Legal Services Privacy Notice

Our core data protection obligations and commitments are set out in the organisation’s primary privacy notice available at: https://tfgm.com/privacy-policy

This notice provides additional privacy information for: people who engage with TfGM in order to enter into a legal agreement such as a contract to deliver or receive services or a lease of property; people who are affected by any infrastructure scheme promoted by TfGM; people who make enquiries under the Data Protection Act 2018, the Freedom of Information Act 2000 and/or the Environmental Information Regulations; people who raise legal claims or actions against TfGM (including insurance claims); people who submit complaints to TfGM; and Non-Executive Directors of TfGM, and political stakeholders and contacts for the operation of the Executive Board and the TfGMC.

Purposes

We collect [or obtain] your personal information for the following purpose(s):

To develop, negotiate and agree legal agreements such as contracts for delivery or receipt of services or leases of properties;

To manage objections and claims in relation to infrastructure schemes;

To manage enquiries from individuals who wish to exercise their information rights or make a complaint under the Data Protection Act 2018;

To process and respond to requests made under the Freedom of Information Act 2000 and the Environmental Information Regulations 2007;

To defend claims or actions raised against TfGM;

To provide legal support to the business when responding to complaints; and

To provide support for our Boards and the TfGMC.

Categories of personal data

In order to carry out these purposes we collect and obtain:

Personal details;

Visual images, personal appearance and behaviour;

Details of complaints;

Licenses, permits or certificates held;

business activities of individuals;

Case file information;

Employment and education details;

Financial details;

Goods and services provided

Family details;

Incident and accident details;

We may also collect, store and use the following special category personal information:

Race or ethnic origin;

Political opinions;

Religious or philosophical beliefs;

Trade union membership;

Health;

Sex life;

Sexual orientation;

Criminal Offence data

Legal basis for processing

The legal basis we rely on for processing your personal information is:

The processing is necessary for the performance of a contract with the data subject;

The processing is necessary to meet one of our legal obligations in Part II of the Transport Act 1968, the Greater Manchester Combined Authority Order 2011, the Data Protection Act 2018, the Freedom of Information Act 2000, the Environmental Information Regulations 2004, the Companies Act 2006, and the Land Compensation Act 1973;

The processing is necessary for the performance of a task carried out in the public interest; and/or

The processing is necessary for the purposes of the legitimate interests of TfGM.

The legal basis we rely on for processing your special category personal information is:

The processing is necessary for the establishment, exercise or defence of legal claims; and/or

The processing is necessary in the substantial public interest.

If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you (such as lease a property to you), or we may be prevented from complying with our legal obligations (such as our obligations to provide information under the Freedom of Information Act 2000).

Information sharing recipients

We may share personal information about you with the following types of organisations:

Suppliers – for the delivery of contracts between us and our suppliers;

Local Authorities – for cooperation in dealing with Freedom of Information or Environmental Information Regulation requests, and partnership working on infrastructure and other projects;

Insurance companies – to deal with insurance claims;

Police – in response to requests for information under the Data Protection Act 2018;

Solicitors and Legal firms – in order to defend claims against us, and/or for them to provide us with additional legal advice in matters; and

Greater Manchester Combined Authority – in order to operate as an executive arm of the Combined Authority and for the operation of the Greater Manchester Transport Committee.

Sources of personal data other than the data subject

As well as information collected directly from you, we also collect or receive information from:

Suppliers – for the delivery of contracts between us and our suppliers (for example, contact details for suppliers’ staff);

Local Authorities – to assist in dealing with FOI or EIR requests, partnership working on infrastructure and other projects, and/or complaints made to LAs which need referral to us for legal advice;

Insurance companies – to deal with claims against us;

Police – in requests for information made under the Data Protection Act 2018;

Solicitors and Legal firms – for the managing of claims and actions against us; and

Greater Manchester Combined Authority – for us to deal with complaints or queries made to the combined authority which need referral to us for legal advice.

Automated decisions

For this processing, all the decisions we make about you involve human intervention

Data retention criteria

Our Retention Schedule outlines how long we retain certain types of information for.

Rights of individuals

You have a right to be informed about how and why your personal information is being processed. This notice fulfils that obligation. You also have a number of other rights.

Information about the following rights is available in our Guide to Exercising Your Rights:

Contacting our Data Protection Officer;

Raising a concern with us; and/or

Making a compliant to the Information Commissioner

Updates

We may update or revise this Privacy Notice from time to time and provide supplementary privacy information as is necessary to TfGM.