s primary privacy notice.

This notice provides additional privacy information for members of the public who visit TfGM owned facilities, including our offices, bus stations, bus shelters and stops.

Purposes

We collect [or obtain] your personal information for the following purpose(s):

• Bus station management, including accident and incident reports;
• Holiday bookings on behalf of National Express;
• Ticket sales and concessionary pass applications;
• Bus stop and bus shelter location planning, evaluation and consultation;
• Visitor security pass management for visits to 2 Piccadilly Place; and

Categories of personal data

In order to carry out these purposes we collect and obtain:

• Personal details;
• Visual images, personal appearance and behaviour;
• Incident and accident details;
• Financial details;
• Goods and services received.

Legal basis for processing

The legal basis we rely on for processing your personal information is:

• The processing is necessary for the performance of a contract with the data subject;
• The processing is necessary for the performance of a task carried out in the public interest, in particular our duties and obligations under Part II of the Transport Act 1968, and ;

If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with such as providing you with a holiday booking or travel pass or ticket, or we may be prevented from complying with our legal obligations under the Transport Act 1968.

Information sharing recipients

We may share personal information about you with the following types of organisations:

• Police – for crime prevention and detection purposes or bus stop and shelter planning/consultation;
• Suppliers – for both services they deliver on our behalf, or for services we deliver on their behalf;
• Local Authorities – for bus stop and shelter planning/consultation;
• Insurance companies – for insurance of our fleet vehicles (employee data only);

Sources of personal data other than the data subject

As well as information directly collected directly from you, we also collect or receive information from:

• We only collect information directly from individuals

Data retention criteria

Our Retention Schedule outlines how long we retain certain types of information.

Rights of individuals

You have a right to be informed about how and why your personal information is being processed. This notice fulfils that obligation. You also have a number of other rights.

Information about the following rights is available in our Guide to Exercising Your Rights:

• Contacting our Data Protection Officer;
• Raising a concern with us; and/or
• Making a compliant to the Information Commissioner

Updates

We may update or revise this Privacy Notice from time to time and provide supplementary privacy information as is necessary.