Arriva UK Bus Ltd Privacy Policy

Last updated: 13 December 2018

Arriva UK Bus Ltd (”We”) are committed to protecting and respecting your privacy.

This policy (together with our Website Terms of Use (insert Terms of Use link) and any other documents referred to in it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting http://www.arrivabusjobs.co.uk/ or providing your information in the circumstances described below, you are accepting and consenting to the practices described in this policy. For the purpose of Data Protection Legislation, the data controller is Arriva UK Bus Ltd of 1 Admiral Way, Doxford International Business Park, Sunderland SR3 3XP.

1. What personal data do we collect?

2. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (‘Google’). Google Analytics uses cookies (text files placed on your computer) to help the website operators analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.

3. Cookies

Our site uses cookies to distinguish you from other users of our site. This helps us to provide you with a good experience when you browse our site and also allows us to improve our sites. For detailed information on the cookies we use and the purposes for which we use them see our Cookie policy at [insert cookies URL].

4. How do we use your personal data and what is the legal basis for such processing?

The collection of the personal data described above is usually mandatory and, if such personal data is not provided, we will not be able to provide the information, products and services to you. Where the collection of any personal data is not mandatory, we will inform you of this prior to collection, as well as the consequences of failing to provide the relevant personal data. Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally process your personal information only:

Information provided by you. We use your personal information as follows:

Purpose of processing

Legal basis for processing

To fulfil a request for additional information.

Consent.

Information we collect about you. We use your personal information as follows:

Purpose of processing

Legal basis for processing

Monitoring and improving website performance.

Legitimate interests.

Security of the website.

Legitimate interests.

5. Sharing Your Information

We may disclose your personal data to the following categories of recipient for the purposes described in this Privacy Notice:

We may also disclose your personal data to any competent law enforcement body, regulator, government agency or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation; (ii) to exercise, establish or defend or legal rights; or (iii) to protect your vital interests or those of any other person;

We may also transfer your personal data to a buyer or potential buyer (and its agents and advisers) in connection with any reorganisation, restructuring, merger or sale, or other transferring of assets provided that we inform any receiving party it must use your personal information only for the purposes disclosed in this Privacy Notice.

Finally, we may disclose your data to any other person to whom you request us to make disclosure or if you consent to such disclosure.

6. Data Retention

We will not retain your personal data for longer than is necessary to fulfil the purposes for which we collected that personal information, unless the law permits or requires that we retain it for longer.

The table below explains in more detail how long Arriva Plc will store different types of information for:

Data

Retention Period

Information provided by you in connection with an enquiry

This may vary depending on the nature of your enquiry however typically enquiries will be retained for 12 months from the date of collection, unless there is another legal basis for retaining it.

Website analytics data

13 months from the date of collection

IP address

15 days from the date of collection

7. Information Security

We apply appropriate administrative, technical and organisational security measures to protect your personal data that is under our control from unauthorised access, collection, use, disclosure, copying, modification or disposal. All information you provide to us is stored on secure servers. We are part of the Arriva plc Group, which trains its employees regarding our data privacy policies and procedures and permit authorised employees to access personal data on a need to know basis, as required for their role. We also take steps to ensure that any service provider that we engage to process personal data on our behalf takes appropriate technical and organisational measures to safeguard such personal data.

8. Transferring Information Internationally

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country. This means that, when we collect your personal information, it may be processed in these countries. However, we have taken appropriate safeguards to require that your personal data will remain protected in accordance with this Privacy Notice.

9. Updates to this Privacy Notice

We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws.

You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.

10. Your Data Protection Rights

You have the following data protection rights:

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

11. Questions about this Privacy Notice

If you have any question, concerns or complaints about this Privacy notice or our handling of your personal data, you can contact us by email on UKGPeopleSolutionsCoE@arriva.co.uk or by post to the following address:

People Solutions Centre of Excellence Arriva Plc. Lacon House 6th Floor 84 Theobalds Road London WC1X 8NL

If you are unsatisfied with the response, you can contact Arriva plc's Data Protection Officer at UKGPeopleSolutionsCoE@arriva.co.uk.

You have the right to complain to a data protection authority about our collection and use of your personal information. If you are based in the European Economic Area, please contact your local data protection authority. (Contact details for data protection authorities in the European Economic Area, Switzerland and certain non-European countries are available on the EU Commission's website via the following link): http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm)

The controller of your personal data is Arriva UK Bus Ltd.