Who we are?
For the purpose of the Data Protection Act 2018 and the General Data Protection Regulation, the data controller is the Scottish Government. The Scottish Government has on behalf of the Health Boards and Local Authorities in Scotland, entered into a contract with Meister Works to provide the nominated individual called the Lead Respondent, within each organisation a digital maturity assessment to undertake on behalf of their Health Board or Local Authority.
What data do we collect?
Most of the personal information we process is provided to us directly by you, including your name, email address and telephone in your capacity as the Responsible Lead, for your Health Board or Local Authority.
In addition, the Lead Respondent can delegate a section to others within their own organisation and can poll sections of the assessment to gather views from other colleagues. This is done by email. However, these email addresses are not visible to anyone else.
How do we use your data?
We use the information that you have given us in order to:
- Provide Instructions and ongoing communications
- Set up user account to the Digital Maturity Assessment Tool.
- Notify you when your organisation’s report is ready
- Provide support and answer any technical issues relating to the tool
What legal basis do we have for processing your personal data?
Under the General Data Protection Regulation, the lawful basis we rely on for processing this information is a contractual obligation.
Who do we share personal data with?
The Lead Respondents name and contact details are shared with Meister Works to establish access to the Digital Maturity Assessment Tool and enable them to provide technical support where required. Beyond this we do not share personal data with anyone else.
Will your information be secure?
We take the security of your personal information seriously and take steps (including the implementation of appropriate technical and organisational measures) to ensure your personal information is treated securely and in accordance with this privacy notice.
Your information is kept on secure servers within the United Kingdom and we implement a range of measures to try to ensure the security and integrity of this Assessment tool. We take steps to ensure that only authorised persons have access to your data.
Where we have given you (or where you have chosen) a password which enables you to access this site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
How long do we keep your personal data for?
We will only keep your personal information for as long as it is required to complete the digital maturity assessment exercise and produce the report for your organisation, including if it is needed for any legal or reporting purposes. Please notify us at the earliest opportunity, if you are no longer the Lead Respondent for your organisation or your contact details have changed, so that we can amend or remove your details.
What are your data protection rights?
Under data protection legislation you have a range of rights. You have a right to ask us for a copy of the information we hold about you. You can also ask us to correct or update your personal data, or to erase it. The way some of your rights apply may depend on the circumstances. To exercise your rights please contact us. Further information about your rights is set out below. To make a request, please contact us via HSCDigitalMaturity@gov.scot
More about your rights
|Right of access||You have a right to access the personal information we hold about you and be told why we use it.|
|Right of rectification||You can ask us to correct or update your information to ensure it is accurate and complete.|
|Right to erasure and right to restrict processing||You can ask us to stop processing and to delete your data in certain circumstances (for example where it is processed with your consent, or it is no longer necessary for us to process it).|
|Right to object||You have a right to object to our processing of your information.|
|Rights: profiling and automated decisions||You have a right not to be subject to automated decisions which have a legal effect and to be protected by safeguards in respect of any profiling.|
|Right to object to direct marketing||Where you have consented to receive direct marketing, you can change your mind at any time as described in the marketing section above. Please allow a few days for us to action your request.|
Fees, information requirements and time limits
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.
What is a cookie?
Most browsers accept cookies automatically, but you can set your browser to prevent this. If your browser’s preferences allow it, each website or third-party service provider can send a cookie to your browser.
How to reject cookies?
If you wish to restrict or block the cookies, we use on our site you can do this within your browser settings. The Help function within your browser should tell you how to do this. For further information about cookies please visit www.allaboutcookies.org. Please be aware that in disabling cookies on this site may affect your experience of those parts of the site where the functionality is controlled using cookies.Changes to this Notice
If you have any questions about the Digital Maturity Assessment Tool, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us. Email us at: email@example.com Call us: 203 086 7868 Or write to us at: 11-12 ST. JAMES’S SQUARE, LONDON, SW1Y 4LB
How to contact the appropriate authority
If you feel that We have not addressed your concern in a satisfactory manner or are unhappy with how we have used your data, you may contact the Information Commissioner’s Office at:Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline number: 0303 123 1113More information is available on the ICO’s website https://www.ico.org.uk