What data is held?
Accountability for the work of Ingage sits with Scottish Government, and therefore Scottish Government is the Controller and processor of the personal data held that is provided in relation to the work of Ingage. This personal data held includes names, email addresses, work and personal contact information.
For privacy statements in relation to specific workstreams, please see the following websites:
Why we need this data?
This personal data is required in order for the Scottish Government to deliver the work of Ingage. The legal basis for the Scottish Government processing your data is GDPR Article 6 (1)(a). This means that we require you – the data subject – to give us consent to process your personal data.
What do we do with your data?
We collect your data for three main purposes:
1 – to communicate with you about events that you have registered for. This may include sending out pre-event information, and follow up emails, for example event evaluation.
2 – to update you on upcoming and future events, and share opportunities from Scottish Government and other partners that may be of interest to network members.
3 – to demonstrate the spread and impact of the network, for example, sharing the number of people from a specific organisation or sector for evaluations and reporting.
Your data will be used as follows:
1 – Your data will be shared with those organising the event you have registered for, to allow them to plan the event and communicate with you about any specifics. In some cases, those organising the event may be from a partner organisation.
2 – If you consent, your event registration data will be added to a mailing list to allow you to keep in touch with network opportunities.
Scottish Government will not directly share your data without your consent. This means that we will not share delegate lists or network lists with partners or third parties who request access. If a third party wishes to communicate with you, for example with an opportunity, we will send a message to you on their behalf. This also means we will not provided contact lists at or after events to event delegates.
Currently, we use a third party website, Eventbrite to collate registrations for network events. You can read how Eventbrite complies with GDPR on their website – https://www.eventbrite.com/support/articles/en_US/Troubleshooting/eventbrite-eu-data-protection
We also use a third party platform, Mailchimp, to create and send newsletters to some of our mailing lists. You can view how Mailchimp complies with GDPR here: https://kb.mailchimp.com/accounts/management/about-mailchimp-the-eu-swiss-privacy-shield-and-the-gdpr
The Scottish Government have a Data Protection regime in place to oversee the effective and secure processing of your personal data.
How long is your data kept?
Your personal data is retained for as long as the Scottish Government has a relationship with you and the data is required to support the service that we offer. Once this relationship ends your data will be deleted from our systems. For our network mailing lists, this means that we will maintain contact with you for as long as the network is active, unless you withdraw consent.
What are your rights?
If at any point you believe the information we process on you is incorrect you can request to see this information. You may have a right to have this information corrected, deleted and to object to or restrict the processing of the information held. You may also have a right to receive the information in a structured, commonly used and machine readable format and transfer or have this information transferred to another data controller.
If you wish to raise a complaint on how your personal data is handled, you can contact the Scottish Government Data Protection Officer who will investigate the matter. The Data Protection Officer is the Head of Information and Assurance, who can be contacted at The Scottish Government, V Spur, Saughton House, Broomhouse Road, Edinburgh, EH11 3XD.
If you are not satisfied with the response or believe we are processing your personal data not in accordance with the law you may make a complaint to the Information Commissioner’s Office (ICO).
The Information Commissioner’s Office – Scotland
45 Melville Street
Telephone: 0303 123 1115