David Green MSP privacy notice
The office of David Green MSP manages your data in line with our responsibilities under the UK General Data Protection Regulation (UK GDPR), as supplemented by the Data Protection Act 2018. This Privacy Notice explains what personal data we collect from you when you engage with us and how we use your information.
SCOPE
This privacy notice relates to the personal data processed by the Office of David Green, Member of the Scottish Parliament for Caithness, Sutherland and Ross. All data subjects whose personal data is collected are covered, in line with the requirements of GDPR.
Who is collecting your data:
The Office of David Green MSP, the current Member of the Scottish Parliament for Caithness, Sutherland and Ross. The office of David Green MSP undertakes the duties and functions of an elected Member of the Scottish Parliament.
For the purposes of UK data protection law, David Green MSP is the Data Controller of all personal data sent to the office of David Green MSP. The Office of David Green MSP is responsible for ensuring that this notice is made available to data subjects.
Contact details:
- David.Green.MSP@parliament.scot
- Telephone number: 0131 348 5819
- The Scottish Parliament, Holyrood, Edinburgh, EH99 1SP
- Website Address: www.highlandlibdems.org.uk/davidgreen/privacy-notice
What data do we collect:
When you contact David Green MSP, visit our office, or access our website, we may collect, store and use your personal data. This includes your name, address, phone number, email address and other personal contact details; photographs and images including CCTV footage and proof of identity; personal data that you share when you contact us by letter, email, phone or other means; personal data required for progressing casework or responding to your enquiry; and your IP address and information on how you use our website.
How the office collects your information:
Most of the personal data we process is provided to us directly by you. This may happen because you have corresponded with us including by telephone, visited our office, accessed our website, attended a surgery, completed a survey, or applied to work for us.
What does this Office do?
The office carries out the duties and functions of an elected Member of the Scottish Parliament. As part of this work, the office responds to enquiries from constituents and undertakes casework to answer these enquiries on behalf of constituents. To do this we must process individuals’ personal data.
The office may create and maintain an opt-in mailing list for sending newsletters and other information relevant to David Green and his duties as a Member of the Scottish Parliament. If you join this email list through this website, social media outlets or emails from David Green, we will provide an unsubscribe option which you can use to withdraw from the list at any time.
On occasion David Green MSP will send out letters about issues of local concern or to publicise surgeries and public meetings to constituents in a specific geographical area or community. This can be done using data from the full electoral roll which is provided to David Green in his role as Member of the Scottish Parliament.
The office may also receive your personal information indirectly from other sources.
Electoral Registration Officer
David Green MSP is an elected representative for Caithness, Sutherland and Ross. We are therefore entitled to a copy of the full Electoral Register for Caithness, Sutherland and Ross. This data is used to cross reference correspondence with constituents and for sending letters related to David Green MSP’s function as the Member of the Scottish Parliament for Caithness, Sutherland and Ross.
Other elected representatives
We may be sent your data by other elected representatives, including Members of the UK Parliament, other Members of the Scottish Parliament, or councillors. This may be because you are our constituent but not theirs, or because the issue raised can only be pursued by a Member of the Scottish Parliament. We will ask for your consent to process data we receive from other elected representatives.
Third-party contact forms
The office may receive your data from third parties who you have used to contact us. This may include using a contact form for our office provided by an external site such as WriteToThem, or signing up to a campaign group who may contact us on your behalf as part of their campaign.
The office uses this data to provide a response or inform you about our work on the issues raised. By completing a contact form or signing up to a campaign, we assume, unless otherwise informed, that you have provided consent for us to process your data.
Use of your personal data and lawful bases
Under GDPR, personal data can only be processed using a lawful basis defined in Article 6. David Green MSP will process your data using the lawful basis of consent under Article 6(a).
We process your personal data so we can take up and progress casework on your behalf, respond to your correspondence, provide information on David Green MSP’s work as your Member of the Scottish Parliament, and ensure the security of our office through CCTV.
The reason we collect your personal data, also known as the lawful basis, defines the purpose for processing the personal information. These bases include where we have your consent to do so, and where the processing is necessary for our legitimate interests whilst considering your interests and rights to privacy.
Special Categories of Personal Data
It may be the case that you disclose personal data, as part of your casework or policy concern, classified under the further condition for processing special categories of personal data. Special categories include racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic and biometric data, health data, and data concerning sex life or sexual orientation.
This data can only be processed using a lawful basis under Article 6 and a condition of processing defined in Article 9. David Green MSP will process such data under Article 6(a) (Consent) and Article 9(a) (Consent).
The condition will depend on the circumstances but may include processing where we have your explicit consent to use the personal data or where it is necessary for substantial public interest, specifically where an elected representative is responding to requests.
Who we share your personal data with
Where necessary or with your consent, we may share your personal data with government departments, local authorities and other public bodies, and with other organisations or businesses which are the subject of your request or enquiry.
We may also share your data when there is a legal requirement to do so, for example with the Police or similar organisations for investigation or security purposes.
Other than in the circumstances above, we will not share your personal data with other organisations or individuals without your explicit consent.
Storage and security
We take the security of your personal data seriously. All personal data you provide to us will be stored securely.
Electronic data is stored securely on either our Parliamentary IT system or our casework system in full compliance with GDPR.
Physical data will be held securely in either our constituency or Scottish Parliament office. Unless otherwise requested, this data will be scanned onto our IT system and then securely shredded.
We will only keep your personal data for as long as it is necessary to fulfil the purposes described in this notice. Unless you request otherwise, we will retain your data for up to five years in case you get in touch again.
In the event of David Green MSP no longer being the Member of the Scottish Parliament for Caithness, Sutherland and Ross, all data held by our office will be destroyed.
Your rights as a data subject
You have several rights in relation to your data and can choose how it is used. Under data protection law, you have the right to ask us for copies of your personal information; ask us to rectify personal information you think is inaccurate; ask us to complete information you think is incomplete; ask us to erase your personal information in certain circumstances; ask us to restrict the processing of your personal information in certain circumstances; object to the processing of your personal information in certain circumstances; and ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
Full details on your rights are available from the regulator, the Information Commissioner’s Office.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
If you wish to make a request please contact us at:
David.Green.MSP@parliament.scot
Telephone number: 0131 348 5819
The Scottish Parliament, Holyrood, Edinburgh, EH99 1SP
Right to complain
If you are unhappy with our processing of your personal data please contact our data controller:
David Green MSP
David.Green.MSP@parliament.scot
Telephone number: 0131 348 5819
The Scottish Parliament, Holyrood, Edinburgh, EH99 1SP
You also have the right to complain to the supervisory authority, the Information Commissioner’s Office (ICO):
ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone number: 01625 545 745