Privacy Policy
The Scottish Council on Archives (collectively “SCA,” “we,” “us” and “our”) take your privacy very seriously. We are committed to respecting and protecting any personal information you share with us. Please read the following to learn more about how we collect, store, use and disclose information about you when you interact with us, in any manner, via our website and/or our services.
1 Who are we?
The Scottish Council on Archives provides leadership for the archives and records management sector in Scotland. We build national and international partnerships, deliver strategic advice and research, and develop projects spanning outreach, education, and quality improvement. SCA also produces publications and delivers conferences, training and networking events. We are the owners and maintainers of the Your Scottish Archives website.
We are a membership body and a Scottish Charitable Incorporated Organisation (SCIO) (SCO44553).
2. What does this Privacy Policy Cover?
This Privacy Policy covers our treatment of information that we gather when you are accessing or using our website or services or when you contact us in any manner. We gather different types of information, including information that identifies you as an individual (“Personal Information” as explained in section 4).
3. Your rights and your personal data
From May 2018 the General Data Protection Regulation (GDPR) provides you with rights in respect of your personal data. These include:
The right to request a copy of your personal data which we hold about you
The right to ask us to correct personal data that is wrong or out of date
The right to request your personal data is erased
The right to withdraw your consent to the processing of your personal data
The right to lodge a complaint with the Information Commissioners Office
Any questions regarding this Policy, our privacy practices and any requests to exercise your rights should be sent by email to your@scottisharchives.org.uk or by writing to Scottish Council on Archives, General Register House, 2 Princes Street, Edinburgh EH1 3YY Alternatively, you can telephone 0131 535 1362.
4. What information does SCA collect?
4.1 Information you provide to us:
When you contact us with a query or to register as a contributor, we collect the personal information that you provide to us, for example your name, your email address, your telephone number and your company name via our online forms.
4.2 Information we automatically collect:
When you use our website – we collect information via cookies and other similar technologies which may include saving cookies to users’ computers. We collect information related to your device such as your device’s IP address, referring website, what pages your device visited, and the time that your device visited our website.
4.3 Use of ‘cookies’
In common with many websites, the YSA website uses cookies. ‘Cookies’ are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. Cookies are typically made up of letters and numbers. They are stored on your computer by your internet browser, which are then sent back to the originating website, which recognises the cookie.
Cookies collect statistical data about your browsing actions and patterns and do not identify you as an individual.
Cookies are used to record information about your preferences as you browse our website, which allows us to improve your experience by tailoring the website accordingly. Cookies can also be used to identify you every time you revisit our website.
Browser settings Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies visit aboutcookies.org.uk.
Removing cookies You can withdraw your consent and remove or block cookies at any time using the settings in your browser, but in some cases, this may impact your ability to use our website.
Links to other websites Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.
In addition, if you linked to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the policy of that third-party site.
4.4 How long will we keep your information?
We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our legal obligations as a charity.
We will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us. All information we hold about you is disposed of securely and we maintain a record of how, when and why we destroy any records we hold.
4.5 Who has access to your information?
We will not sell or rent your information to third parties. We will not share your information with third parties for marketing purposes.
We do not currently transfer any information, personal or otherwise, outside of the EEA (European Economic Area).
We may process your personal information for our legitimate business interests e.g. data analytics and/or enhancing/modifying/improving our services and activities (see ‘Legitimate Interests’ section 12).
Please be assured that we will not release your information to third parties for them to use for their own direct marketing purposes or for any other purpose not expressly communicated and agreed by you. The only exception would be when are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.
Service Providers working on our behalf We may pass your information to service providers, such as subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf
However, when we use external providers or work with external organisations, we disclose only the personal information that is necessary to deliver the service. We have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes.
Legitimate Interests “Legitimate Interests” means the interests of our organisation in in carrying out our charitable purposes and providing services to members. For example, we have an interest in making sure our contributors and stakeholders have up to date information about our activities and services, so we may process your information to send you relevant communications.
When we process your personal information for our legitimate interests, we make sure to consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws.
Our legitimate business interests do not automatically override your interests – we will not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
If you have any concerns, you have the right to object to processing that is based on our legitimate interests.
4.6 Is personal information about me held securely?
We use appropriate technical, organisational and administrative security measures to protect any information we hold from loss, misuse, unauthorised access, disclosure, alteration and destruction. Unfortunately, no organisation or service can guarantee complete security. Unauthorised entry or use, hardware or software failure, and other factors may compromise the security of user information at any time.
4.7 What choices do I have?
We will not contact you by post, email or telephone unless you have given your prior consent. You can always opt not to disclose information to us, but keep in mind some information may be needed to take advantage of our services (for example, membership of SCA and notification of upcoming training events and conferences). You can opt-out of receiving communications from us at any time by using the unsubscribe link at the foot of any email communications we send.
You can also unsubscribe at any time by contacting us by email at your@scottisharchives.org.uk or write to us at: Scottish Council on Archives, General Register House, 2 Princes Street, Edinburgh, EH1 3YY. Alternatively, you can telephone 0131 535 1362.
4.8 Children
We do not knowingly collect or solicit personal information from anyone under the age of 16. If you are under 16, please do not attempt to send any Personal Information about yourself to us. If we learn that we have collected Personal Information from a child, we will delete that information immediately. If you believe that a child under 16 may have provided us Personal Information, please contact us at your@scottisharchives.org.uk
4.9 How you can access and update your information
The accuracy of your information is important to us. SCA may contact you to confirm we have up to date information. You have the right to ask for a copy of the information Scottish Council on Archives hold about you. This will be provided free of charge.
4.10 If you change email address, or any of the other information we hold about you is inaccurate or out of date, please email us at: your@scottisharchives.org.uk, or write to us at: Scottish Council on Archives, General Register House, 2 Princes Street, Edinburgh, EH1 3YY. Alternatively, you can telephone 0131 535 1362.
5 Changes to our Privacy Policy
We are continuously trying to improve our website and services, so we may need to change this Privacy Policy from time to time. We will alert you immediately to any material changes by placing a notice on our website and by sending you an email when we are required to do so by applicable law. You can see when this Privacy Policy was last updated by checking the date at the top of this page. You are responsible for periodically reviewing this Privacy Policy.
Any questions regarding this Policy and our privacy practices should be sent by email to your@scottisharchives.org.uk or by writing to Scottish Council on Archives, General Register House, 2 Princes Street, Edinburgh EH1 3YY Alternatively, you can telephone 0131 535 1362.