Commuter Service Fair Processing Notice

Identity and contact details of the controller and where applicable, the controller’s representative and the data protection officer.

Merseytravel is the ‘controller’ for your personal information. This means that we decide the purpose and means of how your data is used as part of the Mersey Ferries Commuter Club.
If you have any questions about how your information is being used you can contact Merseytravel’s Data Protection Officer at:

[email protected]
0151 330 1679
1 Mann Island, Liverpool, L69 3HN

Purpose of the processing and the legal basis for the processing

Your information is being used by Merseytravel to provide you with updates about disruptions to Mersey Ferries services, and we are able to do this with your consent.

Description of the categories of personal data

The categories of information being processed include your mobile phone number.

Retention period or criteria used to determine the retention period

Your data will be kept for a period of until you unsubscribe to the service. This retention has been determined by Merseytravel business need.

Any recipient or categories of recipients of the personal data

Your information will be shared with TextAnywhere for the purposes of sending you the requested alerts.

The existence of each of data subject’s rights

The GDPR provides you with the following rights when it comes to your personal data:

• The right to be informed how your personal data is being processed
• The right of access to the personal data we hold about you, which includes providing copies of the information to you within one month of a request. We may charge a reasonable fee to provide this information based on our administrative costs of responding (i.e. photocopying, postage, etc.).
• The right to rectification of any incorrect or incomplete data we hold about you
• The right to erasure, also known as ‘the right to be forgotten’, where
• Your information is no longer required for the purpose it was collected
• You withdraw your consent
• You object to Merseytravel processing your information (and there is no overriding legitimate interest for continuing the processing
• Merseytravel has breached the GDPR when processing your data
• There is a legal obligation to delete the data (such as a court order)
• The right to restrict processing, which limits what Merseytravel can do with your information
• The right to data portability, where any automated processing of your information based on your consent or as part of a contract is made available for your reuse
• The right to object to direct marketing or any processing based on the performance of a task in the public interest/exercise of official authority or for the purposes of scientific/historical research and statistics.
• Rights in relation to automated decision making and profiling, where a decision made by a computer has a legal or significant effect on you.

The right to withdraw consent at any time

You have the right to withdraw you consent at any time, either by texting STOP to 81025 or by contacting the Data Protection Officer.

The right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint regarding the processing of your personal data to the UK’s supervisory authority, the Information Commissioner, who can be reached using the details below:

The Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire SK9 5AF
www.ico.gov.uk
0303 123 1113

Manchester Ship Canal Cruise Fair Processing Notice

Identity and contact details of the controller and where applicable, the controller’s representative) and the data protection officer

Merseytravel is the ‘controller’ for your personal information. This means that we decide the purpose and means of how your data is used as part of your booking on the Manchester Ship Canal Cruise.

If you have any questions about how your information is being used you can contact Merseytravel’s Data Protection Officer at [email protected]
0151 330 1679
1 Mann Island, Liverpool, L69 3HN

Purpose of the processing and the legal basis for the processing

Your information is being used by Merseytravel to process your booking, and we are able to do this due to a legal obligation that we have to comply with Maritime Regulations.

In the case of any special category processing, your information is processed to ensure the equality of opportunity or treatment.

Description of the categories of personal data

The categories of information being processed include your name, postal address and email address.

In addition, we may also process some ‘special categories’ of your personal data, such as information related to your health in order for us to provide you with any necessary assistance.

Any recipient or categories of recipients of the personal data

In the event of an emergency occurring while on board, your information will be shared with relevant bodies to provide any necessary assistance to you.

Retention period or criteria used to determine the retention period

Your data will be kept only for the duration of your cruise. This retention has been determined by the Maritime Regulations.

The existence of each of data subject’s rights

The GDPR provides you with the following rights when it comes to your personal data:

• The right to be informed how your personal data is being processed
• The right of access to the personal data we hold about you, which includes providing copies of the information to you within one month of a request. We may charge a reasonable fee to provide this information based on our administrative costs of responding (i.e. photocopying, postage, etc.).
• The right to rectification of any incorrect or incomplete data we hold about you
• The right to erasure, also known as ‘the right to be forgotten’, where
• Your information is no longer required for the purpose it was collected
• You withdraw your consent
• You object to Merseytravel processing your information (and there is no overriding legitimate interest for continuing the processing
• Merseytravel has breached the GDPR when processing your data
• There is a legal obligation to delete the data (such as a court order)
• The right to restrict processing, which limits what Merseytravel can do with your information
• The right to data portability, where any automated processing of your information based on your consent or as part of a contract is made available for your reuse
• The right to object to direct marketing or any processing based on the performance of a task in the public interest/exercise of official authority or for the purposes of scientific/historical research and statistics.
• Rights in relation to automated decision making and profiling, where a decision made by a computer has a legal or significant effect on you.

