eFlow.ie Website Privacy Notice and Cookies Policy

1.1 Transport Infrastructure Ireland (“TII”) is the operational name of the National Roads Authority following the dissolution of the Railway Procurement Agency and the transfer of its functions to the National Roads Authority in accordance with the Roads Act 2015. TII’s main address is Parkgate Business Centre, Parkgate Street, Dublin 8, D08 DK10, Ireland. 

1.2 TII has appointed Turas Mobility Services Ltd (“Turas”) to provide tolling and other services in relation to the operation of the eFlow barrier-free tolling system on Dublin’s M50 motorway, including the operation of the eFlow.ie website.  

1.3 As Turas operates the eFlow.ie website on behalf of TII, it generally acts as a processor of any personal data which is collected and processed via this website.  This means that TII is responsible for the processing of this personal data as the controller of such data.   

2.1 The purpose of this website privacy notice is to inform you of the personal data relating to you that may be collected and processed when you access and use the eFlow.ie website. 

2.2 Turas and TII fully respect your right to privacy and treat all data collected through this website in accordance with applicable data protection laws. 

2.3 Information in relation to the processing of your personal data when you use the eFlow barrier-free tolling system on Dublin’s M50 motorway, whether as an unregistered customer or when you open and maintain a registered customer eFlow account, is separately available here. 

3.1 We will collect no personally identifying information about you when you visit this website unless you choose to provide that information to us. The information we collect depends on options you select when visiting this website.   

3.2 Turas may collect and process some or all of the following personal data in relation to you on behalf of TII:  

Personal Data Category	Description
Website Data	IP Address  Browser type  Length of user sessions
Payment data	You may choose to provide us with personal data associated with some of the services provided on the website, for example paying a toll.  For the purpose of processing payments, Turas may collect credit card or debit card details, including via a Digital Wallet
Communications data	Whenever you use our WebChat, the General Query Form, the Appeal a Penalty Form, the Query a Journey Form or the Query a Payment Form to communicate with us or participate in a customer survey via this website you may choose to provide us with your personal information, including but not limited to the following:  Full name  Email   Licence Plate Number
Registered account data (i.e. toll road users with a registered eFlow account)	Full name  Contact details including your postal address (including Eircode if you choose to provide it), email address and contact telephone number  Account number;  Licence plate number;  Captured image of your licence plate number(s) from M50 journey  Journey reference number   Tag provider and tag number  Credit card, debit card or direct debit details  Toll road passage information payment history  Correspondence and telephone conversation recordings with eFlow
Unregistered account sweep data	Licence plate number;  Date of purchase of relevant vehicle (i.e. whether the vehicle was purchased within the last 30 days;  Journey history
PIN data	Full name  Email address  Licence plate number  Last date and time of use of the M50 toll road  Whether you are the registered owner of the vehicle

4.1 Any personal data relating to you which we process is collected directly from you via this website if you choose to provide that information to us.

5.1 The personal data described above is processed by us and by third party service providers acting on our behalf.  The Legal bases on which we collect, process and transfer your personal data for these purposes are: 

• Where such processing is necessary to carry out tasks in the public interest and/or in the exercise of official authority vested in TII (“Public Interest/Official Authority”); 

• Where such processing is necessary for the performance of a contract with you or where it is necessary to take steps at your request prior to entering into a contract with you (“Contract”); and 

• Your consent (“Consent”), where this is the case you will be asked to give a positive indication of that consent. 

5.2 Purpose of processing activities and associated legal basis 

We process personal data in order to: 

Purposes	Categories of Personal Data	Legal Bases
Make this website more useful to visitors, to learn about the number of visitors to this website and the type of technology that our visitors use	Website Data  Please note that we do not track or record information about individuals on their visits.  We may compile and report aggregate statistics about our users in terms of numbers, traffic patterns and related site information.  Any such statistics will not include any personal identifying information.	Public Interest/Official Authority pursuant to the Roads Act 1993 (as amended)
To respond to queries and complaints via WebChat, the General Query Form, the Appeal a Penalty Form, the Query a Journey Form or the Query a Payment Form, or any other contact form – information collected in this manner is used solely for dealing with your query.  Your personal data is stored securely and kept for no longer than necessary.	Communications Data	Public Interest/Official Authority pursuant to Sections 17(1), 17(2) and 19(3) of the Roads Act 1993 (as amended)
Registering and managing your eFlow account	Registered Account Data	Contract
Processing your payment of a toll or penalty	Payment Data	Public Interest/Official Authority, pursuant to section 59(1) of the Roads Act 1993 (as amended) and Bye-law 5 of the Bye-Laws for the M50 (between Junctions 6 and 7) (the “M50 Bye-Laws”)  Contract (in relation to registered eFlow customers)
Moving your unpaid tolls to your registered account	Registered Account Data  Unregistered account sweep data	Public Interest/Official Authority, pursuant to section 59(1) of the Roads Act 1993 (as amended) and Bye-law 5 of the Bye-Laws for the M50 (between Junctions 6 and 7) (the “M50 Bye-Laws”)  Consent
Sending you a PIN number if you do not have a registered eFlow account and you request a PIN number	PIN data	Public Interest/Official Authority, pursuant to the Roads Act 1993 (as amended)
To undertake customer satisfaction surveys	Communications Data	Public Interest/Official Authority, pursuant to the Roads Act 1993 (as amended) – completing surveys is entirely voluntary
Sending notifications to you if you do not have a registered eFlow account	Communications Data	Consent

5.3 We do not intentionally collect or process special categories of personal data relating to website users. If you provide us with special category personal data, for example in a complaint or query sent via webchat, the legal bases on which we may collect, process and transfer special categories of data relating to you (e.g. data relating to health) are that: 

1. this is necessary for reasons of substantial public interest; or 

2. you have given your explicit consent to such processing. 

For more details on the purposes for which we process your personal data to provide you with eFlow services generally, please see our main eFlow Data Protection Notice. 

6.1 We may disclose your personal data to other organisations in connection with the above purposes, in the following circumstances: 

1. We may share personal data with our agents, contractors and service providers who assist us with the operation of aspects of our services and functions, such as our payment card processor, banking and printing/postal correspondence contractors, the eFlow enforcement service provider(s), Foreign Vehicle Licensing Authorities and law enforcement agencies. 

2. Where TII appoints a new operator of eFlow, we may share personal data with this new operator in order to facilitate successful transition to the new operator and ensure continuity of service for eFlow customers during any transition period.  

3. Where we are under a duty to disclose or share personal data in order to comply with any legal obligation, or to protect the rights, property or safety of eFlow, our customers, or others. We may also share information about the way you conduct your account with credit reference agencies. 

4. Where required or permitted by law, we may share your personal data with other public authorities and bodies, such as the Gardaí or other law enforcement authorities for the purposes of the prevention, investigation or detection of crime. 

5. In connection with the provision of interoperable toll transactions in Ireland, we may disclose your personal data to a relevant compatible operator. 

6. We may share toll passage data with key stakeholders, e.g. the Department of Transport, for the purposes of research and statistical analysis. 

7. For the purpose of operating competitions on behalf of TII, we may disclose, subject to your consent, your name, email address and marketing preferences provided to us by you. 

8. Where we are otherwise permitted by law.  

For more details on the recipients of your personal data in connection with eFlow services generally, please see main eFlow Data Protection Notice. 

7.1 This website uses cookies.  

7.2 For more information about the way this website uses cookies and your options for accepting and rejecting cookies, please see our Cookies Policy below:

Introduction

This Cookies Policy is issued by Transport Infrastructure Ireland (“TII”, “us”, “we”, “our”) which is the operational name of the National Roads Authority following the dissolution of the Railway Procurement Agency and the transfer of its functions to the National Roads Authority in accordance with the Roads Act 2015. TII’s main address is Parkgate Business Centre, Parkgate Street, Dublin 8, D08 DK10, Ireland.

TII has appointed Turas Mobility Services Ltd. (“Turas”) to provide tolling and other services in relation to the operation of the eFlow barrier-free tolling system on Dublin’s M50 motorway, including the operation of the eFlow.ie website.

The purpose of this notice is to provide information to you on the use of cookies on the eFlow website and the collection of data relating to you through these cookies.

If you have any questions about our use of your personal data through cookies, please contact the eFlow Data Protection Officer using the contact details below. 

