TRL | Privacy Notice

At TRL we are here to make transport better for everyone. To do that most effectively we need to understand who we are serving and working with and so we will sometimes ask you about yourself, and, with your permission, use that information to guide our work. This privacy notice is a piece of legalese which sets that out in detail (and so, in case of conflict or confusion, the legalese is the precise statement which takes precedence) but this summary should help you understand what’s going on.

If you visit our websites there is some information about your computer that is automatically recorded, for example, to remember your site preferences.
If you download something we will ask you to tell us who you are so we know who is using our research.
If you buy something from us we need to record some information so we can support you properly.
If you participate in a research project we need to ensure we have statistically valid information to understand some things about who you are.
In all cases you remain in control of your information: we will protect it from misuse, use it responsibly and only for the purposes for which we collected it and will delete it when it is no longer necessary. If you want to know what information we are holding on you, or want your information deleted then ask us.

We are a social purpose company: we don’t have shareholders or investors who make us exploit your data for money. We thank you for your trust in us and will continue to try to earn it.
Now for the legal bit:

TRL Privacy Notice v7

Effective Date: 28th April 2022

TRL Limited and its affiliates (“TRL,” “we,” or “us”) is committed to protecting your information.

This Notice applies to TRL and any entities doing business under the TRL name worldwide, including, but not limited to, TRL Software Limited, TRL International Limited, SMLL Limited, which collect, process and/or store information.

This Notice explains how we collect and use information that you provide via our websites or when you register for our events or apply to participate in a trial, or in the normal course of business when you ask us to perform a service on your behalf, or supply you with a product.

Please read the following carefully before you give us any information.

If you have any questions about our privacy practices or questions, requests or concerns regarding your information, please contact us via email to enquiries@trl.co.uk

Unless otherwise stated in a separate privacy notice or agreement which you have entered into with TRL, for the purpose of UK data protection laws, the data controller is TRL Limited (or such other TRL affiliate company as the case may be) of Crowthorne House, Nine Mile Ride, Wokingham, Berkshire, RG40 3GA.

Information we collect

We collect information about you or the devices you use from the following sources:

When you view our websites or mobile applications;
When you provide information to us when requesting information from us;
When your purchase a product from us or register your ownership of a product with us;
When you download an evaluation product from us;
When you are establishing or maintaining an account or otherwise receiving a service from us;
When you register to attend or while attending a TRL event (Please note that at our training courses, events presentations, panel discussions and other activities can be recorded);

When you register to participate in a voluntary trial organised by TRL.

This information may be collected when you are filling in forms on our website, giving us your business card, entering a survey, competition or promotion organised by us, or when generally corresponding with us by phone, email, letter or otherwise.

In addition, we collect information about you:

When we share information within the TRL corporate family in the ordinary course of business;
When we receive referrals from customers and others;
When we collect or receive data from third parties, including, in some cases, publicly available directories, as part of our marketing and prospecting activities.
We may also receive information about you from third parties when we are acting for a client and we are required to obtain information about you for example because you are a witness in a litigation case and we are instructed as an expert witness.
We may also collect contact details, insurance and vehicle details in the event a TRL vehicle is involved in an incident.

We may also receive cctv footage for the purposes of research into accident prevention and for the improvement of transport safety.

TRL uses vehicle dashcams

To assist in the protection and safety of persons and property, prevention or detection of criminal offences and defence of legal claims
To assist in understanding road and environment conditions in research involving vehicle trials.

Types of Information

From the sources listed above, we collect the following types of information:

Name, business or personal email address, phone number, physical address, and in addition username when you subscribe to our products;
Job title and professional details;
Background information required to apply for a job;
Profile photograph;
LinkedIn profile data;
Billing details;
Information relevant to event attendance, such as meal preferences or information submitted via our websites or other channels;
Titles of articles, publications and reports downloaded from our website;
Types of products and services supplied by us to you in fulfilment of a contract between us.

TRL vehicle dashcams may record your image for safety research and prevention of crime purposes.

Information collected automatically

When you use our websites, or subscribe to or otherwise use any of our products, we may collect information about you (such as the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform).

‘Special category’ data

During the course of providing our services, we may collect personal information about you (or a person you are representing) relating to age, gender, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, criminal convictions, or certain types of genetic or biometric data (such information is known as ‘special category’ data). This is most likely to occur, for example, if you are voluntarily participating in a trial, or the information is necessary in order for us to perform services that you or your agent have requested from us.

Results of trial data are typically anonymised unless a separate privacy notice applies to a particular research trial which states otherwise or you have otherwise provided your express consent.

We will only collect, store or use ‘special category’ data if;

We have your explicit consent;
We believe that we need to use that data to protect your vital interests where you are not able to provide us with your explicit consent, or
You have previously made that data public knowledge, or
It is necessary to protect your vital interests, or the vital interests of another person, or
We need to use that data to establish, exercise or defend legal claims.

