Your personal data
This privacy notice explains how What Works Scotland will process the personal data you share with us. By collecting this information What Works Scotland is acting as a data controller.
Why we need it and the legal basis for processing your data
To send you information (specifically our newsletter) and to enable you to attend our events, we collect your basic personal data such as name, email address, (sometimes a phone number) and the organisation for which you work (if applicable). We will only collect the data we need in order to provide and oversee this service to you.
When we collect this data we shall ask for your consent for What Works Scotland to use it for the purpose indicated.
What we do with your data
The data we collect will be processed by staff at the University of Glasgow and the University of Edinburgh.
We also use online services which store data outside the European Economic Area; all of these comply with the requirements of the EU-US Privacy Shield Framework.
Your data will be retained by what Works Scotland until the end of December 2018 when it will be securely deleted from the University of Glasgow and the University of Edinburgh systems and will be removed from the online systems listed above when the What Works Scotland accounts with these systems are closed.
What are your rights?
You can request access to the information we process about you at any time. If at any point you believe that the information we process relating to you is incorrect, you can request to see this information and may in some instances request to have it restricted, corrected or, erased. You may also have the right to object to the processing of data and the right to data portability.
If you wish to exercise any of these rights, please contact firstname.lastname@example.org
If you wish to raise a complaint on how we have handled your personal data, you can contact the University of Glasgow Data Protection Officer who will investigate the matter. The Data Protection Officer can be contacted at email@example.com
If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office.
Information on cookies can be obtained from www.allaboutcookies.org