The right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint regarding the processing of your personal data to the UK’s supervisory authority, the Information Commissioner, who can be reached using the details below:
The Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire SK9 5AF
www.ico.gov.uk
0303 123 1113

Marketing Fair Processing Notice

Identity and contact details of the controller and where applicable, the controller’s representative) and the data protection officer

Merseytravel is the ‘data controller’ for your personal information. This means that we decide the purpose and means of how your data is used as part of our Mersey Ferries marketing activities.

If you have any questions about how your information is being used you can contact Merseytravel’s Data Protection Officer at:

[email protected]
0151 330 1679
1 Mann Island, Liverpool, L69 3HN

Purpose of the processing and the legal basis for the processing

Your information is being used as part of our marketing activities, and we are able to do this with your consent that you provided when you signed up on our website to receive regular news, updates and special offers about Mersey Ferries.

Description of the categories of personal data

The categories of information being processed include your title, first name, last name and email address.

Your information will be shared with DotDigital, for the purposes of Mersey Ferries email marketing. DotDigital are an email marketing software provider, based here in the UK.

Retention period or criteria used to determine the retention period

Your data will be kept indefinitely from the date of when you signed up, unless you unsubscribe, which you are able to do at any time following the instructions found at the bottom of every email we send to you. This retention has been determined by Mersey Ferry’s business need.

The existence of each of data subject’s rights

The GDPR provides you with the following rights when it comes to your personal data:

• The right to be informed how your personal data is being processed
• The right of access to the personal data we hold about you, which includes providing copies of the information to you within one month of a request. We may charge a reasonable fee to provide this information based on our administrative costs of responding (i.e. photocopying, postage, etc.).
• The right to rectification of any incorrect or incomplete data we hold about you
• The right to erasure, also known as ‘the right to be forgotten’, where
• Your information is no longer required for the purpose it was collected
• You withdraw your consent
• You object to Merseytravel processing your information (and there is no overriding legitimate interest for continuing the processing)
• Merseytravel has breached the GDPR when processing your data
• There is a legal obligation to delete the data (such as a court order)
• The right to restrict processing, which limits what Merseytravel can do with your information
• The right to data portability, where any automated processing of your information based on your consent or as part of a contract is made available for your reuse
• The right to object to direct marketing or any processing based on the performance of a task in the public interest/exercise of official authority or for the purposes of scientific/historical research and statistics.
• Rights in relation to automated decision making and profiling, where a decision made by a computer has a legal or significant effect on you.

The right to withdraw consent at any time

You have the right to withdraw your consent and stop receiving our marketing at any time.

The right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint regarding the processing of your personal data to the UK’s supervisory authority, the Information Commissioner, who can be reached using the details below:

The Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire SK9 5AF
www.ico.gov.uk
0303 123 1113

Fair Processing Notice – Mersey Ferries Competitions

Identity and contact details of the controller and where applicable, the controller’s representative and the data protection officer

Merseytravel/ is the ‘controller’ for your personal information. This means that we decide the purpose and means of how your data is used as part of Mersey Ferries competitions.

If you have any questions about how your information is being used you can contact our Data Protection Officer at

[email protected] 
0151 330 1679
1 Mann Island, Liverpool, L69 3HN

Purpose of the processing and the legal basis for the processing

Your information is being used by Merseytravel to run our Mersey Ferries competitions and to notify winners. We are able to do this with your consent, or if you are under 13 years of age, the consent of your parent or guardian.

Description of the categories of personal data

The categories of information being processed include your name and contact details (such as postal address, email address and/or social media profile name).

Retention period or criteria used to determine the retention period

If entering a competition via Mersey Ferries social media channels, your personal data will be kept in line with the retention periods of the social media platform.

The existence of each of data subject’s rights

The GDPR provides you with the following rights when it comes to your personal data:

• The right to be informed how your personal data is being processed
• The right of access to the personal data we hold about you, which includes providing copies of the information to you within one month of a request. We may charge a reasonable fee to provide this information based on our administrative costs of responding (i.e. photocopying, postage, etc.).
• The right to rectification of any incorrect or incomplete data we hold about you
• The right to erasure, also known as ‘the right to be forgotten’, where
• Your information is no longer required for the purpose it was collected
• You withdraw your consent
• You object to Merseytravel processing your information (and there is no overriding legitimate interest for continuing the processing)
• Merseytravel has breached the GDPR when processing your data
• There is a legal obligation to delete the data (such as a court order)
•  The right to restrict processing, which limits what Merseytravel can do with your information
•  The right to data portability, where any automated processing of your information based on your consent or as part of a contract is made available for your reuse
• The right to object to direct marketing or any processing based on the performance of a task in the public interest/exercise of official authority or for the purposes of scientific/historical research and statistics.
• Rights in relation to automated decision making and profiling, where a decision made by a computer has a legal or significant effect on you.

The right to withdraw consent at any time

As our legal basis for processing your personal data is your consent, you have the right to withdraw this at any time.

