Data Protection Notice and Website Privacy Statement
The Disability Tolling Exemption Scheme (DTES) is operated by Easytrip Services Ireland Ltd (“Easytrip”) on behalf of Transport Infrastructure Ireland (“TII”). The Disability Tolling Exemption Scheme is intended to facilitate greater and more efficient access by disabled people (who meet the required criteria) to Toll Roads in the State.
TII is the operational name of the National Roads Authority (“NRA”) following the dissolution of the Railway Procurement Agency and the transfer of its functions to the NRA in accordance with the Roads Act 2015.
TII’s main address is Parkgate Business Centre, Parkgate Street, Dublin 8, D08 DK10, Ireland.
Easytrip has been contracted to provide a centralised Disability Tolling Exemption Scheme service on behalf of TII. In connection with the operation and administration of the Scheme, Easytrip operates the DTES website relevant to this Disability Tolling Exemption Scheme.
In connection with its processing of personal data in connection with the operation of this website and the administration of the Disability Tolling Exemption Scheme, Easytrip acts as a processor, which processes personal data on behalf of TII.
TII is the controller of personal data collected and processed in connection with the operation and administration of the Disability Tolling Exemption Scheme, including via this website.
The purpose of this data protection notice is to inform you of the personal data relating to you that is collected and processed in connection with the operation of the Disability Tolling Exemption Scheme. This includes when you visit this website, submit an application and/or raise a query etc. (including via this website) in connection with the Disability Tolling Exemption Scheme.
We fully respect your right to privacy and are committed to protecting your personal data. Any personal data that is processed in connection with the Disability Tolling Exemption Scheme is processed in accordance with applicable data protection law.
If you have any questions about our use of your personal data, please contact our Data Protection Officer:
DTES c/o Easytrip Services Ireland Ltd
EA House
Damastown Industrial Park
Mulhuddart
Dublin 15
D15 XWR3
Tel: +1800 11 55 00
Email: dataprotection@dtes.ie
References to “we”, “our” or “us” in this privacy statement are references to (i) Easytrip acting on behalf of TII or (ii) TII itself.
We collect and process the following personal data in connection with the Disability Tolling Exemption Scheme. Such details are mainly collected when you visit this website, though applications in connection with the Scheme may also be submitted manually.
| Personal data category | Description |
|---|---|
| Website data |
• IP address • Browser type • Length of user sessions |
| Application Form (Scheme Disc) |
• Name • Phone number • Email address • Home address • Information relating to qualification for the Revenue Commissioners’ Drivers and Passengers with Disabilities Tax Relief Scheme (e.g. Vehicle Registration Certificate) • Information relating to the qualification of Northern Ireland registered vehicles for the Disability Tolling Exemption Scheme (e.g. certification from Motability NI) |
| Contact Us data |
• Name • Phone number • Email address • Customer comment or complaint • Vehicle registration number |
| Renewal Form |
• Name • Phone number • Email address • Home address • Vehicle registration certificate • Existing disc number |
| Appeal Form |
• Name • Phone number • Email address • Home address • Vehicle registration certificate • Existing disc number • Appeal details |
The personal data relating to you that is held by us is generally collected directly from you (e.g. when you contact us and/or submit application forms etc). As well as collecting information from you directly, we may receive or collect information about you and your vehicle via Motorcheck from the National Vehicle and Driver File. This will be the case when we are considering your application for a Scheme disc.
In addition, we may also collect information about you from the following third party sources:
- The Irish Wheelchair Association and the Disability Driver Association (e.g. where you authorise either of these organisations to submit an application for a Scheme Disc on your behalf);
- Toll companies and the Interoperability Management Service Provider;
Legal bases
The personal data described above is processed by us and by third party service providers acting on our behalf. The legal bases on which we collect, process and transfer your personal data for these purposes are:
- where such processing is necessary to carry out its tasks in the public interest and/or in the exercise of official authority vested in TII (“Public Interest/Official Authority”);
- your consent (“Consent”), where this is the case you will be asked to give a positive indication of that consent; and
- where special categories of personal data are processed (e.g. health/disability data, that the processing is necessary for reasons of substantial public interest and on the basis of Irish law, i.e. the Roads Act 1993 as amended (“Substantial Public Interest/Official Authority”)
Purpose of Processing Activities and Associated Legal Basis
Personal data is processed in order to:
| Purposes | Categories of personal data | Legal bases |
|---|---|---|
| To consider and respond to applications and, if appropriate, provide you with a Scheme Disc under the Disability Tolling Exemption Scheme, including determining whether you are entitled to a Scheme Disc. | Application Form (Scheme Disc) | Public Interest / Official Authority pursuant to the Roads Act 1993 (as amended) |
| To respond to queries and complaints from members of the public. | Contact Us data | Public Interest / Official Authority pursuant to the Roads Act 1993 (as amended) |
| To respond to renewal and appeal queries from members of the public. | Renewal Form and Appeal Form data | Public Interest / Official Authority pursuant to the Roads Act 1993 (as amended) |
In connection with applications, renewals or appeals, we may process special categories of personal data (e.g. health/disability data). In such circumstances, the condition which we rely on to process this data is Substantial Public Interest/Official Authority pursuant to the Roads Act 1993 as amended.
