Dig in prize draw

This privacy notice applies to you if you have taken part in our University Student Prize Draw or submitted any personal data to us as a result of this prize draw.

This privacy notice explains:

• who is the controller of your personal data;
• what personal data we collect about you;
• what we do with your personal data and on what is the legal basis;
• your rights in respect of your personal data; and
• what to do if you have any questions or complaints about our use of your personal data.

We take your privacy very seriously and are committed to abiding by the Data Protection Laws which protect your privacy.

It is your responsibility to read this privacy as it explains how we will process your personal data for the prize draw. You can also view our privacy notice which details how we process your personal data as a customer and passenger of National Express by clicking here.

National Express Limited, trading as “National Express”, is the controller of your personal data. National Express, will process your personal data fairly, lawfully and in a transparent manner we will ensure your personal data.

By taking part in this prize draw we will collect your personal data from you when you visit nationalexpress.com/dig-in webpage and enter your valid ‘.ac.uk’ email address. Shortly after entering your email address, and when you supply the personal data below, you will be sent an email confirming whether you have won one of the prizes. The personal data need to collect for this prize draw entry is:

• your first and surname;
• your.ac.uk email address; and
• County in which you live in.
• any other personal data that you provide to us when you visit our website, use our apps, or when you communicate with us.

To comply with the Prize Draw Terms and Conditions, your Prize Draw entry, county and surname must either be published or made available upon written request. We may be required to supply this data to the Advertising Standards Authority upon request. This data indicates that a valid award took place. To comply with our Prize Draw obligation, we will have to share this data of each prize draw winner. If you object to any of your personal data, (e.g., surname, county of residence and winning entry) being shared you can contact prizedraw@nationalexpress.com and/or data.protection@nationalexpress.com. Please reference your communication as “Student Prize Draw”.

We do ask you if you want to share your marketing preferences, (e.g., opt-in or out of marketing). This is not a condition of the Prize Draw. You can still enter the Prize Draw and opt-out of marketing.

In addition, each time you visit our Website we may automatically collect the following information:

• Technical data, including:
• IP address;
• browser type and version;
• time zone setting and location; and
• operating system and platform;

Information about your time on the site, including:

• the full Uniform Resource Locators (URLs) clickstream to, through and from our website (including date and time); and
• time on page, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page.

We use your personal data for the following purposes and describe below the legal basis on which we process your personal data:

By submitting your prize-drawn entry to us, and therefore entering our prize draw you are providing National Express your consent to process your personal data. You may withdraw that consent at any time by contacting us using the details at the bottom of this privacy notice.

Where you have provided consent for us to send you marketing communications, you may withdraw that consent at any time, either by updating your marketing preferences in your account with us (if you have one) or by clicking on the “unsubscribe” link in any marketing communications we send you.

Where you have consented to the use of cookies, you may withdraw that consent at any time by changing your cookie settings as explained in our cookie policy.

We may share your personal data with:

• other National Express Group companies;
• our suppliers, sub-contractors, business partners and our brand ambassadors who help us to deliver the prize draw and to provide our products and services to you;
• suppliers who provide us with analytics, customer insights and market research
• other business partners in connection with the provision of their products and services to you;
• our legal and professional advisors;
• government bodies and regulatory authorities; and
• analytics and search engine providers that assist us in the improvement and optimisation of our websites.

We do not accept any responsibility or liability for these notices or policies or the third parties’ handling of your personal data. Please check the relevant third party’s privacy notice before you submit any personal data to their respective websites.

There may be occasions where it is necessary to transfer your personal data to a country outside of the United Kingdom (“UK”). It is possible that the country concerned may not be deemed to provide a similar level of protection for individuals’ rights in relation to their personal data as in the UK.

Where we transfer your personal data to other National Express Group companies and/or third parties who process your personal data on our behalf in countries outside the UK, we ensure a similar degree of protection is afforded to it by implementing one of the following safeguards:

• we transfer to a country that has been deemed to provide an adequate level of protection for personal data; or
• where the country has not been deemed to provide an adequate level of protection for personal data, we will have entered into contracts approved for use in the UK which give personal data the same protection as it has in the UK.

Please contact the National Express UK Data Protection Officer if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

We will process the personal data for as long as the prize draw is open and for so long thereafter as is necessary for us to manage the outcome of the prize draw.

Typically, we will retain information about you if you are a winner of the prize draw for up to 18 months after the close of the prize draw or if you are an unsuccessful prize draw entrant, for up to 6 months after the close of the prize draw.

Where we process data with your consent, for example, to send you marketing information, we will process such personal data until you withdraw that consent. Please bear in mind that it may take a short time to process any withdrawal of your consent. We aim to do this within 72 hours of receipt of your request, although you may still receive emails that are already in process around the time of your withdrawal

We may also need to retain information about you for longer where any complaints are made or claims arise in relation to the prize draw, or your participation in the prize draw, or otherwise where we are required by law, regulation or the rules or orders of courts to retain information for longer.

We may also retain your personal data for longer if we cannot delete it for legal, regulatory or technical reasons.

You have a number of rights under Data Protection Laws in relation to your personal data. These include the right, subject to exceptions, to:

• request access your personal data;
• request rectification or erasure of your personal data;
• right to object to the automated processing of oyur personal data;
• request restrictions on the processing of your personal data; and
• object to our processing of your personal data.

You also have the right in some circumstances to receive a copy of your personal data in a portable format. This right is limited to personal data you have provided to us and is processed on the basis of your contract with us and/or your consent.

If you wish to exercise any of these rights and/or request a portable copy of the data that you have provided and is processed on these bases, please contact the National Express UK Data Protection Officer.

You should be aware that any images that are shared with us on our social media channels, and subsequently re-shared by us, may not be able to be easily removed or deleted. National Express will make every effort to delete them from our social media pages but you should refer to the relevant privacy notice of each social media provider for how to request deletion from their systems.

If you have any questions or complaints about how we process your personal data, or otherwise about the matters set out in this privacy notice, please contact the National Express UK Data Protection Officer at:

Address: Data Protection Officer (DPO), National Express, National Express House, Birmingham Coach Station, Mill Lane, Digbeth, Birmingham B5 6DD

or

Email address: data.protection@nationalexpress.com

The UK Data Protection Law requires you to first complain to the Data Controller's DPO.

After raising your complaint with the Data Controller, you have the right to complain to the UK Information Commissioner's Office about how we use your personal data. You can contact them on their helpline: 0303 123 1113 or website at https://ico.org.uk/.

If you are in the EEA, our subsidiary National Express Bus & Coach Services Limited is our representative in the EEA and can be contacted at eurep.nx@nationalexpress.com.