Audit Scotland logo

Privacy statement

Privacy statement - Audit Scotland

This privacy notice tells you what to expect when Audit Scotland collects personal information and explains how we protect your privacy. It applies to information we collect about:

This privacy notice was written with brevity and clarity in mind. Therefore, it does not provide exhaustive detail of all aspects of our collection and use of personal information. If you have any queries or concerns about our use of your personal information or this notice, please contact us at dataprotection@audit-scotland.gov.uk

Job applicants, current and former Audit Scotland employees

The information you provide as part of the application process will be treated in confidence and will be shared only with members of the selection panel, Human Resources and our third party candidate management specialists for the purposes of the recruitment process. Where we want to disclose information about you to other third parties, for example where we want to take up a reference, we will not do so without informing you beforehand unless the disclosure is required by law.

Personal information about unsuccessful candidates will be held for a maximum period of 18 months after the recruitment campaign has been completed, it will then be destroyed or deleted. This information is used solely for monitoring purposes to form statistical reports on our recruitment activities.

Once a successful candidate has taken up employment with Audit Scotland, they should refer to the Human Resources staff data handling notice in the staff handbook. Once employment with Audit Scotland has ended, we will retain your information in accordance with the requirements of our retention schedule and then delete it.

Back to top

Our statutory work

When Audit Scotland undertakes audit work under our statutory powers, we may collect information from Scottish public bodies that contain some personal data.

Personal data may be used in audit tests (such as when testing payrolls or housing benefit systems) and to help form judgments and report on financial, Best Value and Value for Money audits and to promote economy, efficiency and effectiveness in the use of public money. We will only use this information for the purpose it was collected. We will hold it securely and when it is no longer needed it will be disposed of in accordance with our retention schedule.

Please note that a separate privacy notice is available for our National Fraud Initiative (NFI) work and is available within the NFI section of our website here.

Back to top

People who make a complaint or correspond with us

When we receive a complaint, correspondence or concerns about a public body we audit, data subject access or complex freedom of information request, we hold the correspondence in a file.

We will only use the personal information we collect to process the complaint, correspondence or request. However, we may have to disclose your details when investigating it. If you do not want your personal information disclosed we will try to respect this. However, it may not be possible to investigate your request on an anonymous basis. We compile and publish statistics showing information such as the number of complaints and correspondence we receive, but not in a form which identifies anyone.

We will keep information provided to us in complaints, correspondence, data subject access or complex freedom of information requests in line with our retention policy.

Back to top

Visitors to our website

There may be instances where it is necessary for us to communicate with visitors to our website for administrative or operational reasons. Where we collect specific information from you for this purpose, we will not pass it on to any other organisation.

We also collect standard internet log information and details of visitor behavior patterns when someone visits our website. We do this to find out things such as the number of visitors to the various parts of our site, to monitor the download of our reports and publications and to help improve the service we provide.

This data collection process is carried out electronically in the background and therefore visitors to our website may not be aware that it is taking place. We believe that this process is not intrusive to the visitors’ privacy as we do not make any attempt to find out the identities of visitors to our website. The standard internet log information collected will only be used for the aforementioned purposes and will not be passed on to any other organisation.

Back to top

Use of cookies by Audit Scotland

We use cookies to collect standard internet information from visitors to our website. Cookies are small text files that are placed on your computer when you visit most websites. They are widely used to help websites function, work more efficiently and make the visit to the site more enjoyable, as well as providing information to the sites owner.

Audit Scotland’s website uses Google Analytics, which is a web analysis tool to collect the standard visitor log information we need to help us improve your visit experience. Google Analytics uses first-party cookies for this purpose and an overview of Google Analytics and privacy at Google provides more information.

We also send a cookie to your computer if you choose to use the text size controls on our website, then whenever you visit our website it maintains the setting you have chosen. Below is a list of cookies used on our website and what they are used for.

Cookies used on Audit Scotland website
Cookies Name Purpose
Google Analytics _utma
_utmb
_utmc
_utmz
These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.
Audit Scotland style This cookie is used for the text size controls on our website, and then whenever you visit our website it maintains the settings you have chosen.
Cookie control civicCookieControl Cookie Control: When you click to turn cookies on or off on the Cookie Control user interface, a cookie is set in order to remember your preference.
civicAllowCookies
civicShowCookieIcon
Browsealoud rwebooks-various BrowseAloud is a tool that reads text. It uses cookies to enable this functionality and these are necessary for the website to work properly.

To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org. Deleting or blocking our cookies may result in our website not working properly.

You can opt out of being tracked by Google Analytics here.

Audit Scotland’s website search engine
The search engine on our website is designed to be as powerful and easy to use as other popular search engines. It does not collect information from visitors to our website.

Back to top

Other websites

Our website may contain links to other websites which are outside our control and are not covered by this notice. If you access other sites using the links provided, the operators of these sites may collect information from you which will be used by them in accordance with their privacy notice, which may differ from ours.

Back to top

Access to personal information

You have a right to access the personal data that we hold about you by making a ‘subject access request’ under the Data Protection Act 1998. There will be a £10 charge for this and you will be asked for proof of identity. A form for this purpose can be downloaded here (DOC | 79KB), or alternatively, you can write to the Corporate Governance Manager, Audit Scotland, 110 George Street, Edinburgh EH2 4LH.

If we do hold information about you we will:

  • give you a description of it
  • tell you why we are holding it
  • tell you who it could be disclosed to
  • let you have a copy of the information in an intelligible form.

Changes to this privacy notice

We keep our privacy notice under regular review. This privacy policy was last updated in July 2014.

Back to top