This document provides further information on how Norfolk County Council’s concessionary fares service (the County Council) uses your personal information for passes to residents who are above the qualifying age, and for disabled passes to applicants who meet the relevant qualifying criteria. By ‘use’ we mean the various ways it may be processed, including storing and sharing the information.
We also provide further details regarding who we are, how long we use your information for, your rights under the GDPR and how to exercise them on our web site at www.norfolk.gov.uk/gdpr. Alternatively, you can ask us for a copy of this information.
We use your personal information to process applications and replacement requests for a concessionary fares bus passes.
You do not have to provide information to us for some of these services, but, if you do not provide information, we may not be able to or it may inhibit our ability to provide the service to you.
The information we hold includes information you have provided to us.
The information we collect and use includes:
Special Category data is defined as information concerning your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union activity, genetic data, biometric data, health, sex life and sexual orientation. Only where it is relevant may we collect and use these types of data ie assessing your application. Information concerning your health is particularly relevant in respect of applications for disability passes.
For ‘ordinary personal data’ we have legal grounds to process this information because it is necessary for the fulfilment of our public task under the Transport Act 2000.
For Special Category data, we have legal grounds to process this information where it is in the necessary for reasons in the substantial public interest. This will include where it is necessary to carry out any of our statutory functions. The law includes safeguards to protect the use of your Special Category data and any information concerning criminal convictions, and further details can be found in our policy document.
We will share your personal information with the company under contract to print the passes.
We share this information without your specific consent as it is reasonable and necessary to do so to fulfil our public tasks or it is otherwise in the substantial public interest to do so. The law imposes safeguards to protect your privacy in these circumstances.
We may also share your information across different departments of the County Council where it is necessary for our public tasks or functions to do so. In particular, we cross reference Blue Badge information with an application for a disabled pass if the holding of a Blue Badge is provided as evidence for seeking a disabled pass.
The information is stored electronically, on the County Council’s records management system, known as CRM and the national Unicard system as part of the English National Concessionary Travel Scheme. Additionally, information is securely stored in other mediums, including email accounts and in paper files. We do not process your information outside of the European Economic Area.
We do not make automated decisions about you.
This notice was last updated in May 2018.