Recognising Best Practice in Sustainable School Travel
Modeshift is committed to preserving the privacy of all users of the Modeshift STARS system.
Who is the Data Controller?
Modeshift is the Data Controller, Modeshift STARS is owned and operated by Modeshift. If you have a query regarding Modeshift STARS you can contact us via email at the following email address: firstname.lastname@example.org.
Who are the Data Processors?
All registrants in the Modeshift STARS system are Data Processors as they will submit, control and handle data for sites relating to them. There are two types of registrant in the STARS system: Organisation – including Local Authority, Corporate and Consultancy license holders – and Site registrants.
Organisation level registrants may have access to single or multiple (Regional Administrator) local authorities and are the Data Processers with access to data within the authorities that they have permission to access. This includes all personal data regarding registrants such as login email addresses and school data for the schools and other licensed sites within their authorities. These Data Processors will have access to individual and collaborative site data logged in the Modeshift STARS system. In some instances, 3rd party organisations/consultancies may be commissioned by a local authority to deliver services on their behalf. Modeshift STARS in this instance may authorise local authority level access rights to 3rd party organisations under the instruction of a local authority. Please contact your local authority for details regarding how they process and handle your data with 3rd party organisations as this will be subject to their contractual obligations and data protection policies.
Site level registrants may be anyone who has permission from the site and Organisation to use the STARS system. They will only have access to data that is relevant to the site/sites that they have been given approval to access.
What Personal Data do we Collect?
We collect the following personal data directly:
Place of work such as Local Authority, Workplace or School
We collect the following personal data to tailor and measure our service through the use of monitoring using tools such as Google Analytics:
• IP Address
• User Behaviour
• Visitor time
• Operating system
• User Acquisition
• User Referrals
Additional Personal Data we may indirectly collect in Modeshift STARS:
Our system allows registrants to log information for the purpose of developing a Travel Plan and gaining Modeshift STARS accreditation. Registrants may record additional personal data such as:
• Class names
• Job Roles
• Email Addresses
• Post code data
• Route Mapping
• Journey planning
Personal data may be uploaded by users as part of evidence of action plan delivery, this can comprise of images and documentation.
For What Purposes are Personal Data Being Process and What is the Legal Basis for this?
Modeshift STARS Website
All personal information will be stored securely and will not be shared, sold or rented to any other organisations or individuals without your permission unless required to do so by law enforcement agencies.
We hold data that you submit to the Modeshift STARS system as part of the Terms and Conditions of Modeshift STARS. This is so users can access the system, generate a Travel Plan and work towards applying for Modeshift STARS accreditation. This data is used to survey travel behaviours locally, regionally and nationally.
You can opt in to be contacted with additional marketing and communications to support system usage, share best practice and provide users with news from Modeshift STARS and wider Modeshift Partner/Supporter organisations. We will not pass your data to any organisations. You can unsubscribe from these additional communications at any time using the opt out functionality at the bottom of our emails or contacting email@example.com.
Modeshift STARS Events
A Modeshift STARS Event is deemed to be any event organised for STARS system promotion, support or training or such instances as the Modeshift STARS Regional and National Awards.
We may also request for photo consent for our events using our specific photo consent form.
Who is the Personal Data going to be shared with?
Modeshift, Excelpoint Ltd, and Framework Digital Ltd help us deliver and operate our services. In order to do so data may be shared with these parties.
There are three levels of access permissions to Modeshift STARS, all levels below National access are identified as Data Processors and Modeshift STARS is the Data Controller with National Access to the STARS system.
Site Level Access – access to one or more school, workplace or residential sites in Modeshift STARS
• Site level users will be able to see data relating to that site(s).
Organisation Level Access (Local Authority, Corporate, Consultancy license types) – access to numerous sites and data generated for those sites.
• This level of access allows local authorities or 3rd parties delivering on behalf of local authorities to access school, workplace and residential site data across an authority area. This level of access handles local Modeshift STARS Administration such as the authorisation of the user accounts for sites within the local authority.
• Regional Administrators have the same access rights as a Local Authority Administrator but for multiple local authorities and the schools within those local authorities.
