GM bike hire surveys privacy notice

Who we are

Transport for Greater Manchester ["TfGM"] is committed to making sure that we tell you about the ways in which we use your personal information and that we have the right controls in place to make sure it is used responsibly and kept safe from inappropriate access, theft, or misuse.
This notice explains how we use your information and tells you about your privacy rights and how to law protects you.

---

Summary of the use of the project/programme/survey

Transport for Greater Manchester is undertaking a research programme to support the monitoring and evaluation of the GM Bike Hire scheme.

The GM Bike Hire scheme was introduced in 2021 to improve access to bikes for residents, commuters and visitors in Greater Manchester, making it easier to choose cycle for short trips.

The monitoring and evaluation will use various data collection methods including surveys with residents, visitors and users to find out their awareness of the scheme, what they think about cycle hire and satisfaction with the scheme.
We have commissioned SYSTRA Limited to undertake a telephone survey with residents and visitors; and an annual online survey with Bike Hire users on our behalf.

TfGM is the Data Controller for personal information collected in the research. This means that we decide how your personal data is processed and for what purposes.

SYSTRA Limited (and sub processor TeamSearch) is our Data Processor for personal information collected in the surveys, but an independent Data Controller for any contact details they collect from you for quality control purposes. You can view their privacy policy.

---

What information we will collect from you (the purpose and legal basis for processing information)

The surveys will ask questions to gather feedback on awareness, perceptions, usage of the Bike Hire scheme; as well as travel behaviour as a result of the scheme.

Demographic questions are optional and include:

• Age
• Gender
• Health and disability
• Ethnicity
• Home postcode

Data collected from this research will be aggregated, so you will not be identified. Findings from the research may also be published.

Our lawful basis for processing personal data is:

• Article 6 1 (a): the data subject has given consent to the processing of his or her personal data (for marketing purposes);
• Article 6 1(e): the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Our lawful basis for processing special category data is:

• Article 9 2 (a) the data subject has given explicit consent to the processing of those personal data for one or more specified purposes;
• Article 9 2 (g) processing is necessary for reasons of substantial public interest.

---

How we ensure the security of your data

We are committed to keeping your information safe and protected from accidental loss or alteration, inappropriate access, misuse or theft.

As well as technical, physical and organisational controls, we recognise that a well-trained, informed, and security alert workforce minimises privacy risks from human error and/or threats from malicious actors.

We require our service providers to implement appropriate industry standard security measures, and only allow them to process your personal information for specified purposes as written in our contracts with them.

---

Information retention

SYSTRA and sub processor TeamSearch will keep personal data for no longer than reasonably necessary and no later than 1 year after the initial collection. TfGM will retain the aggregated survey data for as long as it is considered useful for the research objectives.

---

Transferring data

All data collected as part of this project will remain in UK.

---

Data sharing

The information collected as part of this survey will only be used by TfGM for the purposes explained above. TfGM may, in the future, share the results of this survey or aggregated/anonymised data with our research partners, such as local authorities and universities. You will not be identifiable in any results or data shared.

---

What rights do individuals have?

TfGM must comply with the General Data Protection Regulations (GDPR) and the Data Protection Act 2018.

Under data protection law, your rights include:

• Your right of access - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
• Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

If you wish to make a request, please contact us at:

• Email: officeofdpo@greatermanchester-ca.gov.uk
• Post: Data Protection Officer, Transport for Greater Manchester, 2 Piccadilly Place, Manchester, M1 3BG

---

How can I make a complaint?

If you are not satisfied with how TfGM is using the information we hold about you please contact our Data Protection Officer by emailing officeofdpo@greatermanchester-ca.gov.uk.

If you are still not satisfied with the TfGM’s response to any request to exercise your individual rights or if you believe that TfGM is not processing your personal data in accordance with the law, you can contact the Information Commissioners’ Office:

• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
• Telephone: 0303 123 1113

---