Use of cookies

Our websites use cookies and other tracking technologies to distinguish you from other users of our websites. This helps us to provide you with a good experience when you browse our websites and also allows us to improve our websites. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer, if you agree. Cookies contain information that is transferred to your computer's hard drive.

We use the following cookies:

(i) Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
(ii) Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
(iii) Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies and local storage objects, over which we have no control. These cookies and local storage objects are likely to be analytical/performance cookies or targeting cookies.

You can block cookies by activating the setting on your browser that allows you to refuse all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our websites.
All cookies will expire after a defined period of time up to a maximum of two years.

The information automatically collected by cookies and other tracking technologies may be associated with any personal data you have provided.

How we use information we collect

We use, share and disclose your information as follows:

1. Necessary for the performance of a contract and to comply with our legal obligations

To perform a service on behalf of a client who gives us the data;
To provide you with access to our product(s) (subject to you having a current subscription);
To confirm your identity;
To process payments.

2. For our legitimate interests in conducting our business, such as:

To fulfil your requests;
To deliver a contract to you or your agent;
To respond to your questions, concerns, or customer service enquiries;
To otherwise communicate with you about your account or project;
To conduct customer satisfaction surveys;
To carry out certain marketing activities such as an invitation to renew a product licence or ask about improvements to products or services we provide;
To conduct research and analysis, including surveys;
To enforce the legal terms that govern our websites and online services;
To create aggregated or anonymized data, which we may use and disclose without restriction;
To ensure you receive the best experience possible when accessing and using our website;
To make suggestions and recommendations to you and other users of our sites about goods or services that interests you or them;
To administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes.
To undertake research and provide our clients with evidence-based information to enable future innovation in transport. Core areas include transport safety; vehicle engineering & simulation; investigations & major incident forensics; human factors & behavioural science; intelligent transport systems; infrastructure asset management; and sustainability & climate change.

3. On the basis of consent, such as:

To send you information, including marketing communications;
To personalise the content you see on our websites , across the Internet, and elsewhere;
To distribute newsletters, reports, publications and alerts to you;
To publish or share the attendee lists for our events;
To provide relevant information (for hospitality and safety purposes) to hotels and other facilities involving in hosting the event attendees;
To participate in a trial;
To process a job application (a separate Applicant Privacy Notice may also apply).

For any of the purposes above, we share information with other members of our corporate family. We also share your information with third-party service providers that perform services on our behalf.

We will disclose your personal information to third parties:

In the event that we enter into negotiations to sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets;
If TRL or substantially all of its assets are acquired by a third party, in which case personal data held by it about our clients will be one of the transferred assets; or
If we are under a duty to disclose or share your personal data in order to comply with any auditing, and corporate governance functions or legal obligation, or in order to enforce or apply any contract between you or us, or our website terms of use, or to protect the rights, property, or safety of TRL, our clients, or others.

Some features of our websites, and online services allow you to make data public or engage in other sharing. For example, registration on some of our websites will create a public profile (or a profile visible to other registered users), which includes information drawn from social networking accounts that you associate with the profile, such as name, photo and biography, as well as other information that you add.

If you post content or otherwise participate in discussion forums or other social areas of our websites, your participation (including the content you post, your name, and a link to your profile) may be shared across our websites and in other public or private areas of the internet.

Our websites do not collect personal data about your online activities over time and across third party websites or online services. Therefore, “do not track” signals transmitted from web browsers do not apply to our websites, and we do not alter any of our data collection and use practices upon receipt of such a signal.

Social networking

Our websites may allow you to sign into and associate your social network accounts including, but not limited to, Twitter, LinkedIn, Facebook, and YouTube, with TRL.

TRL may also use its social network accounts to advise that TRL is seeking potential research trial participants. The specific participant filter surveys will ask for your consent to process your personal data for the purposes described in the surveys. A separate privacy notice may also apply to the particular research trial.

By associating your social network account with TRL or logging in to a TRL account using your social network account credentials, in accordance with the particular social network’s terms of use and TRL’s legitimate business interests, you give us permission to access information that you have made available in your public profile for that social network account. The information available in your public profile varies based on the social network and your settings, but may include your email address, real name, profile picture, gender, and location. We use the information we receive from your social network account in accordance with the social network’s terms of use and this Notice. Please refer to the privacy settings in your social network account for information about what data is shared with TRL and other connected applications and to manage the data that is shared through your account, including information about your activities using our websites.

If you would like to disconnect a social media account from us, refer to the settings of that social network account and its provider.