Modeshift STARS National Access – access to all levels of the system and all school sites nationally. This type of access is only granted to the employees and Partners/Supporters of Modeshift that are managing the STARS scheme nationally.
Modeshift STARS Export Functionality – Exporting a Travel Plan
Modeshift STARS registrants can export Travel Plans relating to a given site. All users have export capability for the sites they have access too. The Travel Plan holds data submitted by the users (Data Processors) relating to that site. Once exported out of the Modeshift STARS system that document becomes subject to the data protection policies of the organisation that performed the export.
Anonymous data may be included in project reports which may be made available to the public.
Mailchimp – Use of 3rd party email management databases
We may use email management platforms to coordinate communications for additional marketing communications. We use a 3rd party called Mailchimp to coordinate and manage our mailing lists and email delivery. We may share your data with Mailchimp in order for us to deliver our email communications. We may store the following information on the Mailchimp Database platform:
• Your Email Address
• Place of work
• Local Authority
Only Modeshift employees and Partners/Supporters of Modeshift that are managing the STARS scheme will have access to this information and individuals can personally manage their email subscription via this platform.
Mailchimp also collects analytics regarding open and click through rates and geographical data such as location. Mailchimp may also record IP addresses and other user behaviour within the emails we send.
Will my data be transferred out of the EU and if so will it be safe?
How long is my data going to be held?
Personal data will only be held for as long as necessary. Modeshift STARS Initiatives with accompanying evidence are automatically archived at the point of expiry which is 3 years and 1 day after the completion date of the initiative.
Inactive user accounts will be automatically deactivated and delete after 2 years of inactivity on that account.
Will I be subject to automatic decision making?
Modeshift STARS does not use automated decision making in relation to personal data.
What rights do I have in respect of the personal data you hold about me?
You can request a record of all the personal data that Modeshift STARS holds on you. Requests can be made with your local administrator or the central Modeshift STARS team by email firstname.lastname@example.org
What happens if I don’t provide my information? (where personal data is obtained from the individual)
In order to be able to access the Modeshift STARS system you need to provide personal information such as your name, email address, place of work so we can enable system access and verify who you are. Only approved registrants can access the STARS system.
Who can I complain to if I feel my rights are being violated?
If you are concerned that your rights have been violated, you can complain to Modeshift by emailing email@example.com. Or you can contact the Information Commissioner’s Office www.ico.org.uk.
I didn’t give you my personal data, so what is the source and what type of personal data are you processing?
Site and Local Authority level users may log and record data on your behalf to use the Modeshift STARS System. We will only use this data for recording and monitoring purposes. Personal information such as this may be submitted to generate and develop a Modeshift STARS Travel Plan. This data is subject to our data protection policies and will not be passed on.
Modeshift STARS may review such data entered by the data processors in order to quality assure our services. This may include instances such as verifying that information such as “evidence” logged in the Modeshift STARS database fulfils the Modeshift STARS Accreditation criteria in order for a site to gain accreditation.
Any changes to our privacy and data protection policies in the future will be posted to the online application and, where appropriate, through e-mail notification
When you use our website, a text file called a ‘cookie’ is placed in a directory on your computer. This file is passed through to our web server. By accepting our Cookie Notice upon arriving on our site you are consenting to cookies being place on your site.
Cookies allow websites to remember your preferences, Cookies can be sessional (they only last for the time you are on the website) or persistent (they last for a certain length of time)
The cookies that we use cannot harm your computer in any way or give away any of your personal information. We user cookies to monitor website user behaviour through the use of Google Analytics, including how you found our website, the pages you visit, the time spent on those pages and your interaction with our website. IP Addresses are also collected as part of Google Analytics. Facebook Pixel. We may use a Facebook Pixel to monitor site visitors site usage, with Facebook integration this is used to track the flow of traffic from Facebook and visitors interactions with our site. We may also use this information to tailor our services to site visitors and advertising.
Further information can be found for cookie settings on different browsers can be found at
Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies#ie=ie-11
Google Chrome: https://support.google.com/chrome/answer/95647?hl=en-GB