The purpose of this notice is to make you aware of how we will manage and protect your personal data.
ATOC Ltd is the name of our legal entity and is the data controller. As such, ATOC Ltd is responsible for ensuring the lawful and appropriate handing of all the personal data that you provide in relation to ASSIST.
To contact us regarding our use of your data, please click here. Alternatively, you can write to us at ATOC Ltd, First Floor North, 1 Puddle Dock, London, EC4V 3DS.
We collect personal data so that you can access the ASSIST service which enables Ticket Issuing Systems (TIS) Suppliers, Train Operating Companies and Rail Settlement Plan (RSP) to manage changes to Ticket Issuing Systems and Compliance Standards.
Therefore, we have a legitimate interest in collecting your data so that we can provide you with the ASSIST service.
We adhere to the principle of data minimisation and only collect the data we need to fulfil the purposes for which it was originally collected.
To fulfil your request, we use a number of suppliers to produce, deliver and administer the system and your account. These are:
We protect your privacy by ensuring we have the appropriate security measures in place.
We ensure that our suppliers process your data in an appropriate, lawful and safe manner, and within the UK and EU only.
We use your data to provide you with, and support an ASSIST account.
We adhere to the principle of storage limitation and only hold your data for as long we need it based on the original purposes for which it was collected.
When we no longer need your data then your accounts login name, name and email address will be removed.
You have several rights in relation to how we use your data which are set out below. To contact us in relation to your rights regarding how we use your data, please click here to submit a request.
You have the right to be informed about why we hold your personal data, what we use it for and how we keep it safe.
You have the right to request that we give you a copy of the data we hold about you. This is called a 'Data Subject Access Request'.
If your details are incorrect, incomplete or have changed, you have the right to request that we update your data to rectify any inaccuracies.
You have the right to request that we delete any data that we hold on you. You can log onto your account and remove your account details at any time.
You have the right to request that we restrict processing of your information.
You have the right to object to emails sent for non-essential purposes.
To exercise any of your rights set out above, click here and fill out our online form or contact us using the details provided below:
Data Protection Lead for ASSIST ATOC Ltd, First Floor North, 1 Puddle Dock, London, EC4V 3DS Tel: 0207 841 8000.
You have the right to complain about our processing to the Information Commissioner if you believe we are not processing your data in a proper manner. For more information you can visit the ICO website at https://ico.org.uk/concerns/handling/.
Last updated: 14-Sep-2021
Note: ATOC Office address updated: 26-May-2023