Food Standards Scotland (FSS) is what is known as the ‘Controller’ of the personal data provided to us through the ‘Food Standards Scotland website research’ survey.
What information do we hold?
The personal information we hold on you may include your name and any other relevant information such as your job title and email address.
Where we get this information from?
Food Standards Scotland obtains this information directly from you as part of the signup process for the ‘Food Standards Scotland website research’ survey hosted on Typeform.
Why we need it
We collect this information to allow us and our research partner to contact you to arrange the interview. We also collect information about what type of work you do so that we can sort participants into categories. This is to allow us to make sure we are interviewing a wide range of stakeholders. We will not collect any personal data on you which we do not need.
Our research partners, The Union, and their sub processors Taylor McKenzie, will process your personal data on our behalf. These organisations are our data processors and can only process your personal data on our instruction or with our agreement for a specified purpose to enable us to maintain, improve and provide our services to fulfil our public task. A data protection impact assessment (DPIA) and data processing agreement (DPA) have been completed to ensure that any personal data collected by us or by our data processors on our behalf, is securely protected.
The legal basis for our use of your personal information as highlighted above will be one or more of the following:
- We need to process your personal information to satisfy our legal obligations as the Competent Food Authority in Scotland; and
- We need to process your personal information to carry out a task in the public interest or in the exercise of official authority in our capacity as a public body.
What we do with it
We retain personal information only for as long as necessary to carry out these functions, and in line with our retention policy. Your contact details will be held securely until you inform us that you no longer wish to receive the information or ask for your information to be deleted.
FSS has put in place appropriate and adequate technical and organisational measures to protect your personal information. All the personal data we process is located on servers in the United Kingdom. Our cloud-based services have been procured through the government framework agreements and these services have been assessed against the national cyber security centre cloud security principles. No third parties have access to your personal data unless the law allows them to do so.
What we may also be required to do with it
The information may be shared with other government departments, public bodies, and organisations which perform public functions to assist them in the performance of their statutory duties or when it is in the public interest.
What are your rights?
You have a right to see the information we hold on you by making a request in writing to the email address below. If at any point you believe the information, we process on you is incorrect you can request to have it corrected. If you wish to raise a complaint on how we have handled your personal data, you can contact our Data Protection Officer who will investigate the matter.
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you can complain to the Information Commissioner’s Office (ICO) at: http://www.ico.org.uk or via their telephone helpline (03031231113).
Our Data Protection Officer at Food Standards Scotland is the Director Corporate Services who can be contacted at the following email address: dataprotection@fss.scot.