Disclosure of Data/Recipients of Data
In connection with the administration of the Disability Tolling Exemption Scheme, including the operation of this website, the following are the key recipients of personal data processed by TII:
| Recipients of Personal Data | Purposes of Processing |
|---|---|
| Easytrip | To manage the website and administer the Disability Tolling Exemption Scheme on behalf of TII. |
| Toll Chargers (operators of toll roads) | To ensure that holders of Scheme Discs can avail of toll-free travel. |
| The Interoperability Management Services Provider (which assists in ensuring that discs/tags can be used on different toll roads) | To ensure that holders of Scheme Discs can avail of toll-free travel. |
| Amazon Web Services (AWS) as a service provider to the Scheme Operator, Easytrip | AWS stores data relevant to the Scheme on behalf of Easytrip. |
We may also disclose data described in the “Collection and Use of Personal Information” section above to other organisations in connection with the above purposes, in the following circumstances:
- We may share data with our agents and contractors to the extent reasonably required for the purposes described above.
- In the event of a restructuring of our organisation we may also disclose your data to any third party that takes over some or all of the functions of TII.
- Where we are under a duty to disclose or share personal data in order to comply with any legal obligation, or to protect the rights, property or safety of TII, our customers or others.
- Where we are otherwise permitted by law.
Cookies
We may gather statistical and other analytical information collected on an aggregate basis of visitors to the DTES website. This includes demographic information regarding, for example, user IP addresses, browser types and other anonymous statistical data involving the use of our website. For information about the cookies we use to collect some of this information, please see our cookies policy here.
Security
TII and Easytrip, on TII’s behalf, have adopted appropriate technical and organisational security measures to protect your information from unauthorised access and against unlawful processing, accidental loss, destruction or damage.
We will also ensure that our other agents or third party service providers who process your data are required to keep your data safe and secure.
You might note, however, that no data transmission over the Internet can be guaranteed to be 100% secure
Your Rights
You have the following rights, in certain circumstances, in relation to your personal data:
- The right to access your personal data – You have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data;
- The right to request the rectification of your personal data – You have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete;
- The right to request erasure of your personal data – You have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten –
- The right to restrict the use of your personal data – You have the right to request that we no longer process your personal data for particular purposes;
- The right to object to the processing of your personal data – You have the right to object to our processing of your personal data for particular purposes;
- The right to data portability – You have the right to receive your personal data, which you provided to us, in a structured, commonly used and machine-readable format or to require us to transit that data to another controller; and
- where our processing of your personal data is based on you having provided consent (e.g. any consent provided to the use of certain categories of cookies), you have the right to withdraw your consent to the processing at any time.
Please note that these rights are not absolute and are subject to certain restrictions and exemptions. For example, the right to erasure of personal data will not apply where we have a legitimate reason to continue to hold such data and we may continue to process your personal data, despite an objection by you, where we have compelling legitimate grounds for the processing which override your interests, rights and freedoms.
In order to exercise any of the rights set out above, please contact us using the contact details above.
Retention
We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Our retention periods differ depending on the type of categories of personal data held. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In general terms, Scheme Disc data is retained for a period of three years from the later of (i) the date of your application for a Scheme Disc or (ii) the date on which the Scheme Disc issues. This is to accommodate (i) the two year validity period for the disc and (ii) an additional year to facilitate ease of renewal and query response for Scheme users if they have not re-applied for a Scheme disc within the two year period during which the existing Scheme disc was valid).
Transfers abroad
In connection with the above processing activities, we may transfer your personal data outside the European Economic Area, including to a jurisdiction which is not recognised by the European Commission as providing an equivalent level of protection for personal data as is provided for in the European Union. If and to the extent that we do so, we will ensure that appropriate measures are in place to comply with its obligations under applicable law governing such transfers.
Currently, the only transfer outside of the European Economic Area arises in connection with our use of Google Analytics. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Data collected in connection with this service is transferred to the United States. We ensure that this transfer is effected in compliance with our obligations under applicable law governing such transfers by ensuring that there is a contract governing the transfer which contains the ‘standard contractual clauses’ approved for this purpose by the European Commission. Further details of the measures that we have taken in this regard are available from the Data Protection Officer using the contact details above.
Changes/Updates to this Data Protection Notice
From time to time we may need to update or amend our data protection notice and website privacy statement, but any changes will be posted on this page to keep you up to date on how we collect, use and disclose information.
If at any time we decide to use personal data in a manner significantly different from that stated in this data protection notice and website privacy statement or otherwise disclosed to you at the time it was collected, we will notify you, and you will have the choice as to whether or not we use your information in the new manner.
Questions and Complaints
If you have any questions or complaints about our use of your personal data, please contact us using the following contact details:
- by post: Data Protection Officer, Transport Infrastructure Ireland, Parkgate Business Centre, Parkgate Street, Dublin 8, D08 DK10
- by phone: +353 1 646 3600
- by email: dataprotection@tii.ie
Further information about data protection can be found on the Data Protection Commission’s website: www.dataprotection.ie
You also have the right to lodge a complaint with the Data Protection Commission if you are dissatisfied with the way we have used your information or addressed your rights. Details of how to lodge a complaint can be found on the Data Protection Commission’s website.