
eFlow.ie Website Privacy Notice and Cookies Policy
1.1 Transport Infrastructure Ireland (“TII”) is the operational name of the National Roads Authority following the dissolution of the Railway Procurement Agency and the transfer of its functions to the National Roads Authority in accordance with the Roads Act 2015. TII’s main address is Parkgate Business Centre, Parkgate Street, Dublin 8, D08 DK10, Ireland.
1.2 TII has appointed Turas Mobility Services Ltd (“Turas”) to provide tolling and other services in relation to the operation of the eFlow barrier-free tolling system on Dublin’s M50 motorway, including the operation of the eFlow.ie website.
1.3 As Turas operates the eFlow.ie website on behalf of TII, it generally acts as a processor of any personal data which is collected and processed via this website. This means that TII is responsible for the processing of this personal data as the controller of such data.
2.1 The purpose of this website privacy notice is to inform you of the personal data relating to you that may be collected and processed when you access and use the eFlow.ie website.
2.2 Turas and TII fully respect your right to privacy and treat all data collected through this website in accordance with applicable data protection laws.
2.3 Information in relation to the processing of your personal data when you use the eFlow barrier-free tolling system on Dublin’s M50 motorway, whether as an unregistered customer or when you open and maintain a registered customer eFlow account, is separately available here.
3.1 We will collect no personally identifying information about you when you visit this website unless you choose to provide that information to us. The information we collect depends on options you select when visiting this website.
3.2 Turas may collect and process some or all of the following personal data in relation to you on behalf of TII:
Personal Data Category | Description |
Website Data |
|
Payment data |
|
Communications data | Whenever you use our WebChat, the General Query Form, the Appeal a Penalty Form, the Query a Journey Form or the Query a Payment Form to communicate with us or participate in a customer survey via this website you may choose to provide us with your personal information, including but not limited to the following:
|
Registered account data (i.e. toll road users with a registered eFlow account) |
|
Unregistered account sweep data |
|
PIN data |
|
4.1 Any personal data relating to you which we process is collected directly from you via this website if you choose to provide that information to us.
5.1 The personal data described above is processed by us and by third party service providers acting on our behalf. The Legal bases on which we collect, process and transfer your personal data for these purposes are:
Where such processing is necessary to carry out tasks in the public interest and/or in the exercise of official authority vested in TII (“Public Interest/Official Authority”);
Where such processing is necessary for the performance of a contract with you or where it is necessary to take steps at your request prior to entering into a contract with you (“Contract”); and
Your consent (“Consent”), where this is the case you will be asked to give a positive indication of that consent.
5.2 Purpose of processing activities and associated legal basis
We process personal data in order to:
Purposes | Categories of Personal Data | Legal Bases |
Make this website more useful to visitors, to learn about the number of visitors to this website and the type of technology that our visitors use | Website Data Please note that we do not track or record information about individuals on their visits. We may compile and report aggregate statistics about our users in terms of numbers, traffic patterns and related site information. Any such statistics will not include any personal identifying information. | Public Interest/Official Authority pursuant to the Roads Act 1993 (as amended) |
To respond to queries and complaints via WebChat, the General Query Form, the Appeal a Penalty Form, the Query a Journey Form or the Query a Payment Form, or any other contact form – information collected in this manner is used solely for dealing with your query. Your personal data is stored securely and kept for no longer than necessary. | Communications Data
| Public Interest/Official Authority pursuant to Sections 17(1), 17(2) and 19(3) of the Roads Act 1993 (as amended) |
Registering and managing your eFlow account | Registered Account Data | Contract |
Processing your payment of a toll or penalty | Payment Data | Public Interest/Official Authority, pursuant to section 59(1) of the Roads Act 1993 (as amended) and Bye-law 5 of the Bye-Laws for the M50 (between Junctions 6 and 7) (the “M50 Bye-Laws”) Contract (in relation to registered eFlow customers)
|
Moving your unpaid tolls to your registered account | Registered Account Data Unregistered account sweep data | Public Interest/Official Authority, pursuant to section 59(1) of the Roads Act 1993 (as amended) and Bye-law 5 of the Bye-Laws for the M50 (between Junctions 6 and 7) (the “M50 Bye-Laws”) Consent
|
Sending you a PIN number if you do not have a registered eFlow account and you request a PIN number | PIN data | Public Interest/Official Authority, pursuant to the Roads Act 1993 (as amended) |
To undertake customer satisfaction surveys | Communications Data | Public Interest/Official Authority, pursuant to the Roads Act 1993 (as amended) – completing surveys is entirely voluntary |
Sending notifications to you if you do not have a registered eFlow account | Communications Data | Consent |
5.3 We do not intentionally collect or process special categories of personal data relating to website users. If you provide us with special category personal data, for example in a complaint or query sent via webchat, the legal bases on which we may collect, process and transfer special categories of data relating to you (e.g. data relating to health) are that:
this is necessary for reasons of substantial public interest; or
you have given your explicit consent to such processing.
For more details on the purposes for which we process your personal data to provide you with eFlow services generally, please see our main eFlow Data Protection Notice.
6.1 We may disclose your personal data to other organisations in connection with the above purposes, in the following circumstances:
We may share personal data with our agents, contractors and service providers who assist us with the operation of aspects of our services and functions, such as our payment card processor, banking and printing/postal correspondence contractors, the eFlow enforcement service provider(s), Foreign Vehicle Licensing Authorities and law enforcement agencies.
Where TII appoints a new operator of eFlow, we may share personal data with this new operator in order to facilitate successful transition to the new operator and ensure continuity of service for eFlow customers during any transition period.
Where we are under a duty to disclose or share personal data in order to comply with any legal obligation, or to protect the rights, property or safety of eFlow, our customers, or others. We may also share information about the way you conduct your account with credit reference agencies.
Where required or permitted by law, we may share your personal data with other public authorities and bodies, such as the Gardaí or other law enforcement authorities for the purposes of the prevention, investigation or detection of crime.
In connection with the provision of interoperable toll transactions in Ireland, we may disclose your personal data to a relevant compatible operator.
We may share toll passage data with key stakeholders, e.g. the Department of Transport, for the purposes of research and statistical analysis.
For the purpose of operating competitions on behalf of TII, we may disclose, subject to your consent, your name, email address and marketing preferences provided to us by you.
Where we are otherwise permitted by law.
For more details on the recipients of your personal data in connection with eFlow services generally, please see main eFlow Data Protection Notice.
7.1 This website uses cookies.
7.2 For more information about the way this website uses cookies and your options for accepting and rejecting cookies, please see our Cookies Policy set out after this Privacy Notice below or by clicking here.
8.1 We may transfer your personal data outside the European Economic Area, including to a jurisdiction which is not recognised by the European Commission as providing an equivalent level of protection for personal data as is provided for in the European Union, such as India and the United States of America. If and to the extent that we do so, we will ensure that appropriate measures are in place to comply with its obligations under applicable law governing such transfers, which may include entering into a contract governing the transfer which contains the ‘standard contractual clauses’ approved for this purpose by the European Commission. Currently, these standard contractual clauses are the basis on which eFlow ensures that transfers can be made in a manner which is compliant with applicable data protection law.
8.2 The European Commission has the power to determine, on the basis of Article 45 of Regulation (EU) 2016/679 (the GDPR) whether a country outside the EU offers an adequate level of data protection. In this regard, eFlow relies on the adequacy decisions in respect of transfers to Innocraft Ltd. in New Zealand and W5 Marketing Intelligence Ltd.
8.3 Further details of the measures that have been taken in this regard are available from the eFlow Data Protection Officer using the contact details set out below.
9.1 For website security purposes and to ensure that this website remains available to all users, our computer system employs software programs to monitor network traffic in order to identify unauthorised attempts to upload or change information or otherwise cause damage. Unauthorised attempts to upload information or change information on this website are strictly prohibited and may be punishable by law.
9.2 Your personal data which you provide to us will be held on secure servers hosted by Turas. The nature of the internet is such that we cannot guarantee the security of any information you transmit to us online. However, we have adopted appropriate technical and organisational security measures to protect your information from unauthorised access and against unlawful processing, accidental loss, destruction or damage. We will also ensure that our agents or third-party service providers who process your data are required to keep your data safe and secure.
10.1 You have the following rights, in certain circumstances, in relation to your personal data:
- Right to access the data – You have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data.
- Right to rectification – You have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete.
- Right to erasure – You have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten.
- Right to restriction of processing – You have the right to request that we no longer process your personal data for particular purposes.
- Right to object to the processing of your personal data – You have the right to object to our processing of your personal data for particular purposes.
- Right to data portability – You have the right to receive your personal data, which you provided to us, in a structured, commonly used machine readable format or to require us to transmit that data to another controller.
- Right to withdraw your consent – where our processing of your personal data is based on you having provided consent, you have the right to withdraw your consent to the processing at any time.
10.2 Please note that these rights are not absolute and are subject to certain restrictions and exemptions. For example, the right to erasure of personal data will not apply where we have a legitimate reason to continue to hold such data and we may continue to process your personal data, despite an objection by you, where we have compelling legitimate grounds for the processing which override your interests, rights and freedoms.
10.3 In order to exercise any of the rights set out above, please contact us using the contact details below.
11.1 We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements and if relevant to deal with any claim or dispute that might arise between you and TII.
11.2 Our retention periods differ depending on the type of categories of personal data held. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
12.1 From time to time we may decide to change our privacy notice, but any changes will be posted on this page to keep you up to date on how we collect, use and disclose information. If at any time we decide to use personal data in a manner significantly different from that stated in this privacy notice or otherwise disclosed to you at the time it was collected, we will notify you, and you will have the choice as to whether or not we use your information in the new manner.
13.1 If you have any questions or complaints about our use of your personal data, please contact the eFlow Data Protection Officer using the contact details below. Alternatively, TII’s Data Protection Officer may be contacted as follows:
by post: Data Protection Officer, Transport Infrastructure Ireland, Parkgate Business Centre, Parkgate Street, Dublin 8, D08 DK10
by phone: +353 1 646 3600
by email: dataprotection@tii.ie
13.2 Further information about data protection can be found on the Data Protection Commission’s website: www.dataprotection.ie.
13.3 You also have the right to lodge a complaint with the Data Protection Commission if you are not happy with the way we have used your information or addressed your rights. Details of how to lodge a complaint can be found on the Data Protection Commission’s website.
You can contact eFlow in the following ways:
by post: Data Protection Officer, Turas Mobility Services Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin, D02 K580
by email: dataprotection@eflow.ie
by phone: 0818 50 10 50 (International: +353 1 4610122)
by using the Webchat with the eFlow team or the General Query Form on the eFlow website
Updated: 20 June 2025