• by post: Data Protection Officer, Turas Mobility Services Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin, D02 K580
• by email: dataprotection@eflow.ie
• by phone: 0818 50 10 50 (International: +353 1 4610122)
• by using the Webchat with the eFlow team or the General Query Form on the eFlow website

Alternatively, TII’s Data Protection Officer may be contacted as follows:

• by post: Data Protection Officer, Transport Infrastructure Ireland, Parkgate Business Centre, Parkgate Street, Dublin 8, D08 DK10
• by phone: +353 1 646 3600
• by email: dataprotection@tii.ie

What are Cookies?

We use cookies to ensure that we give the best experience on our website. Cookies are small text files sent from a website and stored in the user’s web browser while the user is browsing a website. When users visit the same website again, the browser sends cookies back to the website allowing the website to recognise the user and remember things like personalised details or preferences. 

Cookies also provide us with information about how often someone visits our website, and what website activity is carried out during those visits.

What Cookies are used on the eFlow Website?

1. The eFlow website uses two separate domains, eflow.ie.  Consent for all non-necessary cookies will be required for both domains, i.e. the user will be asked to consent to non-necessary cookies twice as each domain requires separate consent, even where the cookies are the same.
2. There are two main types of cookies:
   • Session cookies – a simple text file that a website installs on its visitor’s device for temporary use. It helps track real-time changes of a user’s activity while on a website. Most websites have session cookies enabled by default as it helps the web pages load faster and makes navigation easy for the user. A session cookie is only active during each browsing session and is programmed to be automatically deleted at the end of each browsing session when the user exits the web browser.
   • Persistent cookies – cookies stored on a user’s device to hold usage information, settings, personalisations, or sign-on credentials. The primary purpose of persistent cookies is to provide users with an immersive and seamless browsing experience by auto-filling information that the user may have already provided.
3. All persistent cookies have a specific expiration date assigned by the web server. The expiration date is helpful as it allows users to continue having a smooth browsing experience even after closing the browser window and reopening it.
4. Consent given for non-necessary cookies is only valid for a maximum of six months, after which time re-consent will be requested.

The categories of cookies used on the eFlow website are as follows:

• Necessary cookies – help make the website usable by enabling basic functions. The website cannot function properly without these cookies. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site and therefore consent is not required. Consent is required for all other categories of cookies. These cookies are persistent cookies.
• Webchat Services cookies – help to improve your experience of our website and help us improve our information and services to you. Cookies used for the webchat function on the eFlow website enable us to understand how visitors interact with the webchat functionality by collecting and reporting information anonymously. These cookies are session cookies. 

N.B. You must consent to webchat cookies in order to avail of the webchat function. If you have not consented to webchat cookies at the start of your session, but want to avail of webchat, click on the webchat widget (on every page) and you will be presented with the consent option.

• Statistics cookies – help eFlow to understand how visitors interact with our website by collecting and reporting information anonymously. These cookies are session cookies. 

eFlow uses Matomo Analytics, a data analytics tool, to analyse and report on website use data with the aim of identifying and employing improvements in the website user experience. Data collected by Matomo is processed and hosted [locally by Turas]. Data will be collected on Turas’ servers and then anonymised and shared with Matomo. Matomo will then use this anonymised data to provide website analytics services to Turas. Data will be stored on Turas’ servers for up to 30 days.   If you wish to submit a data deletion request relating to this data, please submit your request using the contact methods outlined in section one of this document.

• Marketing cookies – are used to track visitors across websites. They allow eFlow to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers. These cookies are session cookies. Occasionally this tool will be unable to classify these cookies and they will be placed in this category. The list of cookies on both domains will be manually reviewed on a monthly basis and any unclassified cookies will be assessed and categorised correctly, i.e. added to one of the other cookies categories.

Learn more about how we process personal data by contacting us – see contact details above. 

You can at any time change or withdraw your consent from the Cookie Declaration on the eFlow website. You can also manage and clear cookies by visiting your browser settings.

If you would like to contact us directly about our use of cookies, please state your consent ID and date when you contact us regarding your consent.

