Feed Law Enforcement Privacy Notice

What we need

Food Standards Scotland (FSS) is the Data Controller of the personal information you provide to us on this form. The information we collect about you includes name, postal address, email address and telephone number.

Why we need it

As Data Controller, we need to collect this information for the purposes of Feed Law Enforcement. These include:

• Regulation (EU) 2017/625 on Official Controls performed to ensure the verification of compliance with Feed Law, which  requires that FSS carries out its activities with a high level of transparency, making relevant information available to the public as soon as possible; 
• Maintenance of an up to date list of registered Feed Business Establishments within Scotland and to divulge this information for the purposes of ensuring animal and public health and the effective enforcement of Feed Law. This list is not published;
• Publication of the details of approved feed business establishments on the Food Standards Scotland website;
• The Food (Scotland) Act 2015, enables FSS to set performance standards, report on enforcement action by others and require relevant information from its Delivery Agents;
• The Official Feed and Food Controls (Scotland) Regulations 2009, allows the exchange and provision of information between enforcement authorities for the execution and enforcement of relevant Feed Law, including Feed Business information;
• FSS is required to fulfil the statutory obligations required by Article 113 of Regulation (EU) 2017/625, which places a requirement on it to provide the information specified in that Article and to report to the European Commission, and
• FSS maintains a national database that can be accessed by both Food Standards Scotland and its Delivery Agents to which the information pertains. The reporting toolset allows information to be strategically analysed, allowing FSS and authorised Delivery Agents to adhere to the principles of the Scottish Regulators’ Strategic Code of Practice.

We will only collect the data that we need as required by the above regulations and legislations, and not collect any personal information from you that we do not need.

What we do with it

The information on this form will be retained by FSS, and where relevant Delivery Agent for the duration of your business registration. Additionally, if your business closes, or your registration details are otherwise amended then this information will continue to be retained for a maximum of six years following notification of the closure or the amendment of your registration details. 

The information collected on your business relating to Feed Law enforcement activity will be retained by FSS for a maximum of six years for Freedom of Information purposes and the monitoring of enforcement action by Delivery Agents.

FSS have put in place appropriate and adequate technical and organisational measures to protect your personal information.

FSS data is located within the European Union, on cloud based services procured through the government framework agreements, and assessed against the national cyber security centre cloud security principles. We want to assure you that no third parties have access to your personal information unless the Law allows them to do so.

What we may also be required to do with it 

The information may be shared with other Regulators in line with the principles of the Scottish Regulators Strategic Code of Practice for compliance and risk mitigation purposes.  This is limited to circumstances where the law allows such sharing of information by regulators with common interests or activities.

This information may also be shared with other government agencies responsible for the official control of animal feed, e.g. the Veterinary Medicines Directorate’s Inspection and Investigations Team and the Animal Health and Veterinary Laboratories Agency.

We use or work with contractors and other third-party service providers, such as IT service providers, who may process your personal data on our behalf. These third parties can only process your personal data on our instruction or with our agreement for specific purpose to enable us to maintain, improve and provide our services in order to fulfil our statutory obligations and tasks carried out in the public interest.

What are your rights?

You have a right to see the information we hold on you by making a request in writing to the email addresses below. If at any point you believe the information we process on you is incorrect, you can request to have it corrected. If you wish to raise a complaint on how we have handled your information, you can contact our Data Protection Officer who will investigate the matter.  If you are not satisfied with our response or believe we are not processing your information in accordance with the law, you can complain to the Information Commissioner’s Office (ICO). 

If you need any further information please contact Food Standards Scotland’s Data Protection Officer at: dataprotection@fss.scot.