5.1       At Peel Ports we are committed to respecting your privacy. Peel Ports is made up of different legal entities, details of which can be found on the Peel Ports website at https://www.peelports.com/legal-info. The Company and Peel Ports Group Limited group of companies (Peel Ports) are "data controllers". This means that we are responsible for deciding how we hold and use personal information about you. We have appointed a Group Data Protection Officer (contact details set out below), who, inter alia, is responsible for overseeing questions in relation to this Bridge Pass Privacy Notice. Our general Privacy Notice is available at www.peelports.com/privacy-notice or on request. This notice is specifically in relation to the Bridge Pass issued and administered by the Company, which is the data controller of all data collected in connection with that purpose.

 

5.2        Personal data we collect and why.

 

When applying for your Bridge Pass, personal identification data will be collected from you by the Company.  We will collect:

• Name;
• Address;
• Registration number for the Motor Vehicle;
• IP/e-mail address; and
• Credit or debit card details for the purposes of your advance payment.

 

The legal basis for processing this information is that it is in the Company’s legitimate interest to hold the above information to issue and administer the relevant Bridge Pass.

5.3       How do we protect your personal data?

The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with our general privacy notice set out at www.peelports.com/privacy-notice.

The data you provide will be stored in a secure database or secure storage location and will only be used for the purpose of issuing and administering the Bridge Pass.

 

The Company has put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where the Company is legally required to do so. Your personal data is stored in electronic records, which are maintained by the Company. We will not export your data outside of the EEA unless stated or required to do so as per the next section of this notice.

 

5.4        Who do we share your personal data with?

In some circumstances we may share your personal data with the parties set out below:

 

• Companies within Peel Ports Group that act as joint controllers or processors and are based in the European Economic Area in order to provide IT, administration and support services.
• Third parties (including service providers and professional advisers acting as processors who provide administration and support services).
• The Company has engaged Shopify Inc., a Canadian corporation with offices at 150 Elgin Street, Suite 800, Ottawa, ON, K2P 1L4 (“Shopify”) (which is certified as a PCI DSS Level 1 compliant service provider) as a service provider to securely process your advance payment for the Bridge Pass. Such processing is carried out within the EEA by Shopify’s Irish affiliate Shopify International Ltd however personal data may be transferred to Canada or the USA by Shopify on computer servers in the U.S. where such computer servers are managed and controlled by an entity that is either subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) or E.U./U.S. Privacy Shield certified or in jurisdictions otherwise in compliance with applicable EEA data protection legislation.  Via its arrangements with Shopify, the Company has appointed Stripe Payments Europe Ltd (“Stripe”), a company incorporated in Ireland, whose registered office is situate at c/o A&L Goodbody, IFSC, North Wall Quay, Dublin 1 as a processor for the purposes of securely processing your payment for the Bridge Pass however personal data may be transferred to the USA on computer servers in the U.S. where such computer servers are managed and controlled by an entity that is E.U./U.S. Privacy Shield certified. For more insight, you may also want to read the Shopify Terms of Service or Shopify Privacy Statement  or Stripe’s Privacy Policy .

The Company will share your personal information with third parties where required by law or where we have another legitimate interest in doing so. We require third parties to respect the security of your data and to treat it in accordance with the law.  We do not allow our employees or these third parties to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

There are certain other exceptional circumstances in which we may disclose your information to third parties. This would be where we believe that the disclosure is:

• required by law, or in order to comply with judicial proceedings, court orders or legal or regulatory proceedings;
• Necessary to protect the safety of our employees, our property or the public
• Necessary for the prevention or detection of crime, including in connection with our investigations, and exchanging information with other companies or organisations for the purposes of complying with our legal obligations regarding security at the Manchester Ship Canal.

5.5        How long do we keep your personal data?

The Company holds your personal data for the duration that you hold a Bridge Pass and for a period of six months thereafter or for as long and to the extent as is necessary for the purposes of satisfying any legal, accounting or reporting requirements.

5.6        What rights do you have in respect of your personal data?

You have the right to request access to, and transfer, rectification or erasure of, your personal data. You may object to the processing of your personal data or request a restriction to the way it is processed. You also have the right to lodge a complaint with a supervisory authority.

If you wish to exercise the above rights, please contact us. We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

5.7        Who to contact if you have questions

If you have any questions about this privacy notice or how we handle your personal data, please contact our Group Data Protection Officer (DPO), who is based at Maritime Centre, Port of Liverpool, Liverpool, L21 1LA and can be contacted by email at GroupDataProtectionOfficer@peelports.com or in writing to:

 

       Andrew Langfeld

       Group Data Protection Officer

       Peel Ports Group Limited

       Maritime Centre

       Port of Liverpool

       L21 1LA

If you have a complaint in connection with the way we have processed your personal data you have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. See www.ico.org.uk.