1. Summary of the research
Transport for Greater Manchester ["TfGM"] is undertaking a research programme to support the monitoring and evaluation of the school active travel programme being delivered across the 10 GM districts.
As part of the monitoring and evaluation of the programme, a parent/carer survey will be conducted to understand travel experiences and perceptions of the journey to/from school.
We have commissioned AECOM to undertake the research on our behalf.
TfGM is the Data Controller for personal information collected in the research. This means that we decide how your personal data is processed and for what purposes.
AECOM is our Data Processor for personal information collected in research, but an independent Data Controller for any contact details they collect from you for administering the prize draw and/or recontacting you to invite participation in the post survey. You can view their privacy policy here.
2. What information we will collect from you
The survey with parents/carers will gather feedback on your experiences travelling to/from school. Survey respondents will be asked for demographic data. This is to allow us to analyse whether certain demographical characteristics are common for the same views/experiences.
Demographic questions for the parents/carers are optional and include:
- Age
- Gender
- Health and disability
- Ethnicity
- Employment status
- Home postcode
Data collected from this research will be aggregated, so you will not be identified. Findings from the research may also be published.
3. How information is collected
AECOM interviewers will intercept parents/carers outside a sample of schools to invite them to complete the survey online via a QR code.
4. Our lawful basis for processing personal data under UK GDPR
Article 6 1(e): the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Article 6 1(a): the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
Consent is specifically in relation to information related to Section 2 to enter the prize draw and/or be recontacted to be informed about the post survey. No identifiable data will be passed to TfGM
For the more sensitive data:
Article 9 2(g): the processing is necessary for reasons of substantial public interest.
5. How we ensure the security of your data
TfGM comply with their obligations under the UK GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
We are committed to keeping your information safe and protected from accidental loss or alteration, inappropriate access, misuse or theft.
As well as technical, physical and organisational controls, we recognise that a well-trained, informed, and security alert workforce minimises privacy risks from human error and/or threats from malicious actors.
We require our service providers to implement appropriate industry standard security measures and only allow them to process your personal information for specified purposes as written in our contracts with them.
6. Information retention
Personal data will be deleted when no longer required. TfGM will retain the survey data for as long as it is considered useful for the research objectives (up to seven years).
7. Transferring data
All data collected as part of this project will remain in UK.
8. Data sharing
The information collected as part of this research will only be used by TfGM for the purposes explained above. TfGM may, in the future, share the results of this research or aggregated/anonymised data with our research partners, such as, the Department for Transport, local authorities and universities. You will not be identifiable in any results or data shared.
9. What rights do individuals have?
TfGM must comply with the UK General Data Protection Regulations (UK GDPR) and the Data Protection Act 2018.
Under data protection law, your rights include:
- Your right of access - You have the right to ask us for copies of your personal information.
- Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
- Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
- Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. If you wish to make a request, please contact us at: data.protection@tfgm.com
10. How can I make a complaint?
If you would like to make a complaint regarding how TfGM is processing your personal information, please contact our Data Protection Officer by emailing: data.protection@tfgm.com
If you are not satisfied with our response, you have the right to make a complaint to the Information Commissioner’s Office (ICO). The ICO can be contacted at ico.org.uk, by calling 0303 123 1113, or by online chat.