This privacy notice tells you what to expect when Audit Scotland collects personal information and explains how we protect your privacy. It applies to information we collect about:
This privacy notice was written with brevity and clarity in mind. Therefore, it does not provide exhaustive detail of all aspects of our collection and use of personal information. If you have any queries or concerns about our use of your personal information or this notice, please contact us at firstname.lastname@example.org
The information you provide as part of the application process will be treated in confidence and will be shared only with members of the selection panel, Human Resources and our third party candidate management specialists for the purposes of the recruitment process. Where we want to disclose information about you to other third parties, for example where we want to take up a reference, we will not do so without informing you beforehand unless the disclosure is required by law.
Personal information about unsuccessful candidates will be held for a maximum period of 18 months after the recruitment campaign has been completed, it will then be destroyed or deleted. This information is used solely for monitoring purposes to form statistical reports on our recruitment activities.
Once a successful candidate has taken up employment with Audit Scotland, they should refer to the Human Resources staff data handling notice in the staff handbook. Once employment with Audit Scotland has ended, we will retain your file in accordance with the requirements of our retention schedule and then delete it.
When Audit Scotland undertakes audit work under our statutory powers, we may collect information from Scottish public bodies that contain some personal data.
Personal data may be used in audit tests (such as when testing payrolls or housing benefit systems) and to help form judgments and report on financial, Best Value and Value for Money audits and to promote economy, efficiency and effectiveness in the use of public money. We will only use this information for the purpose it was collected. We will hold it securely and when it is no longer needed it will be disposed of in accordance with our retention schedule.
Please note that a separate privacy notice is available for our National Fraud Initiative (NFI) work and is available within the NFI section of our website here.
When we receive a complaint, correspondence or concerns about a public body we audit, data subject access or complex freedom of information request, we hold the correspondence in a file.
We will only use the personal information we collect to process the complaint, correspondence or request. However, we may have to disclose your details when investigating it. If you do not want your personal information disclosed we will try to respect this. However, it may not be possible to investigate your request on an anonymous basis. We compile and publish statistics showing information such as the number of complaints and correspondence we receive, but not in a form which identifies anyone.
We will keep information provided to us in complaints, correspondence, data subject access or complex freedom of information requests in line with our retention policy.
There may be instances where it is necessary for us to communicate with visitors to our website for administrative or operational reasons. Where we collect specific information from you for this purpose, we will not pass it on to any other organisation.
We also collect standard internet log information and details of visitor behavior patterns when someone visits our website. We do this to find out things such as the number of visitors to the various parts of our site, to monitor the download of our reports and publications and to help improve the service we provide.
This data collection process is carried out electronically in the background and therefore visitors to our website may not be aware that it is taking place. We believe that this process is not intrusive to the visitors’ privacy as we do not make any attempt to find out the identities of visitors to our website. The standard internet log information collected will only be used for the aforementioned purposes and will not be passed on to any other organisation.
Audit Scotland’s website uses Google Analytics, which is a web analysis tool to collect the standard visitor log information we need to help us improve your visit experience. Google Analytics uses first-party cookies for this purpose and an overview of Google Analytics and privacy at Google provides more information.
We also send a cookie to your computer if you choose to use the text size controls on our website, then whenever you visit our website it maintains the setting you have chosen. Below is a list of cookies used on our website and what they are used for.
|These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.|
|Audit Scotland||style||This cookie is used for the text size controls on our website, and then whenever you visit our website it maintains the settings you have chosen.|
|Cookie control||civicAllowCookies||Cookie Control: When you click to turn cookies on or off on the Cookie Control user interface, a cookie is set in order to remember your preference.|
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org. Deleting or blocking our cookies may result in our website not working properly.
Audit Scotland’s website search engine
The search engine on our website is designed to be as powerful and easy to use as other popular search engines. It does not collect information from visitors to our website.
Our website may contain links to other websites which are outside our control and are not covered by this notice. If you access other sites using the links provided, the operators of these sites may collect information from you which will be used by them in accordance with their privacy notice, which may differ from ours.
You have a right to access the personal data that we hold about you by making a ‘subject access request’ under the Data Protection Act 1998. There will be a £10 charge for this and you will be asked for proof of identity. A form for this purpose can be downloaded here (DOC | 79KB), or alternatively, you can write to the Corporate Governance Manager, Audit Scotland, 110 George Street, Edinburgh EH2 4LH.
If we do hold information about you we will: