|Who we are
||ATOC Ltd brings together the companies that run Britain’s railway into a single team.
ATOC Ltd is the data controller for all the personal data that you provide.
ATOC Ltd's address is 200 Aldersgate Street, London EC1A 4HD.
The purpose of this policy is to make you aware of how we will manage your personal data.
|Our lawful basis for collecting your data
||We collect personal data so that you can access the ASSIST service which enables Ticket Issuing Systems (TIS) Suppliers and Rail Settlement Plan (RSP) to manage changes to Ticket Issuing Systems and Compliance Standards.
Therefore, we have a legitimate interest in collecting your data so that we can provide you with the ASSIST service.
We will treat your data in an appropriate and lawful manner, in accordance with data protection laws.
|What data we collect
||For all ASSIST account applications we collect your First name, Surname, Company name, email address and job title
|Sharing information with other data processors
||To fulfil your request, we use a number of suppliers to produce, deliver and administer the system and your account.
ASSIST (RSP system)
AWS (website and database hosted in EU)
iBlocks (software release management)
|Keeping it safe
||We protect your privacy by ensuring we have the appropriate security measures in place.
We ensure that our suppliers process your data in an appropriate, lawful and safe manner, and within the EU only.
|What we do with your data
||We use your data to provide you with, and support an ASSIST account.
We will, with your consent, send you accreditation information and compliance standards when new versions become available.
|How long do we keep your data?
||We keep your data while your account is valid.
When your account is no longer valid, we will anonymise and archive it.
If you have started but not completed an account application, we will archive the account if you have not activated it within 30 days.
|Subject access request
||You have the right to request that we give you a copy of the data we hold about you. This is called a ‘Subject Access Request’.
|Right to deletion
||You have the right to request that we delete any data that we hold on you. You can log onto your account and remove your account details at any time.
|Right to restrict processing
||You have the right to request that we restrict processing of your information.
|Right to rectification
||If your details are incorrect, incomplete or have changed, you can update them by logging onto your online account and updating them.
|How to contact us
||To exercise any of your rights, please contact:
The Data Protection Lead
ATOC Ltd, 200 Aldersgate Street, London EC1 4HD.
Tel: 0207 841 8000.
|Our contact information
||RDG Compliance Standards
Write to: Rail Delivery Group, 200 Aldersgate Street, London EC1A 4HD
Please include your name, address and account number, so that we can deal with your request.
|Right to complain
||You have the right to complain about our processing to the Information Commissioner if you believe we are not processing your data in a proper manner.