Subject Access Requests Privacy Notice
Who will process your personal data?
The personal information you provide when making a Subject Access Request (SAR) will be used by East Dunbartonshire Council to provide you with the response to your request.
Your personal information will be sent to the area(s) of the Council best placed to locate the information you require. It will not be shared outwith the Council.
What will your personal information be used for?
Your personal information will only be used to provide you with the response to your Subject Access Request.
What is the Council’s lawful basis for using your personal information?
The Council has legal obligations to use your personal information. These obligations are set out under the following legislation:
The UK General Data Protection Regulation (UK GDPR).
In order to comply with the legislation and provide you with the information you require the Council must use your personal information.
How long will your personal information be held for?
The Council uses the Scottish Council on Archives Records Retention Schedules to manage the length of time it keeps information. Further information on these retention schedules can be found on the Scottish Archives website.
The information you have provided is classed as
- 17.001.001: Data Protection - record of subject access request processing. Destroy 3 years after completion of request
- 17.001.002: Data Protection - record of subject access request processing where an appeal is made to the ICO. Destroy 6 years after outcome of appeal.
What are my rights?
You have the right to access the personal information the Council holds about you. This right is called a Subject Access Request, often referred to as a SAR.
You can receive a copy of your personal data held by the Council, details on why it is being used, who it has been / will be shared with, how long it will be held for, the source of the information and if the Council uses computer systems profile or take decisions about you. Details on how to submit a Subject Access Request can be found on the Subject Access Request page.
You have the right to request the Council correct any information held about you that is inaccurate.
You have the right to request that the Council delete the personal information about you. This right is known as the right to be forgotten.
You have the right to request that the Council stops using your personal information, while retaining a copy of it.
You have the right to object to the Council’s use of your personal information. The Council will have to demonstrate why it is appropriate to continue to use your personal data.
Question or concerns
Should you have any questions or concerns about the Council’s handling of your personal data you can contact the Council’s Data Protection Officer, Karen Donnelly, using the below noted details, who will be happy to discuss.
Telephone Number: 0300 123 4510
Email: dpo@eastdunbarton.gov.uk
Address:
12 Strathkelvin Place,
Kirkintilloch,
G66 1TJ
You have the right to complain to the Information Commissioner’s Office (ICO) should you be unhappy with the way the Council has processed your personal data. Details on how to report a concern can be found on the ICO website - make a complaint.