Your information rights

Contacting the Data Protection Officer

A Data Protection Officer has been appointed for Nexus and its subsidiary companies.

You can contact the Data Protection Officer by email at [email protected] or by writing to:

Data Protection Officer
Nexus
Nexus House
St James’ Boulevard
Newcastle upon Tyne
NE1 4AX.

What the Data Protection Officer does

It is a requirement for public authorities to appoint a Data Protection Officer to oversee the collection, handling and use of personal data.  The Data Protection Officer informs and advises Nexus and its subsidiaries about our obligations to comply with the General Data Protection Regulation (GDPR) and other data protection legislation.

Your rights under data protection legislation

Right to withdraw consent

If we have relied on consent as the grounds for processing your personal data, you can withdraw this consent at any time.

Right to be informed

There must be a clear reason why Nexus needs to collect or use personal data.  We tell people when we’re collecting their personal data and what we’re going to do with it.

Right of access

Individuals have the right to access copies of their personal data.  This is done via a subject access request.  To make a subject access request to Nexus please visit https://www.nexus.org.uk/data-protection.

Right to rectification

You can ask us to correct the information we hold about you if it is inaccurate or incomplete.  If we have passed the information on to others, we will take steps to pass on the correction too.  If we find that the information should not be changed, we will contact you within one month to explain our decision and provide details about how you can challenge the decision if you are dissatisfied with the outcome.

Right to erasure

The right to erasure gives individuals, in certain circumstances, the opportunity to ask organisations to delete personal data it holds about them.  If we have passed the information on to others, we will take steps to tell them it has been deleted.

Right to restrict processing

Individuals have the right to ask or stop their personal data being used whilst an objection or rectification request is being considered, or if it has been used unlawfully.  You may also ask us to retain data required to establish, exercise or defend a legal claim.

Right to data portability

The right to data portability allows individuals to request their personal data from an organisation in a way that is accessible such as a CSV, JSON or XML file.

Right to object

Individuals have the right to object to the processing of their personal data in certain circumstances.

Rights related to automated decision making including profiling

This right enables individuals, in certain circumstances, to prevent the automated profiling of their personal data.

We are required to tell you if we are using automated decision making to make decisions that would have legal, or similarly significant effect on you.  We will explain what information we use, why we use it and what the effects might be.

For further information on the rights of an individual please visit https://ico.org.uk/your-data-matters/.

How to exercise your rights under data protection legislation

We have published privacy notices on our website at https://www.nexus.org.uk/privacy-policy and an easy to use form to help you access your data.

You should email [email protected] if you have a concern about the accuracy of the personal data we hold about you, if you want us to erase or restrict use of your personal data, if you object to the use of your personal data or if with to exercise rights in relation to automated decision making.

The right to contact the Information Commissioner’s Office

You are also entitled to raise a concern with the Information Commissioner’s Office, the UK’s independent body set up to uphold information rights.  For information visit their website at https://ico.org.uk/.

© 2019 Nexus Tyne and Wear - Public Transport and Local Information.