Halo Privacy Notice
We take your right to privacy seriously and want you to feel comfortable when using our services.
Should we ask you to provide certain information by which you can be identified, you can be assured that it will only be used in accordance with this privacy notice and only for the reasons you are aware of.
About this Privacy Notice
- References to we, us or our, means Network Rail Limited, Network Rail Infrastructure Limited and Network Rail (High Speed) Limited
- References to you or your, means the person or persons who has/have provided personal information, or about whom we have collected personal information, as explained in this privacy notice
- Personal information is information that is about you and which identifies you
- We have a separate privacy notice which applies to the personal information that Network Rail collects about employees
- We may collect data relating to children if they are involved in an incident for which this becomes necessary
- It is important that you read this privacy notice together with any other privacy notices or fair processing notices we may provide on specific occasions when we are collecting or processing personal information about you, so that you are fully aware of how and why we are using your personal information. This privacy notice supplements the other notices and is not intended to override them
This privacy notice describes how Network Rail will collect, process, store and use your personal information.
What personal information do we collect?
- Full name and contact details
- Details of the incident including CCTV stills where appropriate to do so
- Racial or ethnic origin if there is a need to do so
- Physical or mental health or condition if there is a need to do so
- Railway Behaviour Notices, offences or criminal convictions where there is a need to do so
Why do we need to collect this information and what is our legal basis for processing?
Security and safety at stations is of paramount importance and is there to help protect everyone, from our customers to the various businesses operating out of our stations. Collection of incident and operational data enables measures to be applied and enforced to reduce the likelihood of incidents and other forms of disruption. It enables Network Rail to comply with its obligations as station owner and operator of its managed stations, as required under separate mandated instructions issued by the Department for Transport, and to deliver a better customer experience to all station users.
Processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent (life or death situations).
Processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.
It is also necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.
How do you store my data?
The data is stored securely by Halo Solutions in a cloud-based system, held within AWS Data Centres, for a period of 7 years from upload, before being deleted automatically.
Roles and responsibilities
Network Rail Infrastructure Ltd (Network Rail) is the data controller, which means we are responsible for the personal information you give us. Halo Solutions has no access to the data.
|
Responsibilities
|
Network Rail
|
Halo Solutions
|
|---|---|---|
|
Compliance with Privacy Laws |
Yes |
Yes |
|
Data Protection Impact Assessment |
Yes |
No |
|
Privacy Notice |
Yes |
No |
|
Contact point for all personal data enquires relating to Halo |
Yes |
No |
|
Provision of information to data subjects |
Yes |
No |
|
Inform Data Subject of Personal Data Breach |
Yes |
No |
|
Inform ICO of Personal Data Breach |
Yes |
Yes |
|
Request your personal information rights |
Yes |
No |
Privacy Laws
Under the Privacy Laws, you have rights; details of these rights can be found on the Network Rail Data Protection Webpage, however the right to request erasure does not apply.
Contact Us
We have several ways in which you can get in touch with us:
- Call our 24/7 national helpline on 03457 11 41 41
- Use our live chat service
- Use our online contact form here
- Write to us – Network Rail: Waterloo General Offices, Waterloo Station, London, SE1 8SW
- Try our Frequently Asked Questions here
Concerns about your information?
If you have concerns about how we use your information, you can contact the data protection officer on data.protection@networkrail.co.uk or see Network Rail’s Data Protection Privacy Notice.
Alternatively, you can contact the Information Commissioner’s Office:
- By post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- On their website: https://ico.org.uk/