Privacy Notice

Privacy Notice for Study into Mobility as a Service

Derby City Council
Information Compliance
August 2021

The Traffic and Transportation Team are part of Derby City Council (the Council) who are the data controllers for the personal data (or personal information) that we process about you. When we process personal information relating to you, we will only do so when it is necessary and where we have a lawful reason to do so.

We will use the information provided by you to assist us in a study into Mobility as a Service (MaaS).

When we process your personal information, we will comply with data protection legislation and enable you to exercise your rights contained within the legislation.

What personal information will be processed?

As part of the research, SYSTRA will explore and record your opinions towards various features of an Open Access MaaS platform, as part of the Derby-Nottingham Future Transport Zones (FTZ) project. This may also include your current travel habits and your views about various methods of transport.

If you are a member of the public taking part in the study, your telephone number, email address and first name has been provided by JTL Research in order to invite you to participate in this research. If you are a Stakeholder taking part in the study, your telephone number, email address, first name and business sector has been collated by DCC and passed to SYSTRA, in order to invite you to participate in this research, as they believe you will have an interest in this research and would be keen to provide feedback.

The feedback you provide during your interview or focus group, with your consent, will be audio recorded. This is so the interviewer/group moderator can revisit the recording and expand on the initial notes they make. This will also ensure they are reflecting the feedback you provide accurately.

Lawful basis for processing

The basis under which we use your personal information for these purposes is that this is necessary for the performance of a task carried out in the public interest by the Council or in the exercise of official authority vested in the Council.

Will my information be shared with other organisations or used for other purposes?

SYSTRA Ltd (SYSTRA) is Joint Data Controller for this research, and JTL Research and FlexMR are sub-processors. All parties will be collecting and processing your personal data. Your personal data during this commission will only be shared between SYSTRA, our sub-processors, and the Council.

The Council will only share your personal information with other departments within the Council, and with other organisations when it is necessary to provide the services to you, and when we have a lawful reason to do so. The Council may also share your information when we are obliged to by law.

Following this study the Council and DCC may be required to share access to your data with their procured MaaS provider, in order to provide continued engagement in developing the service.

Your results from this commission will not be identifiable to DCC

The information provided by you may also be used for the purpose of any other function carried out by the Council. This may include sharing your information across the Council, or with external organisations. Information about these functions and the legal basis on which information is used for them can be found at

The information will only be used for another purpose where it is lawful to do so.

Do I have to provide the information?

You are not obliged by statute to provide some of the information that is specified here. However, by taking part in the study you will be asked to provide information about yourself

How long will the Council retain the data for?

The information that you have provided will be kept for no longer than reasonably necessary. After the end of the study, SYSTRA and our sub-processors will erase all personal data collected as part of the research.

At this stage, we anticipate that this will be on 1st March 2022, after which SYSTRA and all sub-processors will ensure all personal data is destroyed.

DCC would like to hold your personal data beyond this point. This is so they can engage with you following this commission, and if necessary, share this information with their procured MaaS provider. You have the right to opt-out of this extended engagement if you would prefer.

Information Rights

The UK General Data Protection Regulation provides for the following rights as prescribed by the legislation:

  • A right to request a copy of your information
  • A right to request rectification of inaccurate personal data
  • A right to request erasure of your data known as ‘the right to be forgotten’
  • A right to in certain circumstances to request restriction of processing
  • A right in certain circumstances to request portability of your data to another provider
  • A right to object to processing of data in certain circumstances
  • A right regarding automated decision making including profiling

However, Derby City Council can restrict the above rights in certain circumstances for example to avoid obstructing an investigation, avoid prejudicing the prevention, detection, investigation or prosecution of criminal penalties or to protect the rights and freedoms of others.

Data Protection Officer

To exercise the above relevant rights, make queries or complaints, please contact SYSTRA’s UK Compliance Team at

The Data Protection Officer of Derby City Council can be contacted at:
Information Governance
The Council House
Corporation Street

or at

If you have any concerns or questions you can also contact the Information Commissioners Office on 0303 123 1113 or via email or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

If you would like any more information about the research study please contact the SYSTRA research manager, Bradley Goodsell:

Information Commissioner’s Office

The Information Commissioner’s Office (ICO) website provides guidance on data protection and privacy matters, you can visit the website at You also have the right to complain to the ICO if you consider that the Council have processed your personal data incorrectly or that we have breached our obligations to you. You can contact the ICO at:
Wycliffe House,
Water Lane

Further Information

For more information about these rights please refer to our detailed privacy statement at

Top of the page
SYSTRA Ltd Registered office: 3rd Floor, 1 Carey Lane, London, England EC2V 8AE. Registered Number 3383212