Privacy and Data Protection

sportscotland is a privacy conscious organisation and is strongly committed to your right to privacy. That is why we have drafted a Privacy and Data Protection Statement, which follows guidelines set out in the Data Protection Act 1998.

The Data Protection Act 1998

The Data Protection Act 1998 came into force on 1 March 2000. It set rules for processing personal information and applies to structured paper records as well as data held on computers. Once the Freedom of Information (Scotland) Act 2002 comes into force on 1 January 2005, the provisions of the Data Protection Act 1998 will apply to all records, including those structured other than by reference to the data subject, and completely unstructured files.

How does the Data Protection Act affect sportscotland?

The Data Protection Act states that those who record and process personal information must be open about how the information is used and must follow the eight principles of ‘good information handling’.

These principles state that data must be:

1. Fairly and lawfully processed
2. Processed for limited purposes
3. Adequate, relevant and not excessive
4. Accurate
5. Not kept for longer than is necessary
6. Processed in line with your rights
7. Secure, and
8. Not transferred to countries without adequate protection.

By law, data controllers, including sportscotland, have to keep to these principles.

If you believe in any way that sportscotland is not processing your personal data in accordance with these principles, please contact sportscotland’s Data Protection Officer, Lynda Vince, at the address listed on the contacts page.

How does sportscotland collect data?

There are several means by which sportscotland collects personally identifiable data, for example:

• Through a recruitment application form
• Through an application for grant funding
• Acceptance for inclusion on a mailing list or database
• As a result of you interacting with sportscotland (e.g. by undertaking research for sportscotland, or by entering into email or telephone correspondence with an employee of sportscotland)
• Through obtaining information for HR records

All personally identifiable information provided to sportscotland is processed in accordance with the principles of the Data Protection Act 1998.

Is information passed to third parties?

It is sportscotland policy to only disclose information to third parties if explicitly required to do so by United Kingdom Law.

sportscotland will obtain your consent before passing on any information to any third parties.

sportscotland does not collect or compile personally identifying information for dissemination or sale to external parties for marketing purposes or host mailings on behalf of third parties.