Publication - Advice and guidance

Public appointments: privacy notice

Published: 7 Feb 2020

Information about the personal data collected as part of the public appointments process, and what is done with this data.

7 Feb 2020
Public appointments: privacy notice

Why is data gathered

The Scottish Government collects personal data as part of the administration of public appointment recruitment. We also collect sensitive personal data as part of that administration and monitoring of public appointment recruitment. Processing of this data is necessary for compliance with our legal obligations.

What data is held

Personal data held includes special types of sensitive information. This information includes an identifier, name, email addresses, work and personal contact information, in addition to the IP address you used to connect to the online application portal.

What we do with your data

In the administration of public appointment recruitment, the Scottish Government uses Bis-Web People Solutions (UK) Limited (a subsidary of Avantus Business Solutions Limited). All personal data is processed and stored securely within the UK. Data is processed only in connection with the services provided to the Scottish Government and for business necessity. No third parties have access to your personal data unless the law allows them to do so. No data is transmitted outside of the European Union.

The Scottish Government and Bis-Web People Solutions (UK) Limited have a Data Protection regime in place to oversee the effective and secure processing of your personal data.

How long is your data kept

Your data is retained for as long as the Scottish Government has a relationship with you and the data is required to support the service. Once this relationship ends your data will be deleted from our systems.

What are your rights

You have a right of access to any personal data we process on you, by making a Subject Access Request (SAR). In addition, if you believe that the data we hold is inaccurate or incomplete you can ask us to update our records. If you are unhappy with the way in which we process your personal data you can request that we stop or restrict the processing we complete using your personal data or ask us to delete the personal data we hold about you. In some circumstances we may not be able to comply with your request. This is because some of these rights are conditional and can only be applied in certain circumstances and/or where there is no compelling reason to continue to process your personal data.


The Data Protection and Information Assets Team
Information and Technology Services (iTECS)
V Spur
Saughton House
Broomhouse Drive

EH11 3XD


If you have concerns about the Scottish Government's compliance with data protection laws please contact our Data Protection Officer.


Stuart Gardener
Victoria Quay

If you are not satisfied with the response or believe we are processing your personal data not in accordance with the law you may make a complaint to the Information Commissioner’s Office (ICO). 

The Information Commissioner's Office - Scotland
45 Melville Street

Telephone: 0303 123 1115