Privacy notices

Redcar and Cleveland Borough Council privacy notices.

Guide contents

Concessionary travel scheme privacy notice

This Privacy Notice is designed to help you understand how and why the Transport Team and its agents, processes your personal data. This notice should be read in conjunction with the Council’s Corporate Privacy Notice.

Who are we? 

Redcar and Cleveland Borough Council is a ‘Data Controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). The Council, and its appointed agents, will process your personal data for the purpose of issuing a concessionary fare bus pass to you.

What personal information do we collect?

  • Your name
  • Address
  • Contact details
  • National Insurance Number
  • Photographic image for identification purposes
  • Copies of documents submitted for assessment to prove eligibility. This can include proof of ID and age such as Passport or Driving licence; proof of address such as Utility bill or Pension letter; proof of disability such as DWP benefit entitlement, medical report or records.

Why do we collect your personal information? 

Your information is being collected for the purpose of processing older and disabled person’s bus pass applications. We will use this information to assess eligibility and process applications.

We will also maintain a database of concessionary pass holders and use your information when issuing replacement passes and answering queries as necessary.

Who do we obtain your information from?

Information will usually be provided to us by you when applying for a bus pass. 

We may also ask Redcar and Cleveland Borough Council’s Adult Services or your doctor to share further information with us if required. 

Who do we share this information with?

Only Council staff dealing with bus passes will see your information. We will share your data with:

  • Middlesbrough Council (occupational therapist)
  • Smart Applications Management (the bus pass card printer and issuer)

We may also share your data with:

  • Other council departments, such as Adult Services
  • The police and other emergency services
  • The Cabinet Office as required for the National Fraud Initiative

How long do we keep your information for?

Data held Retention period
Bus pass records, including information supplied when applying for a bus pass.  We will retain this information whilst you hold a valid bus pass issued by the Council.  We then will delete all old information after 5 years and, in the case of unsuccessful applications, after 1 year.

What is our lawful basis for processing your information?

Redcar and Cleveland Borough Council relies on the following lawful basis to process your personal data:

  • UK GDPR Article 6(1)(c) – Legal obligation: Processing is necessary for compliance with a legal obligation to which the controller is subject 
  • UK GDPR Article 6(e) - Public task: processing is necessary to perform a task in the public interest or for official functions.

When processing special category data, the Council will rely on the following lawful basis:

UK GDPR Article 9(2)(g) – processing of your special category data is necessary for reasons of substantial public interest (with a basis in law), meeting Schedule 1, Part 2 of the Data Protection Act 2018 as below:

  • (6) Statutory and government purposes 

The legislations, policies and guidance that relate to this service includes, but is not limited to: the Transport Act 1985, the Transport Act 2000 (as modified by the Concessionary Bus Travel Act 2007).

Your Rights

You have a number of rights that you may exercise in relation to your personal data. Some of the rights do not apply automatically and may not be available in certain circumstances where a lawful exception applies. 

  • You have a right to access your personal data. You can request a copy of personal data that we hold about you and ask us to explain how we use your data. 
  • You have a right to object to processing of your personal data. You have an absolute right to stop your data being used for direct marketing. In other cases where the right to object applies, we may be able to continue using your data if we have a compelling reason for doing so. 

If we are relying on consent as the lawful basis to process your data you can withdraw your consent at any time, and we will stop further processing. 

  • You have a right to request the restriction or suppression of your personal data. 
  • You have a right to have your personal data erased, if we no longer have a legitimate use for it. This right is sometimes called the ‘right to be forgotten’. 
  • You have a right to rectification of your personal data if the information we hold in relation to you is inaccurate or incomplete. 
  • You have a right not to be subject to any decision based solely on automated processing, including profiling, which produces legal or similarly significant effects. You can request human intervention or challenge any solely automated decision-making that significantly affects you. 

If you would like to request access to your personal data or exercise any of your other data protection rights, please contact the Information Governance Team:

Information Governance 

Redcar and Cleveland Borough Council

Redcar and Cleveland House

Kirkleatham Street

Redcar

TS10 1RT 

Email: InformationGovernance@redcar-cleveland.gov.uk 

Telephone: 01642 774 774 

You can seek advice and have the right to make a complaint to the Information Commissioner’s Office (ICO). The ICO is an independent body set up to uphold information rights in the UK. You can contact them through the ICO website www.ico.org.uk, their helpline on 0303 123 1113, or in writing to

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF 

For more information about how the Council uses your data, including your privacy rights and the complaints process, please see our Corporate Privacy Notice.