Social Security Scotland - Adult Disability Payment - General Policy

Thank for registering to attend our Adult Disability Payment event. Please read the information below carefully to understand how Social Security Scotland will process personal data you provide in connection with this event.

The personal data you provide e.g. names, email addresses and Job titles are necessary for us to run the event. The additional data we would like you to provide is discretionary and will help us ensure we are reaching a range of relevant stakeholders across the whole of Scotland.

The legal basis for the Scottish Government processing your data is GDPR Article 6 (1) (a). This means that we require you – the data subject – to give us consent to process your personal data.

What do we do with your data?

We collect your data for three main purposes:

1 – To communicate with you about an event or intervention that you have registered for. This may include sending out pre-event information, and follow up emails, for example event evaluations.

2 – To update you on upcoming and future Social Security Scotland events, and share opportunities that may be of interest.

3 – To demonstrate the spread and impact, for example, by sharing the number of people from a specific organisation or sector for evaluations and reporting.

Your data will be used as follows:

1 – Your data will be shared with those organising the event you have registered for, to allow them to plan the event and communicate with you about any specifics.

2 – If you consent, your data will be stored to allow Social Security Scotland to contact you about future events or opportunities which may be of interest.

3 – We may be asked to report back to organisations and provide data, for example sharing with a local authority the number of their staff who have participated in a specific event. We will not directly share your data without your consent. This means that we will not share delegate lists or network lists with third parties who request access. If a third party wishes to communicate with you, for example about an event or opportunity, we will send a message to you on their behalf.

Currently, we use a third party website, Eventbrite, to collate registrations for events. You can read how Eventbrite complies with GDPR on their website: https://www.eventbrite.com/support/articles/en_US/Troubleshooting/eventbrite-eu-data-protection

We also use a third party platform, Mail chimp, to create and send newsletters to some of our mailing lists. You can view how Mail chimps complies with GDPR here: https://mailchimp.com/help/mailchimp-european-data-transfers/

The Scottish Government has a Data Protection regime in place to oversee the effective and secure processing of your personal data.

How long is your data kept?

Your personal data is retained for as long as the Scottish Government has a relationship with you and the data is required to support the service that we offer – in this case the networks, events and other opportunities provided by Social Security Agency. This means that we will maintain contact with you unless you withdraw consent.

What are your rights?

For more information on how Social Security Scotland manages your personal data and for information on how to exercise your rights under the General Data Protection Regulation, please see our privacy policy here: https://www.mygov.scot/social-security-data