Metrolink Park and Ride survey privacy policy
1. Who we are
Transport for Greater Manchester ["TfGM"] is committed to making sure that we tell you about the ways in which we use your personal information and that we have the right controls in place to make sure it is used responsibly and kept safe from inappropriate access, theft, or misuse.
This notice explains how we use your information and tells you about your privacy rights and how to law protects you.
2. Summary of the use of the project/programme/survey
TfGM is undertaking a survey to support the monitoring and evaluation of park and ride sites on the Metrolink network.
In 2022, additional car parking spaces were added to Radcliffe and Whitefield Park and Rides to provide greater access to Metrolink by car.
TfGM have commissioned SYSTRA Limited to undertake a survey with Park and Ride users on our behalf.
TfGM is the Data Controller for personal information collected in the research. This means that we decide how your personal data is processed and for what purposes.
SYSTRA Limited (and sub processor Tracsis) is our Data Processor for personal information collected in the surveys, but an Independent Data Controller for any contact details they collect from you for quality control purposes. View Systra's privacy policy.
3. What information we will collect from you (the purpose and legal basis for processing information)
The survey will ask questions to gather feedback on usage of the Park and Ride, the journey being made, including origin and destination postcodes, travel behaviour, and satisfaction with the Park and Ride.
Demographic questions within the survey are optional and include:
- Age
- Gender
- Health and disability
- Working status
Name and email address will also be captured if you would like to receive a £10 voucher as a thank you for completing the survey. This is optional and your contact details will be held separately from your survey feedback.
Demographic information from this research will therefore be anonymous, so you will not be identified. Findings from the research may also be published in a report which will present aggregated findings.
Our lawful basis for processing personal data is:
- Article 6 1 (a): the data subject has given consent to the processing their personal data;
- Article 6 1(e): the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Our lawful basis for processing special category data is:
- Article 9 2 (a) the data subject has given explicit consent to the processing of those personal data for one or more specified purposes;
- Article 9 2 (g) processing is necessary for reasons of substantial public interest.
4. How we ensure the security of your data
We are committed to keeping your information safe and protected from accidental loss or alteration, inappropriate access, misuse or theft.
As well as technical, physical and organisational controls, we recognise that a well-trained, informed, and security alert workforce minimises privacy risks from human error and/or threats from malicious actors.
We require our service providers to implement appropriate industry standard security measures, and only allow them to process your personal information for specified purposes as written in our contracts with them.
5. Information retention
SYSTRA and sub processor Tracsis will keep personal data for no longer than reasonably necessary and no later than 1 year after the initial collection. TfGM will retain the anonymised and aggregated survey data for as long as it is considered useful for the research objectives.
6. Transferring data
All data collected as part of this project will remain in UK.
7. Data sharing
The information collected as part of this survey will only be used by TfGM for the purposes explained above. TfGM may, in the future, share the results of this survey or aggregated/anonymised data with our research partners, such as local authorities and Government departments. You will not be identifiable in any results or data shared.
8. What rights do individuals have?
TfGM must comply with the United Kingdom General Data Protection Regulations (UK GDPR) and the Data Protection Act 2018.
Under data protection law, your rights include:
- Your right of access - You have the right to ask us for copies of your personal information.
- Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
- Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
- Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
If you wish to make a request, please contact us at:
- Email: officeofdpo@greatermanchester-ca.gov.uk
- Post: Data Protection Officer, Transport for Greater Manchester, 2 Piccadilly Place, Manchester, M1 3BG
9. How can I make a complaint?
If you are not satisfied with how TfGM is using the information we hold about you please contact our Data Protection Officer by emailing officeofdpo@greatermanchester-ca.gov.uk.
If you are still not satisfied with the TfGM’s response to any request to exercise your individual rights or if you believe that TfGM is not processing your personal data in accordance with the law, you can contact the Information Commissioners’ Office:
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
- Telephone: 0303 123 1113
- Online chat