Cladding remediation programme: newsletter and stakeholder register – privacy notice
- Published
- 16 October 2024
- Directorate
- Cladding Remediation Directorate
How we will look after and use your personal data.
This privacy notice explains your rights under the UK General Data Protection Regulations (UK GDPR). It tells you how we will look after and use your personal data.
Who we are
We are the Cladding Remediation Directorate within the Scottish Government. We are the devolved government for Scotland and our head office is located at St Andrews House, Regent Road, Edinburgh, EH1 3DG.
The Scottish Government is committed to improving the safety of homes, and have introduced the Housing (Cladding Remediation) (Scotland) Act in 2024. The Cladding Remediation Directorate wants to provide regular updates to citizens about our work, news and events. Therefore we are inviting citizens to sign up for our e-newsletter and organisations to sign up to our Stakeholder Register.
Why we need your personal information and what we will do with it
We need your personal information to allow us to distribute our e-newsletter and other essential updates from the Cladding Remediation Programme.
We may also use your information to provide you with event details and to provide you with a feedback form to help us understand the success of the e-newsletter or event.
When you voluntarily sign up for the Cladding Remediation Newsletter, we will ask you to provide the following personal data:
- your name
- email address
- postcode
If you are signing up on behalf of an organisation to our stakeholder register, we will ask you for:
- your name
- email address
- name of organisation
Purpose and lawful basis for processing
Our purpose for collecting your contact details is to:
- let you know about the Cladding Remediation Directorate’s work, news and events
- collect your feedback on work, news and events
Should you sign up to receive the Cladding Remediation Directorate e-newsletter, the lawful basis we rely on for processing your contact details is your consent under article 6(1)(a) of the UK GDPR.
Should you have signed up to attend any events or workshops via Eventbrite, the lawful basis we rely on for processing your contact details is legitimate interest under article 6(1)(f) of the UK GDPR.
Should you have provided us with feedback on one of our activities, the lawful basis we rely on for processing your contact details is your consent under article 6(1)(a) of the UK GDPR.
Do we use any data processors?
We use Mailchimp to process our e-newsletter. Mailchimp’s privacy notice outlines how they collect, use, share and process personal information.
You can contact Mailchimp at their mailing address:
The Rocket Science Group, LLC
675 Ponce de Leon Ave NE
Suite 5000
Atlanta, GA 30308 USA
Transfer safeguards
Mailchimp transfer personal data to the United States. This transfer is safeguarded by the EU-US Data Privacy Framework UK Extension.
How long we will keep your personal data
We only keep your personal information for as long as the newsletter is operational and you have provided consent.
How we protect your data
We have a duty to protect your personal data.
We take care to ensure your personal information is only accessible to authorised people.
The following security measures are in place to protect personal information:
- all staff undertake mandatory training in Data Protection
- compliance with our Information Security Policy
- organisational policy and procedures on the safe handling of personal information
- access controls and audits of electronic systems
Your rights and how to access your personal data
You have a right to:
- be told about how your data is used, through this privacy notice
- access a copy of data we hold
- request that data is deleted, or object to or request restriction of it
- withdraw any consent you have given
These rights are not absolute. You can action any of these rights by contacting:
CladdingRemediationProgramme@gov.scot
For more information on the rights you have over how your personal data is handled, please visit Your data matters | ICO
How to complain
If you are dissatisfied with the way we handle your personal data, you can raise your concerns with our Data Protection Officer in the first instance. You can do this by e-mail to DataProtectionOfficer@gov.scot or write to :
Data Protection Officer
Victoria Quay
Commercial Street
Edinburgh
EH6 6QQ
If you feel we have been unable, or unwilling to resolve your complaint, you have the right to lodge a complaint with the Regulator for data protection in the UK, the Information Commissioner's Office (ICO):
The Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
You can also report any concerns online.
Contact
There is a problem
Thanks for your feedback