The purpose of this policy is to make you aware of how we will manage your personal data.
You can use the short cut links below to go directly to specific sections.
Days Out Guide and '2FOR1 offers when you go by train' are trade marks of ATOC Ltd. ATOC Ltd manages Days Out Guide and 2FOR1 offers on behalf of Britain's train companies.
ATOC Ltd is the data controller for all the personal data that you provide. ATOC Ltd's address is 200 Aldersgate Street, London EC1A 4HD. ATOC Ltd also trades under the name Rail Delivery Group.
Lawful basis for collecting your data
We collect personal data so that you can redeem discounts and 2FOR1 vouchers with our partners. Collecting your data is necessary for us to deliver the service to you. We will treat your data in an appropriate and lawful manner, in accordance with data protection laws.
What data we collect
When you register online with Days Out Guide we collect the following personal information from you: your name, address, email address and your local station.
When you redeem your 2FOR1 offer voucher, either downloaded from Days Out Guide or taken from the 2FOR1 offer leaflet available at National Rail stations, we may collect the following personal information from you; your name, address and email address.
We also record which offers you have redeemed and which vouchers you have downloaded from Days Out Guide.
If you choose to enter a voluntary prize draw for either market research or competitions, we will collect your personal email address, your name and postcode.
What we do with your data
We use the data to provide you with the 2FOR1 offer and/or other discounts, and to provide customer support services.
We collect and process your personal information for the purposes of sales analysis and market research. Market research may be conducted by email. If you wish to opt-out of market research and analysis, please Contact Us.
If you enter one of our prize draws for market research or competitions, the data we collect will be kept securely whilst the survey and/or competition is live. The prize draw winner(s) details (first name and county) will be made available after the closing date for 30 days to those sending an email to firstname.lastname@example.org with the subject line of the survey title. Personal details will only be used for the purpose of the prize draw and will be deleted once the winner has been confirmed.
Sharing information with other data processors
To fulfil your request for a Days Out Guide and 2FOR1 offers, we work with a number of suppliers:
- Cogworks (website and database developers)
- Indicia (customer database providers)
- Salesforce (who sends our emails)
- Intelenet (customer support)
- ndata (captures data from 2FOR1 paper vouchers)
- AWS (website hosting); and
- KCOM (manage our AWS website hosting).
If you participate in a survey with us your survey responses will be processed by our survey supplier (Survey Monkey).
If you enter one of our prize draws for market research or competitions, your entry will be held by our suppliers (Survey Monkey for research and Cogworks for competitions). Winners of competitions will be notified using the contact details provided in their entry. Where a prize is being offered by one of our partners, your contact details may be provided to them in order for them to fulfill the prize.
Keeping your data safe
We ensure that our suppliers process your data in an appropriate and lawful manner, and for Days Out Guide and 2FOR1 offers, your data stays within the EU.
If you participate in a survey with us your data will be held with our supplier (Survey Monkey) in the United States under an EU approved data protection framework.
We will store your personal details for 2 years from your last voucher download. Following this period all your personal details will be removed and your account deleted.
If you participate in a survey, your data will be anonymised for reporting purposes and then deleted after 30 days.
If you participate in a prize draw for market research or competitions, your entry will be held for 30 days and then deleted.
Subject access request
You have the right to request that we provide you a copy of the data we hold about you. This is called a 'Subject Access Request'.
Right to deletion
You have the right to request that we delete any data that we hold on you.
Right to restrict processing
You have the right to request that we restrict the processing of your information:
- if you believe the information that we hold is incorrect, or
- if you can show that our processing is unlawful, or
- if you want us to stop processing your data but you do not want us to delete it (for example, you may wish us to hold it for legal reasons, to defend a legal claim).
Right to rectification
If your details are incorrect and you have a Days Out Guide account, you can update them by logging on to My Account and updating them.
Alternatively you can contact us to request that we update your information.
Contact us about your rights
To exercise any of your data protection rights, please contact:
The Data Protection Lead
200 Aldersgate Street
London, EC1 4HD
You have the right to complain about our processing to the Information Commissioner if you believe we are not processing your data in a proper manner - see https://ico.org.uk/concerns/handling/ for more information.
Last updated 24 May 2018