Privacy statement: My Support, My Choice Survey User experiences of Self-directed Support in Scotland.
EU General Data Protection Regulation (GDPR) Notice:
This is an anonymous survey, but we will ask you for personal data including your health status and the local authority area you live in. If you choose to respond to the survey, the questions will capture your views and opinions. You do not need to answer all the questions or every part of any question that you answer. Should you choose to use examples detailing your personal experiences you should be aware that this might disclose information about you that you may not intend to reveal, such as your religion, disability, sexual orientation etc. As a result, we would like to bring your attention to this privacy notice.
We will use your personal data for the following purposes:
Information you provide in the survey will generally inform trends in Self-directed Support (SDS) implementation which will be included in the My Support My Choice project report written by the Health and Social Care Alliance Scotland (the ALLIANCE) and Self Directed Support Scotland (SDSS). Your survey answers be anonymised, and you will not be identified. This report will be shared on the ALLIANCE and SDSS’ websites and in social media and quoted in other ALLIANCE and SDSS reports.
The purpose of the report is to share people’s experiences of SDS and draw broad conclusions. We may use what you say as a quote but with all reasonable care to avoid your identity potentially being disclosed. The report will be shared with key stakeholders in order to influence local and national Government and other leaders. We will also use the report to learn from social care users in order to find out how SDS works in practice; and to promote existing good practice and changes that will enhance the experience of SDS and social care users in Scotland.
What is our legal basis for holding and using your personal data?
Data protection laws require us to have a legal reason for collecting, holding and using your personal data. We may have contacted you to do this survey through your local authority, or a support service that you use, and in this case we have utilised your contact details on a Public Task basis for the purpose of improving the management of social care. We do not hold or retain any contact details after writing to you. If you then choose to undertake and submit this survey, we rely on your explicit consent as the legal reason to collect, hold and use the information you provide us. By providing us with your personal data (relating to your health, racial or ethnic origin, religious or other beliefs or sexual orientation) and the personal data of other individuals via our websites and online survey, you consent to it being used by us as described in this policy.
You have the right to withdraw your consent at any time and you can do this by letting us know by any means convenient to you (see also further information and contact section below). However, you must note that should you withdraw your consent after reports have been published, the ALLIANCE and SDSS may not reasonably be able to control how others use existing copies. For example, if a response of yours has already been included in reports and publications, the ALLIANCE and SDSS will only be able to stop using the information in future revisions of those publications.
How will we process your personal data?
If we have written to you to ask you to take part, in some cases your contact details will have been passed to a document mailing service for this purpose only. This service satisfies the highest standards of data security with ISO 27001 certification and is contracted to securely delete this data on completion of writing to you. In paper form your personal data will be managed and stored securely in the paper filing systems of the Health and Social Care Alliance Scotland (the ALLIANCE) and Self Directed Support Scotland (SDSS) until it is keyed into a private database controlled and managed by SDSS and stored in EU based servers. This database utilises a US platform called Salesforce and is fully GDPR compliant and EU-US Privacy Shield certified. Paper copies are securely destroyed directly after processing. By participating in the survey, you are consenting to us processing your personal information for the purposes above. Consent is our legal basis for processing your personal information and you can withdraw it at any time. The online survey,* telephone support survey and paper survey processing is conducted by a platform called Formtitan, hosted with Amazon Web Services in Frankfurt. No data is stored by this service but it is passed automatically to our Salesforce database as above. Some extra processing, like removal of postcode data is done at this stage.
*Your IP address will not be collected by this survey
How long do we keep your personal data?
Once the report has been made public it will be accessible worldwide.
All collated data and specific responses quoted in the report that have been made public will remain so permanently. Individual survey responses will be kept for a maximum of 2 years for the purpose of evidencing the report and then confidentially destroyed through the electronic and paper filing systems of the ALLIANCE and SDSS (paper copies of your personal data will be confidentially shredded and disposed after processing electronically as above).
Your Rights
Under certain circumstances, the law gives you the right to request:
• A copy of your personal data and to check that we are holding and using it in accordance with legal requirements.
• Correction of any incomplete or inaccurate personal data that we hold and use about you.
• Deletion of your personal data where there is no good reason for us continuing to hold and use it. You also have the right to ask us to do this where you object to us holding and using your personal data (details below).
• Temporarily suspend the use of your personal data, for example, if you want us to check that it is correct or the reason for processing it.
• The transfer of your personal data to another organisation.
The ALLIANCE and SDSS and their sub-contractors will not distribute or disclose your personal information to third parties unless we have your written permission or are required by law to do so. The ALLIANCE and SDSS complies with the Data Protection Act 2018 and GDPR 2018 when handling your personal information.
It is important that the personal data that we collect, hold and use about you is accurate and current. Please keep us informed of any changes by contacting us.
Further information and contact
For further information on how your personal data is used, how we maintain the security of your personal data, and your rights to access information we hold on you, please contact:
Jess Wade, Project Manager, Self Directed Support Scotland, 57 Albion Road, Norton Park Centre, Edinburgh EH7 5QY (Email: jess@sdsscotland.org.uk)
Lucy Mulvagh, Director of Policy and Communications, the ALLIANCE, 349 Bath Street, Glasgow, G2 4AA (Email: lucy.mulvagh@alliance-scotland.org.uk)
Complaints
If we have not been able to resolve any issue you have regarding the use of your data, you have the right to complain to the ICO https://ico.org.uk/concerns/
For our full privacy policy, please visit our website https://www.sdsscotland.org.uk/privacy/