Home chevron_right Data protection and privacy chevron_right Privacy notices chevron_right Privacy notice - Integrated Transport Service

Privacy notice - Integrated Transport Service

Who are we and what do we do?

add

Middlesbrough Council has a statutory duty to provide safe transport arrangements and travel assistance for eligible adults, children and young people.

What type of personal data do we collect and how do we collect it?

add

We collect personal data such as name, address, contact details, next of kin, parent/carer details, bank details, and case file information. We collect ‘special category’ data including health information. We obtain this information from service users, relatives, guardians and associates of the data subject, advocates, carers or representatives.

How the Law allows us to use your personal data

add

We use personal data where we have a ‘legal obligation’ or and to carry out ‘public tasks’ based in law. We use special category data where there is ‘substantial public interest’ on the basis of law. Some of the law that allows us your personal data includes the Education Act 1996 and Care Act 2014.

What is your personal data used for?

add

We use your personal information to assess eligibility for Home to School transport, to make safe transport or travel assistance arrangements for Home to School travel for eligible children and young people, to make safe transport or travel assistance arrangements for adults referred through the Council’s Adult Social Care service and to promote sustainable travel and transport and make assessments for independent travel training of children and young people.

Will your personal data be shared?

add

We share your personal information where we have a business need or the law requires us to do so with other council service areas, contracted commercial and volunteer transport providers and third-parties such as schools, colleges, education providers, other local authorities and health providers.

How do we keep your personal data secure?

add

We use the following measures to ensure that your personal data is secure: data protection and security policies, information security incident reporting, data and device encryption, system and data access controls, user accounts and passwords, physical and environmental security, staff vetting practices, staff training and awareness, data back-ups, ICT network penetration testing, and business continuity and disaster recovery plans.

How long will we keep your personal data?

add

We only keep your data for as long as the Law requires it and this is set out in our ‘records management retention schedules’

Is your personal data processed overseas?

add

No, your personal data is processed and stored only in the UK.

Marketing

add

We will not use this personal data for any direct marketing purposes.

What are your information rights?

add

Your Information Rights are set out in law and, subject to some exceptions, you have the:

  • Right to rectification - to ask for information to be corrected
  • Right to erasure - to have your personal data deleted
  • Right to object - to how your data is used
  • Right to restriction - to request limits on how your data is used
  • Right to portability - to request that we move your data to another organisation
  • Right of subject access - to request a copy of data the Council holds about you

Making a complaint

add

If you have any concerns about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner's Office. Visit the website of the Information Commissioner's Office.

Contact

add

If you would like to discuss anything in this privacy notice or your information rights, please contact:

The Data Protection Officer
Middlesbrough Council
PO Box 500, Middlesbrough, TS1 9FT
Phone: 01642 245432
Email: dataprotection@middlesbrough.gov.uk