Linda Fabiani MSP Data Protection Privacy Notice
This website is run and maintained by East Kilbride SNP. The Data Controller is the Branch Secretary. This website only collects data that you submit to it. Information submitted through the website is sent directly to secretary@eksnp.scot. Information will not be shared with any other party without prior permission. By sending information through this website, you are providing it both willingly and with consent for the purposes of communication. If you have any questions about the data held please contact us via the contact information on this website.
Notification
We are registered as a data controller with the UK Information Commissioner – https://ico.org.uk/ESDWebPages/Entry/
How we use your personal data
I process any personal data under the requirements of the General Data Protection Regulation (EU) 2016/679 (the GDPR), the Data Protection Act 1998 and any Act that replaces the Data Protection Act.
What is personal data?
Personal data is any information from which a living individual can be identified.
Be assured I will hold all personal data securely, we will only use it for the purposes it was collected or acquired for and we will only pass it on to third parties with your consent or according to a legal obligation.
Further information about the data protection legislation and your rights is available here:
https://ico.org.uk/for-the-public/is-my-information-being-handled-correctly/
Purposes and categories of processing personal data
- we collect and use personal data to fulfil the following functions and associated activities of my office:
- to carry out casework on behalf of constituents; or
- to tend to issues and campaigns we are involved in; or
- to manage and support our staff; or
- to process expenses, accounts and associated records.
If you contact us with an inquiry or a complaint, we will normally need to store your contact details to deal with your inquiry or complaint. Under the GDPR legislation, this is considered to be “normal category data”.
Other personal data you may provide to us may include details about your personal and family life, social circumstances and business activities, your employment and education details, financial information or information about your housing situation etc. You may also be sharing “special category” data with us which may include details about race or ethnic origin, political or religious views, sex life or sexual orientation, trade union membership, physical or mental health, genetic or biometric data or any criminal offences.
The legal basis for processing personal data
The data protection law states that we must have a legal basis for handling your personal data. The permitted legal bases can be found in the GDPR and the DPB.
Depending on the circumstances, the legal basis for processing personal data in my office may include:
Consent of the data subject (the person who the personal data relates to)
The processing is necessary for the performance of a contract
Protecting vital interests of individuals
Complying with legal obligations
Acting in the public interest (includes democratic engagement activities)
Pursuing legitimate interests
Categories of processing activities and corresponding legal basis
Processing of personal data may come in the form of collecting, storing, using, sharing and deleting.
Personal data may be processed in the following ways:
Receiving, storing and responding to general enquiries by letter, email or in person.
The processing is necessary for the performance of a task carried out in the public interest or for the purpose of a legitimate interest (Art 6(1)(e) or 6(1)(f) GDPR). The task is the engagement of constituents with their branch.
Receiving, storing and responding to complaints by letter, email or in person.
Depending on the nature of the complaint, the processing is necessary for the performance of a task carried out in the public interest or for the purpose of a legitimate interest (Art 6(1)(e) GDPR or Art 6(1)(f) GDPR.
Receiving and storing data in relation to a personal issue or problem raised by a constituent (casework).
The processing is carried out with the consent of the data subject (Art 6(1)(a) GDPR) OR the processing is necessary for the performance of a task carried out in the public interest or for the purpose of a legitimate interest (Art 6(1)(e) or 6(1)(f) GDPR). Or, for special category data: The processing is necessary for reasons of substantial public interest (Art 9(2)(g) GDPR and DPB Sch 1, para 23.
Collect and use data for the purpose of sending out newsletters with information about meetings, office contact details and upcoming events and campaigns.
The processing is necessary for the performance of a task carried out in the public interest (Art 6(1)(e) GDPR.
Take, store and use photos and videos in connection with our events and campaigning.
The processing is necessary for the performance of a task carried out in the public interest or for the purpose of a legitimate interest (Art 6(1)(e) GDPR or Art 6(1)(f) GDPR.
Sharing of personal data
I may sometimes be required to share the personal information I hold with other individuals or organisations including for example:
healthcare, social and welfare organisations
local and central government bodies
educators and examining bodies
statutory law enforcement agencies
investigating bodies
elected representatives and other holders of public office
financial organisations
crime prevention agencies and the police
The legal basis for sharing data with these organisations may be that:
the sharing is necessary for complying with a legal obligation to which I am subject (Art 6(1)(c) GDPR; or
the sharing is necessary in order to protect the vital interests of the data subject or of another person (Art 6(1)(d); or
the sharing is necessary for the performance of a task carried out in the public interest or substantial public interest (Art 6(1)(e) or Art 9(2)(g) GDPR.
I may seek your prior express consent to share your personal data with any of the following:
employment and recruitment agencies
press and the media
family, associates and representatives of the person whose personal data I am processing
enquirers
subjects of complaints
political parties
charitable parties
The consequences of my not processing personal data are:
Where we are processing personal data for the performance of a contract, the consequence of not processing the personal data is that we may not be able to fulfil our obligations under that contract.
Where we are processing personal data in accordance with a statutory obligation, the consequence of not processing personal data may be that we are liable to regulatory fines for non-compliance with that statutory duty.
Automated data processing
We do not use automated processing techniques to process your data.
Sharing or processing personal data outside the European Economic Area:
We do not share or process personal data in locations outside the EEA.
Retention of personal data:
We retain personal data for the period that is necessary to carry out casework on behalf of my constituents, work on issues and campaigns we are involved in, and to support our members and maintain information, expenses, accounts and associated records.
Using my website
This website uses cookies to gather information about how visitors use my website to help me improve its performance. Additionally, cookies are used to improve the visitor experience when using the website by delivering pages more quickly or remembering user settings. Additionally, videos on the website may use cookies created by third-party providers such as YouTube.
The information we collect is anonymous – it cannot be used to identify you personally. .
Your rights
The GDPR sets out the rights that individuals have in relation to personal information held about them by data controllers. These rights are listed below.
Access to your information – You have the right to request a copy of the personal information about you that I hold.
Correcting your information – we want to make sure that your personal information is always accurate, complete and up to date. You are invited to correct any personal information about you that you believe does not meet these standards.
Deletion of your information – You have the right to ask us to delete personal information about you where:
you have validly objected to my use of your personal information –my use of your personal information is contrary to law or our other legal obligations.
We are using that information with your consent and you have withdrawn your consent; or
You consider that we no longer require the information for the purposes for which it was obtained; or
Objecting to how we may use your information – You have the right at any time to require me to stop using your personal information for direct marketing purposes. In addition, where we use your personal information to perform tasks carried out in the public interest then, if you ask us to, we will stop using that personal information unless there are overriding legitimate grounds to continue.
Restricting how your information is used – in some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to our use of your information. The right might also apply where this is no longer a basis for using your personal information but you don’t want us to delete the data. Where this right to validly exercised, we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.
Withdrawing consent using your information – Where we use your personal information with your consent you may withdraw that consent at any time and we will stop using your personal information for the purpose(s) for which consent was given.
Please contact me using the contact details provided above.
Changes to my privacy statement
This privacy statement is under regular review and we will place any updates on this website. Paper copies of the privacy statement may also be obtained using the contact information above.
This privacy statement was last updated on 16 April 2019.
Complaints
We endeavour to resolve all complaints about how we handle personal information, but you also have the right to lodge a complaint with the Information Commissioner’s Office as below:
Online: https://ico.org.uk/global/contact-us/email/
By phone: 0303 123 1113
By post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF