We may disclose your information to trusted third parties who act for us for the purposes set out in this notice or for purposes approved by you including the following:
- our contractors to undertake repairs, works and maintenance;
- organisations providing benefits advice and support;
- Police Scotland and the local authority anti-social behaviour department in relation to complaints involving anti-social or other criminal behaviour
- If we enter into a joint venture with or merge with another business entity, your information may be disclosed to our new business partners or owners.
Unless we have a lawful basis for disclosure, we will not otherwise share, sell or distribute any of the information you provide to us without your consent.
Special categories of personal data means information about your racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; health; sex life or sexual orientation; criminal convictions, offences or alleged offences; genetic data; or biometric data for the purposes of uniquely identifying you.
The "special categories" of sensitive personal information referred to above require higher levels of protection. We need to meet additional legal requirements for collecting, storing and using this type of personal information.
When we process your personal data we take steps to make sure that your personal information is kept secure and safe. This includes ensuring there is adequate IT and physical security for all locations that data is stored and we ensure that these measures are tested on a regular basis to ensure compliance. All information is kept in line with our data protection policies and procedures, which are available on our website.
We review our data retention periods regularly and will only hold your personal data for as long as is necessary for the relevant activity, or as required by law / best practice or as set out in any relevant contract we have with you. Our full retention guidelines are available on our website, or a copy can be requested from our registered office.
It is important that the information we hold about you is accurate and current. Please keep us informed of any changes on the data we may hold about you. Under data privacy law, data subjects have a number of rights:
The right to be informed: Through the provision of our privacy notice, we will be open and transparent about how and why we use your personal information.
The right of access: You have a right to ask us what personal information we hold about you and to request a copy of your information. This is known as a ‘subject access request’ (SAR). More information about our SAR process can be found on our website.
The right to rectification: You can ask us to rectify your personal data if it is inaccurate or incomplete.
The right to erasure: The right to erasure is also known as ‘the right to be forgotten’. In some circumstances, you can ask us to delete or remove personal data where there is no compelling reason for its continued processing.
The right to restrict processing: In some circumstances you can ask us to restrict processing, for example (1) if you disagree with the accuracy of personal data, (2) where you are withdrawing consent for data processing and (3) if we’re processing your data on the grounds of legitimate interests.
The right to data portability: If the situation arises where it would be helpful for you to move, copy or transfer personal data we hold about you, across different services, you may be able to ask us to do this.
