SYMCA Bus Network Engagement Privacy Notice
The impact of Covid-19 has had a substantial effect on the viability of public transport services in the United Kingdom. During the pandemic, government funding has been provided to ensure bus services remained operational even with significantly lower passenger demand due to national restrictions since April 2020.
The emergency Government funding will end in October. As a result, bus companies in South Yorkshire plan to remove around a third of their bus routes, or sections of routes, in October.
South Yorkshire Mayoral Combined Authority (SYMCA) will use the public budget to support some of the services that bus companies plan to remove. It is seeking your views on how it should prioritise support for the services which people rely on most.
- SYSTRA, alongside partners Teamsearch, have been commissioned by SYMCA to undertake research with current and potential bus users.
- SYSTRA, Teamsearch and SYMCA are committed to making sure that we tell you about the ways in which we use your personal information and that we have the right controls in place to make sure it is used responsibly and kept safe from inappropriate access, theft, or misuse.
- We are providing you with this notice so you know what data we are collecting from you as part of this research study; what we are going to do with it; and your rights over our use of your personal data.
Your personal data
- Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information. The processing of personal data is governed by the General Data Protection Regulation 2016/679 (the “GDPR”), and associated legislation including but not limited to the Data Protection Act 2018.
Who are we?
- SYSTRA and SYMCA are joint Data Controller. This means both SYMCA and SYSTRA have decided how your personal data is processed and for what purposes.
- SYSTRA is a Data Processor. This means that they are responsible for collecting and processing your personal data. SYSTRA are Cyber Essentials and ISO20252 accredited (certificate number: 9208368).
- Teamsearch are sub-Data Processor and will only collect and process your personal data on instruction from SYSTRA. Teamsearch are Cyber Essentials and ISO20252 accredited.
What information is being collected?
The survey will ask you questions on your current travel behaviour, including bus usage; and your views on what the priorities for using public funding to support bus services should be; and demographic information including your age, gender, employment status, whether you have disabilities or health restrictions which impact travel, and which local authority area you live in.
You will access this survey through one of the following routes:
(A) An online quantitative panel survey either online or by telephone using Teamsearch;
If you are completing the online panel survey, you will have been invited to take part in the survey through one of these panels:
- Lucid (see privacy notice)
- Valued Opinions panels (see privacy notice).
The contact details held by these are not passed on to Teamsearch, SYSTRA or SYMCA when you complete the survey.
If you have been invited to complete the panel survey by telephone, your name, email address and telephone number is held by Teamsearch.
- These details were provided by the contact database ‘Datascope’.
- At the point of recruitment, Teamsearch will ask you a series of demographic questions on age, and whether you have disability or health restrictions which impact travel.
Any contact details obtained for this research will not be provided to SMYCA, nor linked to your survey responses.
(B) An online quantitative survey with members of the public using Snap, managed by SYSTRA.
If you have accessed the survey by clicking on the link or typing on the link from an advert you saw on a leaflet, poster, social media post or heard on the radio.
How is it collected?
- The Panel survey and telephone survey (A) is collected via Askia. Askia is a secure software survey platform used for data collection. All data is retained on Teamsearch servers in the UK and is not held by Askia. Askia’s data protection policy for on-premise survey software can be found in section 3 of this document
- The online survey managed by SYSTRA (B) is hosted using an online survey software called SNAP Surveys, with information collected directly by SYSTRA. SNAP Surveys is ISO 27001 certified. This means that it meets international standards on data security. More information can be found here: https://www.snapsurveys.com/survey-software/privacy-policy-uk/
Why is it being collected?
- Our lawful basis for processing under GDPR is:
- GDPR Article 6(1)(e): the processing is necessary for the performance of its official tasks carried out in the public interest.
How will it be used?
- SYMCA, SYSTRA and Teamsearch comply with their obligations under the GDPR by: keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
- All personal data held as part of this project is encrypted with a secure password and access restricted to only those working on the project.
- Your data will be analysed anonymously with all other participant data. SYSTRA will report the findings of the research to SYMCA. No individual will be made identifiable during reporting.
Who will it be shared with?
- Data collected and stored by SYSTRA and Teamsearch will be stored in the United Kingdom.
- Any contact details obtained for this research will not be provided to SYMCA, nor linked to your survey responses or focus group and telephone discussions.
- SYSTRA will share anonymised data with SYMCA at the end of the research, and no other third party. This will not contain and personal or contact information.
- Reports will not contain any personal data.
How long do we keep your personal data?
- We keep your personal data for no longer than reasonably necessary; your data will be kept until 31st January 2023. After this, all personal data will be destroyed.
Your rights and your personal data
You have the following rights with respect to your personal data:
- The right to request a copy of your personal data which SYSTRA holds about you;
- The right to request that SYSTRA corrects any personal data if it is found to be inaccurate or out of date;
- The right to request your personal data is erased where it is no longer necessary for SYSTRA to retain such data;
- The right to withdraw your consent to the processing at any time;
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
- The right to object to the processing of personal data; and
- The right to lodge a complaint with the Information Commissioners Office.
If you would like:
- Any more information about the research study, or our use of your data;
- To request to see the personal data held on you;
- To request to withdraw your personal data; or
- Or exercise any other of the rights listed above
Please contact the SYSTRA research manager, Mark Denley, email@example.com
Should you wish to find out more about SYSTRA’s data protection processes or contact their Data
Protection Officer, please contact SYSTRA’s UK Compliance Team at UK_compliance@systra.com.
To find out more about SYMCA’s compliance with data protection please click on the following links to review their data protection notices: South Yorkshire MCA (southyorkshire-ca.gov.uk)
To find out more about Teamsearch’s compliance with data protection please click on the following links to review their data protection notices: https://www.teamsearchmr.co.uk/gdpr or email firstname.lastname@example.org
If you have any concerns or questions about data protection or your rights you can also contact the Information Commissioners Office on 0303 123 1113 or via email https://ico.org.uk/global/contact-us/email or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.