FOI and EIR Privacy Statement

Who we are?

Glasgow City Council is a local authority established under the Local Government etc. (Scotland) Act 1994. Its head office is located at City Chambers, George Square, Glasgow G2 1DU, United Kingdom, and you can contact our Data Protection Officer by post at this address, by email at: dataprotection@glasgow.gov.uk, and by telephone on  0141 287 1055.

Why do we need your personal information and what do we do with it?

You are giving us your personal information to allow us to process your information request and provide you with a response under the Freedom of Information (Scotland) Act 2002 or the Environmental Information (Scotland) Regulations 2004.  We will also need to process your personal information if you ask us to review the way that we have handled your request for information or if you make an appeal to the Scottish Information Commissioner.  We also use your information to verify your identity where required, contact you by post, email or telephone and to maintain our records.

Legal basis for using your information

You are entitled to make requests for information that we hold as part of our role as your local authority.  You can find more details of our role on our website at www.glasgow.gov.uk.   Processing your personal information is necessary for (i) the performance of a task carried out in the public interest by the council; and  (ii) the compliance with our legal obligations under the Freedom of Information (Scotland) Act 2002 and the Environmental Information (Scotland) Regulations 2004. Where you provide us with more sensitive personal information about you we will process this information for reasons of substantial public interest as set out in the Data Protection Act 2018.

Who do we share your information with?

We are legally obliged to safeguard public funds so we are required to verify and check your details internally for fraud prevention. We may share this information with other public bodies (and also receive information from these other bodies) for fraud checking purposes.  We are also legally obliged to share certain data with other public bodies, such as HMRC and will do so where the law requires this.  We will also generally comply with requests for specific information from other regulatory and law enforcement bodies where this is necessary and appropriate.  Your information is also analysed internally to help us improve our services.  This data sharing is in accordance with our Information Use and Privacy Policy and covered in our full privacy statement on our website. It also forms part of our requirements in line with our Records Management Plan approved in terms of the Public Records (Scotland) Act 2011.

Where you make an appeal to the Scottish Information Commissioner we are legally obliged to share your information with them.  In some circumstances, your request may also be shared with our Arms' Length External Organisations (ALEOs).  A full list of current ALEOs can be found here: https://www.glasgow.gov.uk/index.aspx?articleid=18350. 

How long do we keep your information for?

We only keep your personal information for the minimum period amount of time necessary.  Sometimes this time period is set out in the law, but in most cases it is based on the business need.  We maintain a records retention and disposal schedule which sets out how long we hold different types of information for.   You can view this on our website at www.glasgow.gov.uk/rrds or you can request a hard copy from the contact address stated above.

Your rights under data protection law

• access to your information - you have the right to request a copy of the personal information that we hold about you.

• correcting your information- we want to make sure that your personal information is accurate, complete and up to date. Therefore you may ask us to correct any personal information about you that you believe does not meet these standards.

• Deletion of your information-you have the right to ask us to delete personal information about you where:

                      I.            you think that we no longer need to hold the information for the purposes for which it was originally obtained

                    II.            you have a genuine objection to our use of your personal information - see Objecting to how we may use your information below
                  III.            our use of your personal information is contrary to law or our other legal obligations.

Objecting to how we may use your information

You have the right at any time to tell us to stop using your personal information for direct marketing purposes.

Restricting how we may use your information

In some cases, you may ask us to restrict how we use your personal information.  This right might apply, for example, where we are checking the accuracy of personal information that we hold about you or we are assessing the objection you have made to our use of your information.  This right might also apply if we no longer have a basis for using your personal information but you don't want us to delete the data.  Where this right is realistically applied will mean that we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.

Please contact us as stated above if you wish to exercise any of these rights.

Complaints

We aim to directly resolve all complaints about how we handle personal information. However, you also have the right to lodge a complaint with the Information Commissioner's Office, who can be contacted by post at:  Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. By phone on 0303 123 1113 (local rate) or 01625 545 745. Visit their website for more information at- https://ico.org.uk/concerns

More information

For more details on how we process your personal information visit www.glasgow.gov.uk/privacy