8.1 We may transfer your personal data outside the European Economic Area, including to a jurisdiction which is not recognised by the European Commission as providing an equivalent level of protection for personal data as is provided for in the European Union, such as India and the United States of America. If and to the extent that we do so, we will ensure that appropriate measures are in place to comply with its obligations under applicable law governing such transfers, which may include entering into a contract governing the transfer which contains the ‘standard contractual clauses’ approved for this purpose by the European Commission. Currently, these standard contractual clauses are the basis on which eFlow ensures that transfers can be made in a manner which is compliant with applicable data protection law.   

8.2 The European Commission has the power to determine, on the basis of Article 45 of Regulation (EU) 2016/679 (the GDPR) whether a country outside the EU offers an adequate level of data protection. In this regard, eFlow relies on the adequacy decisions in respect of transfers to Innocraft Ltd. in New Zealand and W5 Marketing Intelligence Ltd. 

8.3 Further details of the measures that have been taken in this regard are available from the eFlow Data Protection Officer using the contact details set out below. 

9.1 For website security purposes and to ensure that this website remains available to all users, our computer system employs software programs to monitor network traffic in order to identify unauthorised attempts to upload or change information or otherwise cause damage. Unauthorised attempts to upload information or change information on this website are strictly prohibited and may be punishable by law. 

9.2 Your personal data which you provide to us will be held on secure servers hosted by Turas. The nature of the internet is such that we cannot guarantee the security of any information you transmit to us online. However, we have adopted appropriate technical and organisational security measures to protect your information from unauthorised access and against unlawful processing, accidental loss, destruction or damage. We will also ensure that our agents or third-party service providers who process your data are required to keep your data safe and secure. 

10.1 You have the following rights, in certain circumstances, in relation to your personal data:  

• Right to access the data – You have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data.  
• Right to rectification – You have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete. 
• Right to erasure – You have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten. 
• Right to restriction of processing – You have the right to request that we no longer process your personal data for particular purposes. 
• Right to object to the processing of your personal data – You have the right to object to our processing of your personal data for particular purposes. 
• Right to data portability – You have the right to receive your personal data, which you provided to us, in a structured, commonly used machine readable format or to require us to transmit that data to another controller. 
• Right to withdraw your consent – where our processing of your personal data is based on you having provided consent, you have the right to withdraw your consent to the processing at any time. 

10.2 Please note that these rights are not absolute and are subject to certain restrictions and exemptions. For example, the right to erasure of personal data will not apply where we have a legitimate reason to continue to hold such data and we may continue to process your personal data, despite an objection by you, where we have compelling legitimate grounds for the processing which override your interests, rights and freedoms. 

10.3 In order to exercise any of the rights set out above, please contact us using the contact details below. 

11.1 We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements and if relevant to deal with any claim or dispute that might arise between you and TII.  

11.2 Our retention periods differ depending on the type of categories of personal data held. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. 

12.1 From time to time we may decide to change our privacy notice, but any changes will be posted on this page to keep you up to date on how we collect, use and disclose information. If at any time we decide to use personal data in a manner significantly different from that stated in this privacy notice or otherwise disclosed to you at the time it was collected, we will notify you, and you will have the choice as to whether or not we use your information in the new manner. 

13.1 If you have any questions or complaints about our use of your personal data, please contact the eFlow Data Protection Officer using the contact details below. Alternatively, TII’s Data Protection Officer may be contacted as follows: 

• by post: Data Protection Officer, Transport Infrastructure Ireland, Parkgate Business Centre, Parkgate Street, Dublin 8, D08 DK10 

• by phone: +353 1 646 3600 

• by email: dataprotection@tii.ie 

13.2 Further information about data protection can be found on the Data Protection Commission’s website: www.dataprotection.ie. 

13.3 You also have the right to lodge a complaint with the Data Protection Commission if you are not happy with the way we have used your information or addressed your rights.  Details of how to lodge a complaint can be found on the Data Protection Commission’s website.  

You can contact eFlow in the following ways:  

• by post: Data Protection Officer, Turas Mobility Services Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin, D02 K580 

• by email: dataprotection@eflow.ie 

• by phone: 0818 50 10 50 (International: +353 1 4610122) 

• by using the Webchat with the eFlow team or the General Query Form on the eFlow website 

Updated: 20 June 2025