Some of the language used in privacy notices can be specialised. The Information Commissioner's website provides a useful introduction to key terms and concepts.
The purpose of the processing
We will process your personal information for the purposes of:
- administering our contract with you and ensuring compliance with the terms of the contract
- managing performance and conduct
- monitoring your use of our IT and communications systems
- informing your contacts in the event of sickness, accident or another emergency
Personal data will be stored securely on the Parliament's IT systems.
Categories of information processed
Normal category data such as names, email addresses and telephone numbers.
Source of the information
Personal data will be provided directly from you (the data subject) as a Research Fellow or by your employer on your behalf.
Legal basis for processing
Data protection law states that we must have a legal basis for handling your personal data.
The legal basis for processing your personal data in these circumstances is for the performance of a contract to which you are a party or in order to take steps at the request of the data subject prior to entering into the contract, in terms of Article 6(1)(b) of the UK General Data Protection Regulation (UK GDPR).
Data sharing
We may share your personal information with the following third parties if this is necessary by law; necessary to carry out our contract or administer a working relationship with you; or where it is necessary to protect your vital interests or those of another person:
Your employer
Other third parties as necessary to comply with legal requirements
Retention of data
Personal details will be retained for up to six months after the end of the financial year in which your Fellowship ended.
Your rights
Data protection law sets out the rights which individuals have in relation to personal data held about them by data controllers. Applicable rights are listed below, although whether you will be able to exercise data subject rights in a particular case may depend on the purpose for which the data controller is processing the data and the legal basis upon which the processing takes place.
Data protection law sets out the rights which individuals have in relation to personal data held about them by data controllers. Applicable rights are listed below, although whether you will be able to exercise data subject rights in a particular case may depend on the purpose for which the data controller is processing the data and the legal basis upon which the processing takes place.
For example, the right to object to the processing of personal data does not apply where personal data is processed for the purpose of the performance of a contract.
The following rights may apply:
Access to your information
You have the right to request a copy of the personal information about you that we hold.
Further information on how to make a data protection 'subject access request'.
Correcting your information
We want to make sure that your personal information is accurate, complete, and up-to-date and you may ask us to correct any personal information about you that you believe does not meet these standards.
Restricting how we may use your information
In some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information about you that we hold. The right might also apply where there is no longer a basis for using your personal information, but you do not want us to delete the data. Where this right is validly exercised, we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.
Please contact us in any of the ways set out in the contact information and further advice sections below if you wish to exercise any of these rights.
Deletion of your information
You have the right to ask us to delete personal information about you where:
- you consider that we no longer require the information for the purposes for which it was obtained
- our use of your personal information is contrary to law or our other legal obligations
Child Protection
In line with the principles underlying the National Guidance for Child Protection in Scotland (2014), published by the Scottish Government, our staff may report a concern to the relevant authorities if they come across an issue in the course of their work which causes them to think that a child may be at risk of abuse or harm.
Changes to our privacy statement
We keep this privacy statement under regular review and will place any updates on this website. Paper copies of the privacy statement may also be obtained using the contact information below.
This privacy statement was last updated on 19 June 2024.
Complaints
We seek to resolve directly all complaints about how we handle personal information but you also have the right to lodge a complaint with the Information Commissioner's Office online at: https://ico.org.uk/make-a-complaint.
Or by phone at: 0303 123 1113
Contact information and further advice
If you have any further questions about the way in which we process personal data, or
about how to exercise your rights, please contact the Head of Information Governance
at:
The Scottish Parliament
Edinburgh
EH99 1SP
Telephone: 0131 348 5281
(Calls are welcome through the Text Relay service or in British Sign Language through contactSCOTLAND-BSL.)
Email: [email protected]
Please contact us if you require information in another language or format