TMB Processing Activities Register as Processor

Type of interested parties: users of public transport, customers and citizens.

Type of personal data:

• Identification and contact details: name and surname, email address, telephone number, ID, address and details of representative.
• Economic data
• Personal data: marital status, age, date of birth and family data

Purpose: management of sales, rights and exchange of ATM personal transport tickets

Legitimacy: 6.1.b) Contract execution

Data communications: data will not be shared with third parties except in the event of a legal obligation.

Data storage: data will be kept for the time necessary to comply with the purpose for which it was collected. The provisions of the archiving and documentation regulations will apply (Decree 13/2008, of 22 January, on access, evaluation and selection of documents).

Responsible for the treatment: Autoritat del Transport Metropolità (ATM)

Type of interested parties: T-Mobilitat customers

Type of personal data:

• Customer identification details: client code, name, surnames, date of birth, ID number, email address, postal address
• Legal representative list data: name, surnames, date of birth, ID number, email address, postal address, representation: tutor, powers, extended parental authority, connection, disconnection
• Financial data (bank accounts, credit card payment data, etc.)
• Invoice data: tax name, ID number/tax address

Purpose:

• Information on the T-mobilitat card, T-mobilitat card activation procedures, customer management, travel pass, tickets, payment of tickets loaded and reloaded, validations and the relationship between them; and attention to queries, requests, suggestions, complaints, claims and incident resolution.
• Management, marketing and distribution of travel passes for the new T-mobilitat card.
• Sale and invoicing of products (physical travel passes and tickets).
• Contractual communications to notify users of actions taken on purchased tickets.

Legitimacy:: 6.1.b) Contract execution

Data communications: data will not be shared with third parties except where legally required.

Data storage: the data will be kept as long as necessary for meeting the purpose they have been collected for as a result of the provision of the service, as well as for as long as necessary to meet any possible responsibilities that may arise for TMB, and for as long as required under any applicable legislation currently in force.

International transfers: not expected.

Security measures: TMB applies  the technical and organisational measures required for guaranteeing the security of the data processed, taking into account the level of technology, the category of the data stored and the risks, to protect personal data from accidental loss and unauthorised access, processing or disclosure.

Exercise of rights: TMB will immediately notify ATM as the data controller of any request for the exercise of rights of data access, rectification, deletion and opposition, restricted processing, portability and exemption from automated individualised decisions, at the following email address: dpd@atm.cat.

TMB also collaborates with the data controller to correct responses to these requests under the powers assumed regarding the service provided.

 Data controller: Barcelona Metropolitan Area (AMB)

Type of parties concerned: AMBici service customers

Type of personal data:

• Customer identification data: name, surname(s), date of birth, ID/NIF/NIE, email address, telephone number, postal address
• Location and travel details: origin station, destination station, coordinates x and y, start time of the journey, end timetable of the journey
• Contract and invoicing data: travel card registration, renewal of travel card, type of travel card, monthly invoice
• Incidents reported and sanctions

Purpose:

• Manage access and use of the AMBici shared bicycle service
• To deal with enquiries, requests, suggestions, complaints, claims and incident resolution.
• Selling managing and invoicing the AMBici travel cards
• Manage, market and distribute the AMBici card
• Report on the history of journeys made, as well as travel in progress
• Communicate and notify transactional messages (purchases, travel, invoices) 
• Send commercial notifications and new features of the service authorised by the customer

Legitimacy: 6.1.b) Contract performance 

Data communication: can be shared with PSM suppliers with competence in the field.

Data storage: the data will be kept as long as necessary for meeting the purpose they have been collected for as a result of the provision of the service, as well as for as long as necessary to meet any possible responsibilities that may arise for TMB, and for as long as required under any applicable legislation currently in force.

International transfers: are not foreseen.

Security measures: TMB applies  the technical and organisational measures required for guaranteeing the security of the data processed, taking into account the level of technology, the category of the data stored and the risks, to protect personal data from accidental loss and unauthorised access, processing or disclosure.

Exercise of rights: TMB will immediately notify AMB as the data controller of any request for the exercise of rights of data access, rectification, deletion and opposition, restricted processing, portability and exemption from automated individualised decisions, at the following email address: dpd@amb.cat.

TMB also collaborates with the data controller to correct responses to these requests under the powers assumed regarding the service provi