Infrastructure Commission for Scotland – Privacy Notice January 2020
1. Collection and use of personal information
The Infrastructure Commission for Scotland was set up by the Scottish Government to provide independent, informed advice to Scottish Ministers on the vision, ambition and priorities for infrastructure in Scotland. This privacy notice explains how we use any personal information you provide us with.
2. Why we collect and use personal data
In order to fulfil its remit, the Infrastructure Commission for Scotland will invite external stakeholders and members of the public to respond to its call for evidence.
When you provide personal data to the Infrastructure Commission of Scotland, it will be used for the purposes for which it was provided as stated at the point of collection.
The legal basis for the processing of this personal data is that it is necessary for the performance of a public task in the public interest under Article 6(1)(e) of the General Data Protection Regulation
In general terms, we use this personal information to:
· Acknowledge receipt of a submission;
· Contact correspondents in the future relating to the call for evidence, providing permission has been given to do so;
· Publish responses to the call for evidence, providing permission has been given. Personal data will be included where permission has been given to do so. Email or postal addresses will not be published
3. Collecting information
The Infrastructure Commission for Scotland expects to receive emails and letters from organisations and members of the public. Evidence will also be gathered through a range of meetings with stakeholders and interested parties.
The personal data held by the Infrastructure Commission for Scotland will be provided by you and will include your name, email address, postal address, phone number and possibly professional background if provided. Records of meeting attendees, the organisations they represent and points they have raised will also be recorded.
4. Retaining and storing your data
The personal data on each user is held on the system for the purposes for which it is processed. At the end of the operation of the Infrastructure Commission, all personal data, where necessary for the continuing performance of its public function, will be transferred to Scottish Government or any infrastructure body that it nominates. Prior to any such transfer taking place, the data subjects will be notified and will be given the opportunity to have their personal data deleted should they no longer wish for it to be held. All information will be stored securely and accessible only to the Infrastructure Commission of Scotland. When the commission has completed a secure delete system will be used to ensure data is not retained.
5. Who we will share your information with
Any data collected about you by the Infrastructure Commission for Scotland will not be shared with any third party or country.
Your personal data will not be used for marketing purposes and used only for the function of the Commission.
6. Cookies and website traffic
The Infrastructure Commission for Scotland will not collect any personal information on users of its website.
When users enter the Infrastructure Commission for Scotland website their computers will automatically be issued with ‘cookies’. Cookies are text files which identify users’ computers to the Infrastructure Commission for Scotland server. The website then creates ‘session’ cookies to store some of the preferences of users moving around the website, e.g. retaining a text-only preference.
Cookies in themselves do not identify individual users but identify only the computer used. Infrastructure Commission for Scotland cookies are deleted on departure from the website. However, those from third parties may persist.
Many websites use cookies to track traffic flows, whenever users visit those websites.
Infrastructure Commission for Scotland website uses cookies to measure the use of the website including the number of visitors, how frequently pages are viewed, and the city and country of origin of users. This helps to determine what is popular and can influence future content and development. For this purpose, the Convention uses web analytics to measure and analyse usage of the website.
The information collected by the Infrastructure Commission for Scotland will include IP Address, pages visited, browser type and operating system. The data will not be used to identify any user personally.
Most modern web browsers allow users to control cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org
7. Contact Data Protection Officer (DPO)
You can also contact the Data Protection Officer (DPO)
Data Protection Officer
Victoria Quay
Commercial Street
Edinburgh
EH6 6QQ
Email: DataProtectionOfficer@gov.scot
Tel: Central Enquiry Unit on 0300 244 4000
8. Your rights
You have the right:
· to ask us for access to information about you that we hold
· to have your personal data rectified, if it is inaccurate or incomplete
· to request the deletion or removal of personal data where there is no compelling reason for its continued processing
· to restrict our processing of your personal data (i.e. permitting its storage but no further processing)
You can do this by making a Subject Access Request (SAR) to the Scottish Government. In order to do this, please complete Subject Access Form
In addition, if you believe that the data we hold is inaccurate or incomplete you can ask us to update our records. If you are unhappy with the way in which we process your personal data you can request that we stop or restrict the processing we complete using your personal data or ask us to delete the personal data we hold about you. You may do this by;
The Data Protection and Information Assets Team
Scottish Government
Information and Technology Services
V Spur
Saughton House
Broomhouse Drive
Edinburgh
EH11 3XD
Email: dpa@gov.scot
9. Complaints
If you feel we have been unable, or unwilling, to resolve your information rights concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). The ICO are the supervisory authority responsible for data protection in the UK.
For further information, including independent data protection advice and information in relation to your rights, you can contact the Information Commissioner at:
The Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 08456 30 60 60
Website: www.ico.org.uk
You can also report any concerns here: https://ico.org.uk/concerns/handling/
10. Last updated
We may need to update this privacy notice periodically so we recommend that you revisit this information from time to time. This version was last updated on 02/08/2022.