Data controller
ESS is the data controller for the personal data you provide through our online Smartsheets form.
FOI and FOISA
Information from the responses received will be collated and summarised. Information will not be directly quoted and attributed to individuals or organisations for official publication without your prior permission. However, we may publish or disclose the information you provide, in accordance with the access to information regimes. These are primarily the ‘Freedom of Information (Scotland) Act 2002’ (FOISA) and the ‘Environmental Information (Scotland) Regulations 2004’ (EIRs).
ESS – as a public authority – has obligations under FOISA and EIRs to disclose information in response to a request made under these laws unless an exemption applies. If you want the information you provide to be treated as confidential, please provide your reasoning for why this information should be treated as confidential. ESS will take full account of your explanation if a request for disclosure of the information is received. However, ESS cannot give an assurance that confidentiality can be maintained in all circumstances.
Please do not provide any information that relates to an identified or identifiable individual. If this is unavoidable, please anonymise in such a way that individuals are not identifiable. Further information regarding the anonymisation of personal data, and the issues you need to consider to ensure anonymisation is effective, can be found at the ICO’s website.
Where personal data is provided, ESS will hold and process this in accordance with our privacy notice on ESS website. Providing information to ESS is not intended to affect either party’s ownership of its intellectual property rights.
What personal data we collect
At the beginning of the survey, we will ask:
- for your email address
- your main role or area of expertise
- whether you are responding in a personal capacity, on behalf of an organisation, on behalf of a network
- if you are responding on behalf of an organisation or a network we will ask for the name of the organisation or network
- whether ESS can contact you for further clarification, or about related future work
- whether you would like to subscribe to our ESS newsletter
We will be asking open questions with free text answer boxes. Please do not include any information that could directly identify you in these boxes. If we receive any responses which include information that we think may directly identify you, we will seek to remove this information.
How we use your data (purposes)
We ask for this information so that we can provide better environmental scrutiny for the public. In this instance, we will use the data to inform the prioritisation of our analytical work on our strategic topic of resources. The public output from this call for evidence will be a summary of responses that will be anonymised which means that nobody who provides a response to this call will be identifiable from the information we publish.
Legal basis for processing personal data
Under data protection law, we need to tell you what our legal basis is for processing the data you are providing to us. Our legal basis is the performance of a task in the public interest, or in the exercise of our official scrutiny functions as per the UK Withdrawal from the European Union (Continuity) (Scotland) Act 2021.
Data processors and other recipients of personal data
The call for evidence is hosted through an online platform called Smartsheets who store information on their own EU servers. ESS subscribe to this platform and will delete any personal data in line with the retention and disposal periods outlined below.
- we will only share anonymised data publicly and no individual or organisation will be identifiable from this data
- we do not sell data to anyone else, nor do we provide it for companies to use for marketing or advertising purposes.
- we would only share personal data with any other organisation if we are required to do so by law
International data transfers and storage locations
Storage of data by Smartsheets is provided through secure servers located in the EU. We have security procedures in place to make sure your information is safe and to make sure it doesn’t get lost or accessed by anyone who doesn’t need to see it.
Retention and disposal policy
Your data will be held by ESS for 2 years from the closure of the call for evidence. This will allow us to use the data to improve the services we provide and after 2 years we will safely delete it.
Smartsheets will securely erase the data held on its system when instructed to do so by ESS if the data has served its intended purpose.
How we keep your data secure
Both ESS and Smartsheets have security procedures in place to make sure your information is safe and to make sure it doesn’t get lost or accessed by anyone who doesn’t need to see it. This includes only allowing authorised persons access to your data using methods like password protection, encryption and making sure that the servers we use are secure.
Your rights as a data subject
By law, data subjects have a number of rights, and this processing does not take away or reduce your rights under the UK General Data Protection Regulation and the Data Protection Act 2018.
These rights are:
- the right to obtain copies of information – individuals have the right to ask for a copy of any information about them that is stored or used
- the right to have information corrected – individuals have the right to ask for any information held about them that they think is inaccurate, to be corrected
- the right to limit how the information is used – individuals have the right to ask for any of the information held about them to be restricted – for example, if they think inaccurate information is being used
- the right to object to the information being used – individuals can ask for any information held about them to not be used. However, this is not an absolute right, and continued use of the information may be necessary, with individuals being advised if this is the case
- the right to have information deleted – this is not an absolute right, and continued use of the information may be necessary, with individuals being advised if this is the case
Comments or complaints
Anyone unhappy or wishing to complain about how personal data is used as part of this call for evidence should contact enquiries@environmentalstandards.scot in the first instance or write to:
Environmental Standards Scotland
Thistle House
91 Haymarket Terrace
Edinburgh
EH12 5HD
Anyone who is still not satisfied can complain to the Information Commission .
Their postal address is:
Public Advice and Data Protection Complaints Service
ICO Head Office
4th Floor, No.3 Circle Square
5 Hawkshaw Street
Manchester
M1 7BL