We're committed to protecting your personal data and ensuring that it is processed fairly and lawfully. Information we collect will be processed in accordance with the General Data Protection Regulation, the Data Protection Act 2018 and any subsequent legislation.
Purpose of processing
We operate the b_line travel discount card scheme in partnership with Derby City Council. There are 2 types of cards: b_line1 for children aged 11 up to their 16th birthday and b_line2 for students and apprentices aged from 16 to the date of their 19th birthday (inclusive).
The principal purpose of the card is to provide evidence to transport operators of eligibility of the holder for discounted travel on services within Derbyshire. Some retailers also accept the card as evidence of eligibility to receive a range of discounts on goods and services. It can also be used as a library card.
The legal basis for processing is:
- Article 6(1)(f) – processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child
Information we process
In order to receive a card, the personal details of the holder, must be provided. This information is required in order for a card to be posted to the holder.
The information required comprises:
- card holder name and address
- card holder date of birth
- card holder email address
- passport size photograph
Data relating to card usage is collected from transport providers for the purpose of statistical analysis and financial monitoring.
Sharing your information
Access to the personal data we collect is used by our officers directly involved in the legal, financial and administrative processes associated with the b_line scheme.
The b_line card scheme is managed using a card management system hosted and supported by Applied Card Technologies Limited, which is under contract to us for this service.
b_line cards are manufactured and posted direct to card holders by Euclid Limited, which is under contract to us for this service.
We may also lawfully disclose information to public sector agencies to prevent or detect fraud or other crime, or to support the national fraud initiatives and protect public funds.
We do not sell your personal information to third parties.
Amount of time we will hold your information
The information provided will be kept in accordance with our retention policy. Our contractor will return all data to us within 10 working days of contract expiry.
Keeping your information secure
We're committed to protecting personal data and have data policies and procedures in place to ensure that it is safeguarded.
Your personal data is held within a system hosted and managed by Applied Card Technologies Limited.
We carry out a number of checks on all third parties we use, and also has contracts in place which details the appropriate data protection obligations.
Our contractors are obligated to conform to our supplier information security policy, which protects your data while in their hands.
Your rights
If you have any queries, concerns or complaints, relating to you, about how we obtain, use, store or share your personal information please contact us:
email: access2info@derbyshire.gov.uk
Data Protection Officer
County Hall
Matlock
Derbyshire
DE4 3AG
If you're not satisfied with our response, you can contact the Information Commissioner.
If you'd like a copy of this information in a different format, please email: ete.foi_eir@derbyshire.gov.uk