Metro Memories Privacy Notice
This privacy notice sets out how Nexus collects, uses and protects your personal data in relation to the Metro Memories website, as well as your rights in respect of such personal data.
Nexus is committed to ensuring that your privacy is protected. Information by which you may be identified will only be used in accordance with this privacy notice.
Nexus must have a valid lawful basis in order to process personal data. This privacy notice sets out the lawful basis that applies and also the purposes for which your personal data will be processed.
Nexus may update this privacy notice from time to time and will publish an up to date copy of the privacy statement by the appropriate means.
This privacy notice is effective from August 2020.
How we will collect your personal data
Nexus will collect personal data when you submit photographic, text, audio, video or other media content that contains personal or group accounts and memories of travel on the Tyne and Wear Metro.
What information do we collect about you
Nexus will collect the following personal data from you:
• Email address;
• Location data; and
• Videos, photos, text and audio.
How we will use the information about you
Nexus must have a valid lawful basis in order to process your personal data. Nexus will process your personal data as it falls within our legitimate interests to do so.
Nexus has carried out a Legitimate Interests Assessment (LIA) and considers that the personal data to be used in a proportionate way and in a way that would be considered appropriate by individuals.
Tyne and Wear Metro is an integral part of life within Tyne and Wear. It has been part of the fabric of the region for 40 years and is a vital part of society, used on a daily basis by thousands of individuals. Nexus has considered the broader societal benefits of processing personal data in this way. The Metro Memories website is designed to celebrate the Tyne and Wear Metro and allow individuals to share their memories with Nexus and the wider public.
Nexus will process your personal data in order to promote the 40th anniversary of the Tyne and Wear Metro.
Who has access to your personal data
The Metro Memories website has been designed to allow individuals to share their memories of the Tyne and Wear Metro. Photographic images, video, audio and text will be shared on the website. This will be accessible via the internet.
Sharing and disclosing your personal data
Nexus may, from time to time, need to make other disclosures of your personal data without your consent but any such disclosures will be made in accordance with the obligations imposed on Nexus by relevant legislation, and with due consideration of your rights.
Nexus may also disclose your personal data to protect the rights, property, or safety of Nexus, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud detection and the prevention and detection of unlawful and criminal activity.
The personal data we collect from you is stored in the United Kingdom and will not be transferred to an area outside of the European Economic Area.
How long do we keep your personal data?
Nexus will use your personal data for inclusion on the Metro Memories website to celebrate the 40th anniversary of the Tyne and Wear Metro. This will be for a period of 24 months.
Following completion of the project, Nexus will retain the photographic images, video, audio and text submissions for all of the purposes and processing activities outlined below:
- Websites, social media channels and digital communications (including Tyne and Wear Metro’s Facebook, Twitter, Instagram and YouTube accounts as well as third parties);
- Publicity and advertising materials, including printed publications;
- Presentation and exhibition materials, including printed publications; and
- News media and their associated websites and social media channels, including print, television and radio.
Your information rights
Data protection legislation provides the following rights for individuals in relation to their personal data:
Right to withdraw consent
If we have relied on consent as the ground for processing your personal data, you can withdraw this consent at any time. You can withdraw consent by contacting the Data Protection Officer, by email at email@example.com.
Right to be informed
An organisation must inform you if it is using your personal data. This should be done when it first collects your information.
Right of access
Individuals have the right to access copies of their personal data. This is done via a subject access request. To make a subject access request to Nexus please visit https://www.nexus.org.uk/data-protection.
Right to rectification
Individuals can challenge the accuracy of personal data which is held by an organisation and in some circumstances request that it is corrected.
Right to erasure
The right to erasure gives individuals, in certain circumstances, the opportunity to ask organisations to delate personal data it holds about them.
Right to restrict processing
Individuals have the right to limit the way an organisation uses their personal data.
Right to data portability
The right to data portability allows individuals to request their personal data from an organisation in way that is accessible.
Right to object
Individuals have the right to object to the processing of their personal data in certain circumstances.
Rights related to automated decision making including profiling
This right enables individuals, in certain circumstances, to prevent the automated profiling of their personal data.
For further information on the rights of an individual please visit https://ico.org.uk/your-data-matters/.
Nexus is committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect from you.
Where Nexus engages third parties to process personal data on our behalf, they do on the basis of clear written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of the data.
How to contact us
Nexus is the trading name of Tyne and Wear Passenger Transport Executive and its address is Nexus House, St James’ Boulevard, Newcastle upon Tyne, NE1 4AX.
In relation to the collection and processing of personal data for the Metro Memories website, Nexus is the data controller. Nexus can be contacted by phoning 0191 2020 747 or email firstname.lastname@example.org.
If you require further information about how your personal data will be held and processed by Nexus, or if you wish to make a complaint about any data protection matter, contact the Nexus Data Protection Officer, by email at email@example.com.
Complaints to the Information Commissioner
Nexus tries to meet the highest standards when collecting and using personal data. For this reason, we take any complaints we receive about this very seriously. Nexus encourages employees to bring to our attention if they think that our collection or use of their personal data is unfair, misleading or inappropriate.
If you are unhappy at the handling of any complaint made to Nexus about how your personal data has been handled or processed, you can contact the Information Commissioner’s Office as the statutory body, which oversees data protection law within the United Kingdom.
The Information Commissioner’s Office can be contacted by phoning 0303 123 1113 or in writing at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
In addition, you can report a concern online at https://ico.org.uk/concerns.