Where we store your personal data

Information you provide to us is stored on our secure servers in the United Kingdom, or on secure cloud-based servers in a country within the European Economic Area that the European Commission has designated as having adequate levels of data protection. When we use cloud and web based applications and solutions, we may transfer information to the US subject to the applicable standard contractual clauses or such equivalent arrangements being in place. An example of data transfer to the US is TRL’s use of Mailchimp.

How we keep your information secure

We have implemented administrative, technical, and physical security measures to help prevent unauthorised access to your information. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted via our websites; any transmission is at your own risk.

Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. We make efforts to restrict access to information to only those employees, contractors, and agents who need such access in order to operate, develop, improve, or deliver our programs, products, and services.

Please note that you are responsible for maintaining the secrecy of your credentials used to access any account or service with TRL, and you must report suspected unauthorized activity to us. You are responsible for activity conducted with your credentials.
Some third parties’ embedded plugins or other automated technology on our websites, such as cookies or social sharing buttons, allow their operators to learn that you have visited or interacted with our websites, and they combine this information with other, identifiable information they have collected about your visits to other websites or online services. These third parties handle this information, and other information they directly collect through their content and plugins, pursuant to their own privacy notices.

How long we store your data

We generally retain information for so long as it is relevant to the purposes above:

We will use/store your data for as long as it is necessary for the performance of the contract between you and us;
We will use/store your data for as long as it is necessary for us to comply with our legal obligations;
When it is necessary for our legitimate business interests we will use/store your data until you ask us to stop or there is no longer a legitimate reason to hold the data. However, if we can demonstrate that the reason why we are using/storing your data overrides your interests, rights and freedoms, then we will continue to use and store your data for as long as it is necessary for the performance of the contract between you and us (or, if earlier, when we no longer have a legitimate interest in using/storing your data);
When you have given us your specific, informed and unambiguous consent we will use/store your data until you ask us to stop.

We may retain your information in copies made for backup and business continuity purposes for additional time.

Automated decision-making

We do not use automated decision-making processes.

Marketing communications

We will respect your wishes not to receive marketing communications. You can change your marketing preferences by contacting us at the email or addresses at the top of this Notice. If you gave us your email address to receive marketing communications, you can opt out at any time by using the unsubscribe links or instructions included at the bottom of our emails. Please note that we will continue to send you service-related communications regardless of any opt-out request. We will not sell or share your information or information with third parties for their own promotional or marketing purposes unless you give us consent to do so and where permitted by applicable law.

Access to your information (Data Subject Rights)

You have the following rights regarding your personal data:

Rights	What does this mean?
1. Right to be informed	You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we are providing you with the information in this Privacy Notice.
2. Right of access	You have the right to obtain access to your personal data (if we are processing it) and certain other information (similar to that provided in this Privacy Notice). This is so you are aware and can check that we are using your personal data in accordance with data protection law.
3. Right to rectification	You are entitled to have your personal data corrected if it is inaccurate or incomplete.
4. Right to erasure	This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
5. Right to restrict processing	You have the right to ‘block’ or suppress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further. We keep lists of people who have asked for further use of their personal data to be ‘blocked’ to make sure the restriction is respected in future.
6. Right to data portability	You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.
7. Right to object to processing	You have the right to object to us processing your personal data for our legitimate business interests or for direct marketing purposes (including in each case any related profiling).
8. Right to withdraw consent to processing	If you have given your consent to us to process your personal data for a particular purpose (for example, direct marketing), you have the right to withdraw your consent at any time (although if you do so, it does not mean that any processing of your personal data up to that point is unlawful).
9. Right to make a complaint to the data protection authorities	You have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data or believe our processing of your personal data does not comply with data protection law.

If you wish to exercise any of your legal rights, please contact our Data Protection Officer, by writing to the address at the top of this Notice or by emailing us at enquiries@trl.co.uk

In situations where we process your information on behalf of our clients, we may refer the request to the relevant client and cooperate with their handling of the request, subject to any special contractual arrangement with that client.

In some cases, you may directly access your online profiles and other personal details and amend, update, add, or delete information yourself by logging into the relevant portions of our websites.

To access, correct, or raise inquiries about your information in our possession, please email us at enquiries@trl.co.uk
We may require you to prove your identity with approved identification before fulfilling your request.

Other Websites

To provide increased value to you, we provide links to other websites or resources that are not part of the products, programs, or services run by TRL. We do not control these websites or their privacy practices, and any information you provide to these sites is subject to the privacy notices of those sites and not this Notice.

Changes to our Notice

Any changes we make to our Notice in the future will be posted on our website and, where appropriate, notified to you by post, email or via social media. Please check our website frequently to see any updates or changes to our Notice.

Contact

Questions, comments and requests regarding this Notice are welcomed and should be addressed to our Data Protection Officer, by writing to the address at the top of this Notice, or by emailing us at enquiries@trl.co.uk.

Privacy Notice