The right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint regarding the processing of your personal data to the UK’s supervisory authority, the Information Commissioner, who can be reached using the details below:

The Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire SK9 5AF
www.ico.org.uk
0303 123 1113

Photography & Filming Fair Processing Notice

The right to withdraw consent at any time

If you have featured in official Mersey Ferry photography/ videography you have the right to withdraw your consent to be featured in photography/ videography at any time. To do so, contact our Data Protection Officer using at:
[email protected]
0151 330 1679
1 Mann Island, Liverpool, L69 3HN

The photography/ videography may be used for the purpose of promoting Mersey Ferries and may appear online, in print and on social media.

If your photo has been used in printed material, withdrawal of your consent will mean that it is not used in any future publications.

Should you not wish to have your image taken whilst on a Mersey Ferries cruise please speak to a member of staff on-board during the cruise.

Retention Period

The photography/ videography will be kept for a period of 10 years from the date of collection.

Fair Processing Notice

GDPR provides you with the following rights when it comes to your personal data.

• The right to be informed how your personal data is being processed.
• The right of access to the personal data we hold about you, which includes providing copies of the information to you within one month of a request.
• We may charge a reasonable fee to provide this information based on our administrative costs of responding (i.e. photocopying, postage, etc.).
• The right to rectification of any incorrect or incomplete data we hold about you
• The right to erasure, also known as ‘the right to be forgotten’, where:
• Your information is no longer required for the purpose it was collected
• You withdraw your consent
• You object to Mersey Ferries processing your information (and there is no overriding legitimate interest for continuing the processing)
• Mersey Ferries has breached the GDPR when processing your data
• There is a legal obligation to delete the data (such as a court order)
• The right to restrict processing, which limits what Mersey Ferries can do with your information.
• The right to data portability, where any automated processing of your information based on your consent or as part of a contract is made available for your reuse.
• The right to object to direct marketing or any processing based on the performance of a task in the public interest/exercise of official authority or for the purposes of scientific/historical research and statistics.
• Rights in relation to automated decision making and profiling, where a decision made by a computer has a legal or significant effect on you.

The right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint regarding the processing of your personal data to the UK’s supervisory authority, the Information Commissioner, who can be reached using the details below:

The Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire SK9 5AF
www.ico.gov.uk
0303 123 1113

Fair Processing Notice – Liverpool Gerry Marsden Terminal Wifi

Identity and contact details of the controller and where applicable, the controller’s representative and the data protection officer                        

Merseytravel is the ‘controller’ for your personal information. This means that we decide the purpose and means of how your data is used in order to provide you with free wifi at the Pier Head.

If you have any questions about how your information is being used you can contact our Data Protection Officer at

[email protected]
0151 330 1679
1 Mann Island, Liverpool, L69 3HN

Purpose of the processing and the legal basis for the processing

Your information is being used by Merseytravel to provide you with free wifi, and we are able to do this with your consent.

Description of the categories of personal data

The categories of information being processed include your device IP address.

Any recipient or categories of recipients of the personal data

Your information will be shared with Cisco Meraki, who provide the free wifi service on Merseytravel’s behalf. Details of Cisco Meraki’s Data Protection compliance can be found on their website at this link.

Retention period or criteria used to determine the retention period

Your data will be kept for a maximum period of 14 months. This retention has been determined by Merseytravel and Cisco Meraki’s business need.

The existence of each of data subject’s rights                        

The GDPR provides you with the following rights when it comes to your personal data:

• The right to be informed how your personal data is being processed
• The right of access to the personal data we hold about you, which includes providing copies of the information to you within one month of a request. We may charge a reasonable fee to provide this information based on our administrative costs of responding (i.e. photocopying, postage, etc.).
• The right to rectification of any incorrect or incomplete data we hold about you
• The right to erasure, also known as ‘the right to be forgotten’, where 
• Your information is no longer required for the purpose it was collected
• You withdraw your consent
• You object to Merseytravel processing your information (and there is no overriding legitimate interest for continuing the processing)
• Merseytravel has breached the GDPR when processing your data
• There is a legal obligation to delete the data (such as a court order)
• The right to restrict processing, which limits what Merseytravel can do with your information
• The right to data portability, where any automated processing of your information based on your consent or as part of a contract is made available for your reuse
• The right to object to direct marketing or any processing based on the performance of a task in the public interest/exercise of official authority or for the purposes of scientific/historical research and statistics. 
• Rights in relation to automated decision making and profiling, where a decision made by a computer has a legal or significant effect on you.

The right to withdraw consent at any time 

As our legal basis for processing your personal data is your consent, you have the right to withdraw this at any time.

The right to lodge a complaint with a supervisory authority                        

You have the right to lodge a complaint regarding the processing of your personal data to the UK’s supervisory authority, the Information Commissioner, who can be reached using the details below:

The Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire SK9 5AF
www.ico.org.uk
0303 123 1113