Privacy policy
This privacy notice explains how data.gov.scot collects and uses personal information.
What information we collect
data.gov.scot is provided by the Scottish Government Open Data Team. Most people can use data.gov.scot without providing any personal information.
When you use the data.gov.scot we may collect:
IP address information
cookie identifiers
information about your device and browser
information about how you use the site, including pages viewed, searches performed and links selected
session information used to operate and secure the service
The datasets published on data.gov.scot are intended to be open data and should not contain personal information.
For information about the cookies used by data.gov.scot, see our Cookies page.
How we use your information
We use this information to:
operate and maintain the service
keep the service secure
understand how people use data.gov.scot
improve the website and its content
understand how datasets are being discovered and accessed
produce anonymous statistics about service usage
We will not:
sell or give your data to third parties
share your data with third parties for marketing purposes
Why we are allowed to use your information
The Scottish Government processes personal information under Article 6(1)(e) of the UK General Data Protection Regulation (UK GDPR).
This allows us to process personal information where it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Scottish Ministers.
Who we share information with
We work with Storm ID as our contracted service provider to support the operation and maintenance of data.gov.scot. They process information only on behalf of the Scottish Government and under contractual arrangements that meet UK GDPR requirements.
We may also share information where required to do so by law.
Where your information is stored
data.gov.scot is hosted on Scottish Government cloud infrastructure within Amazon Web Services (AWS) data centres located in the United Kingdom.
How long we keep your information
We keep personal information only for as long as necessary to operate, secure and improve the service.
Retention periods vary depending on the type of information being processed. Website logs (90 days), session information (duration of session) and analytics data (14 months) are retained only for defined periods and are then deleted automatically.
Your data protection rights
You have the right to:
see your information – through a subject access request
improve your data – if you think the information we have is inaccurate or incomplete
delete your information – if you do not want us to use your data anymore
object to the use of your data – depending on the circumstances
Complaints
If you have concerns about the way we process and handle your personal data, in the first instance you should raise your concerns with our Data Protection Officer by email to DataProtectionOfficer@gov.scot
If you feel that your data has been collected or processed unlawfully, you have the right to raise a complaint with the Information Commissioners Office:
The Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk
You can also report any concerns online
Contact
If you have questions about this service, please email the Scottish Government Open Data Team contact@data.gov.scot