Under the Data Protection Legislation, we must always have a lawful basis for using personal data. The following table describes how we may use your personal data, and our lawful bases for doing so:
With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email and/or text message with information, news, and offers on our and/or third party services and products. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the Data Protection Legislation and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out.
We will always obtain your express opt-in consent before sharing your personal data with third parties for marketing purposes and you will be able to opt-out at any time.
Third Parties (including transport operators and vendors relevant to your journey) whose content appears on Our Services may use third-party Cookies, as detailed below in Part 16. Please refer to Part 16 for more information on controlling cookies. Please note that we do not control the activities of such third parties, nor the data that they collect and use themselves, and we advise you to check the privacy policies of any such third parties.
We use the following automated systems for carrying out certain kinds of decision-making and profiling. If at any point you wish to query any action that we take on the basis of this or wish to request ‘human intervention’ (i.e. have someone review the action themselves, rather than relying only on the automated method), the Data Protection Legislation gives you the right to do so. Please contact us to find out more using the details in Part 17.
The following automated decision-making method(s) may be used:
- Automated journey re-routing based on the current journey being undertaken as well as profile information including preferences and journey history, as well as third party information associated with your profile and journey. The lawful basis under which these services are provided is that of a Contract. The data used is to enable optimisation of journeys. The intent is to provide more efficient and relevant passenger experiences.
The following automated profiling may take place:
- Automated filtering of journey and product recommendations based on profile information including preferences, journey and purchase history as well as third party information associated with your profile and journey. The lawful basis under which these services are provided is that of a Contract. The data used is to enable optimisation of journey plans as well as tailored recommendations for product purchases. The intent is to provide more efficient and relevant passenger experiences.
We will only use your personal data for the purpose(s) for which it was originally collected unless we reasonably believe that another purpose is compatible with that or those original purpose(s) and need to use your personal data for that purpose. If we do use your personal data in this way and you wish us to explain how the new purpose is compatible with the original, please contact us using the details in Part 17.
If we need to use your personal data for a purpose that is unrelated to, or incompatible with, the purpose(s) for which it was originally collected, we will inform you and explain the legal basis which allows us to do so.
In some circumstances, where permitted or required by law, we may process your personal data without your knowledge or consent. This will only be done within the bounds of the Data Protection Legislation and your legal rights.