Privacy Notice for Study into Mobility as a Service
e - Smart Ticketing Team
Nottingham City Council
Service Area: Public Transport
Directorate: Development & Growth
The Smart Ticketing Team are part of Nottingham City Council (the Council) who are the data controllers for the personal data (or personal information) that we process about you. When we process personal information relating to you, we will only do so when it is necessary and where we have a lawful reason to do so.
We will use the information provided by you to assist us in a study into Mobility as a Service (MaaS).
When we process your personal information, we will comply with data protection legislation and enable you to exercise your rights contained within the legislation.
What personal information will be processed?
As part of the research, SYSTRA will explore and record your opinions towards various features of an Open Access MaaS platform, as part of the Derby-Nottingham Future Transport Zones (FTZ) project. This may also include your current travel habits and your views about various methods of transport.
If you are a member of the public taking part in the study, your telephone number, email address and first name has been provided by JTL Research in order to invite you to participate in this research. If you are a Stakeholder taking part in the study, your telephone number, email address, first name and business sector has been collated by NCC and passed to SYSTRA, in order to invite you to participate in this research, as they believe you will have an interest in this research and would be keen to provide feedback.
The feedback you provide during your interview or focus group, with your consent, will be audio recorded. This is so the interviewer/group moderator can revisit the recording and expand on the initial notes they make. This will also ensure they are reflecting the feedback you provide accurately.
Lawful basis for processing
The basis under which we use your personal information for these purposes is that this is necessary for the performance of a task carried out in the public interest by the Council or in the exercise of official authority vested in the Council.
Will my information be shared with other organisations or used for other purposes?
SYSTRA Ltd (SYSTRA) is the Data Processor and JTL Research and FlexMR are sub-processors. All parties will be collecting and processing your personal data. Your personal data during this commission will only be shared between SYSTRA, our sub-processors, the Council.
The Council will only share your personal information with other departments within the Council, and with other organisations when it is necessary to provide the services to you, and when we have a lawful reason to do so. The Council may also share your information when we are obliged to by law.
Following this study the Council and DCC may be required to share access to your data with their procured MaaS provider, in order to provide continued engagement in developing the service.
Your results from this commission will not be identifiable to NCC.
The information provided by you may also be used for the purpose of any other function carried out by the Council. This may include sharing your information across the Council, or with external organisations. Information about these functions and the legal basis on which information is used for them can be found at http://www.nottinghamcity.gov.uk/privacy-statement/
The information will only be used for another purpose where it is lawful to do so.
Do I have to provide the information?
You are not obliged by statute to provide some of the information that is specified here. However, by taking part in the study you will be asked to provide information about yourself
How long will the Council retain the data for?
The information that you have provided will be kept for no longer than reasonably necessary. After the end of the study, SYSTRA and our sub-processors will erase all personal data collected as part of the research.
At this stage, we anticipate that this will be on 1st March 2022, after which SYSTRA and all sub-processors will ensure all personal data is destroyed.
NCC and DCC would like to hold your personal data beyond this point. This is so they can engage with you following this commission, and if necessary, share this information with their procured MaaS provider. You have the right to opt-out of this extended engagement if you would prefer.
The Council publish an Information Asset Register (IAR), this will outline the retention periods for the personal data we process. You can find this IAR on our website https://geoserver.nottinghamcity.gov.uk/information-asset-register/
The UK General Data Protection Regulation provides for the following rights as prescribed by the legislation:
- A right to request a copy of your information
- A right to request rectification of inaccurate personal data
- A right to request erasure of your data known as ‘the right to be forgotten’
- A right to in certain circumstances to request restriction of processing
- A right in certain circumstances to request portability of your data to another provider
- A right to object to processing of data in certain circumstances
- A right regarding automated decision making including profiling
However, Nottingham City Council can restrict the above rights in certain circumstances for example to avoid obstructing an investigation, avoid prejudicing the prevention, detection, investigation or prosecution of criminal penalties or to protect the rights and freedoms of others.
Data Protection Officer
To exercise the above relevant rights, make queries or complaints, please contact SYSTRA’s UK Compliance Team at UK_compliance@systra.com.
The Data Protection Officer of Nottingham City Council is Naomi Matthews. You can contact the data protection officer at:
If you have any concerns or questions you can also contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
If you would like any more information about the research study please contact the SYSTRA research manager, Bradley Goodsell: firstname.lastname@example.org.
Information Commissioner’s Office
The Information Commissioner’s Office (ICO) website provides guidance on data protection and privacy matters, you can visit the website at www.ico.org.uk. You also have the right to complain to the ICO if you consider that the Council have processed your personal data incorrectly or that we have breached our obligations to you. You can contact the ICO at:
For more information about these rights please refer to our detailed privacy statement at https://www.nottinghamcity.gov.uk/privacy-statement.