SGIPD Privacy Notice

Please read the following notice that explains how we use the personal information that is held on users and which is populated by users.

Personal data and use

When you provide personal data to us or populate personal data within the Scottish Government Infrastructure Projects Database (SGIPD) system, it will be used for the purposes for which it was provided as stated at the point of collection.

The legal basis for the processing of this personal data is that it is necessary for the performance of a task carried out in the public interest.

In general terms, we use this personal information to:

  • to enable user registration;
  • maintain system records;
  • contact you by email or telephone;
  • include as where relevant within the Scottish Governments’ six-monthly IIP Project Pipeline publication.

The personal data held on each user is name, business telephone number and business email address. The only personal data that can be populated by each user is name, business telephone number and business email address relating to the ‘Contact for Public Enquiries’ and ‘Senior Responsible Owner’ fields for each project.

Where applicable, the name and business email address relating to the ‘Contact for Public Enquiries’ data fields will be included within the Scottish Governments’ six-monthly IIP Project Pipeline publication. This is explicitly specified to users within the ‘Officials’ section of the system. The ‘Senior Responsible Owner’ details will not published but each user however should inform each individual that their details have been populated within the system.

Cookies and Analytics

In addition the personal data described above we also record:

  • your Internet Protocol (IP) address, and details of which version of web browser you used
  • information on how you use the site, using cookies and page tagging techniques

We use Google Analytics software to collect information about how you use SGIPD. This includes IP addresses. The data is anonymised before being used for analytics processing.

Google Analytics processes anonymised information about:

  • the pages you visit on SGIPD
  • how long you spend on each SGIPD page
  • how you got to the site
  • what you click on while you’re visiting the site

We do not store your personal information through Google Analytics (for example your name or address).

We will not identify you through analytics information, and we will not combine analytics information with other data sets in a way that would identify who you are.

The legal basis for processing this data is consent. You can withdraw this consent at any time.

We collect information through Google Analytics to see how you use the site and government digital services. We do this to help:

  • make sure the site is meeting the needs of its users
  • make improvements

Retention of personal data

The personal data on each user is held on the system for the purposes for which it is processed (i.e. registration to allow use of the system) and will be retained as long as each user remains registered for use. Users will be able to delete their account at any time. Once a user account has been deleted, details will only remain stored on the system for audit purposes or until it is no longer required.

The personal data populated by each user at the ‘Contact for Public Enquiries’ and ‘Senior Responsible Owner’ fields, will be held on the system for the purposes for which it is processed (i.e. the delivery of a project). Once a project has become operational, this data will only remain stored on the system for archiving purposes or until it is no longer required.

We will delete access log data after 180 days.

Retention of project data

The data relating to a project is held on the system for the purposes for which it is included (i.e. to report on the progress of major capital projects funded by the Scottish Government). Once a project has become operational, its accompanying data will remain stored on the system for archiving purposes and to document its associated delivery and investment.

Your rights

You can request a copy of any personal data we hold about you by making a Subject Access Request (SAR) under the General Data Protection Regulation, by:

  • sending an email to dpa@gov.scot
  • writing to us at:
    The Data Protection and Information Assets Team
    Information and Technology Services (iTECS)
    V Spur
    Saughton House
    Broomhouse Drive
    Edinburgh
    EH11 3XD
  • by completing a Subject Access Form
  • by phoning Central Enquiry Unit on 0300 244 4000

Other queries

If you have any other queries, you can contact the Scottish Government Data Protection Officer by:

Complaints

If you feel we have been unable, or unwilling, to resolve your information rights concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). ICO are the supervisory authority responsible for data protection in the UK.

For further information, including independent data protection advice and information in relation to your rights, you can contact the Information Commissioner at:
The Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Tel: 08456 30 60 60
Website: www.ico.org.uk

You can also report any concerns here: https://ico.org.uk/concerns/handling