Improve your experience. We are very sorry but this website does not support Internet Explorer. We recommend using a different browser that is supported such as Google Chrome or Mozilla Firefox.

Privacy policy

Introduction

The Scottish Digital Academy (“the Academy”, “we”, or “us”) takes the privacy of your information seriously. This Privacy Policy applies to the www.digitalacademy.gov.scot website and governs data collection, processing and usage in compliance with the Data Protection Act 2018. By using the Website, you consent to the data practices described in this statement.

What data do we collect?

The Scottish Digital Academy collects the following data:

  • Personal identification information (Name, email address, telephone number, etc.)
  • Organisational information (Organisation name, organisation address, organisation finance contact name, organisation finance contact email address)

How do we collect your data?

You directly provide us with most of the data we collect. We collect and process data when you:

  • Register online or place an order for any of our products and services.
  • Use of view our website via your browser’s cookies
  • Voluntarily submit an email enquiry through our website

We may also receive your data indirectly from the following sources:

  • When your organisation’s booking contact registers online on your behalf for any of our products and services.
  • When your organisation’s booking contact provides your information via email and our operations team registers you for any of our products and services.

How will we use your data?

We collect your data so that we can:

  • Process your booking
  • Ensure you can use our services fully
  • Email you with other products and services we think you might like, if you agree to receive these communications.

We will share personal identification information necessary for delivering all or part of our service with the people that deliver the services you have requested. Information is shared with course facilitators via the Arlo for Mobile app. Course facilitators are those who have been engaged by the Academy to deliver services on our behalf. These may be permanent employees or employees of contracted organisations. We will only provide access to the Arlo for Mobile app and/or any necessary personal identification information once we have completed relevant security clearance processes.

Using your image

The Scottish Digital Academy, as part of Scottish Government, uses video and photography of participants as part of promoting the Scottish Digital Academy courses. These videos and images will be published online, promoted through our social media channels and shown at events. We ask your permission to use your data in this way when you book with us.

By agreeing you are confirming your permission to allow the Scottish Digital Academy, as part of the Scottish Government, without expectation of compensation or other remuneration, now or in the future, to use your image and likeness and/or any interview statements in connection to the Scottish Digital Academy courses. This includes:

  • Permission to interview, film, photograph, or otherwise make a video reproduction of you and/or record your voice;
  • Permission to use your name; and,
  • Permission to use quotes from interview(s) (or excerpts of such quotes), film, photograph(s), or reproduction(s) of you, and/or recording of your voice, in part or in whole, in print and/ or electronic media.

How do we store your data?

The Scottish Digital Academy website and booking platform is provided by Arlo. All data in Arlo is encrypted at rest and stored in AWS, a provider that is fully compliant with GDPR. Please see AWS GDPR Center for more information.

Regular data extraction from the Arlo platform will occur for backup and reporting purposes. This data will be stored on the SCOTS network. The SCOTS network is connected to the Public Services Network and as such follows the requirements of its code of connection. In addition to this, Scottish Government aligns to the HMG Baseline Control Set. This control set aligns with ISO27001.

Data will be kept only for the duration it is required. Personal data will be deleted after a minimum of 7 years. Once this time period has expired, we will delete your data in accordance with Arlo’s deletion policies and procedures, save to the extent that Arlo is required by any Applicable Law to retain some or all of the Customer Personal Data.

Transfer of your data outside of the EEA

Arlo shall not transfer Customer Personal Data outside of the EU Member States (or permit that to occur) unless: i) Arlo has first obtained the Academy’s prior written permission to do so; and ii) Arlo takes such measures as are necessary to ensure the transfer is in compliance with the Applicable Law. Such measures may include (without limitation) transferring the Customer Personal Data to a recipient in a Country which has been formally declared under the Applicable Law as having adequate protection measures in place for Personal Data, or to a recipient that has achieved binding corporate rules in compliance with the Applicable Law, or to a recipient in the United States that has certified its compliance with the EU-US Privacy Shield, or to a recipient that has executed standard contractual clauses adopted, approved or otherwise effective under the Applicable Law.

Marketing

We would like to send you information about products and services of ours that we think you might like, as well as those of other public sector organisations.

If you have agreed to receive marketing, you may always opt out at a later date.

You have the right at any time to stop the Scottish Digital Academy from contacting you for marketing purposes or giving your data to other public sector service organisations.

What are your data protection rights?

The Scottish Digital Academy would like to make you fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request the Academy provide you with copies of your personal data.

The right to rectification– You have the right to request that the Academy correct any information you believe is inaccurate. You have the right to request the Academy to complete information you believe is incomplete.

The right to erasure – You have the right to request the Academy to erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that the Academy restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to request the Academy’s processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that the Academy transfer the data that we have collected to another organisation, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Email us at: digitalacademy@gov.scot Call us: 0131 244 0029 Or write to us at: Scottish Digital Academy, 1G South, Victoria Quay, Edinburgh, EH6 6QQ

Cookies

What are cookies?

Cookies are small text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit our website, we may collect information from you automatically through cookies or similar technology.

You can find out more at All about cookies

How do we use cookies?

We use cookies in a range of ways to improve your experience on our website. Including

  • Keeping you signed in and tracking the shopping cart etc.
  • Understanding how you use our website.

What type of cookies do we use?

There are a number of different types of cookies, however, our website uses:

  • Functionality – we use these cookies so that we recognise you on our website and remember your previously selected preferences. A mix of first-party and third-party cookies are used.

How to manage cookies?

You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

Google Analytics

We anonymise the last 3 digits of all IP addresses for Google Analytics, so that we can ensure that you are protected (read more about how this works ). We can only see a general overview of which regions and cities you may come from, not where individuals access from.

Find out more about security and privacy in Google Analytics.

You can opt out of Google analytics cookies.

YouTube

Pages which contain YouTube videos will not set third-party cookies (we use YouTube-nocookie.com - you can read more here).

General

Privacy policies of other websites

The Academy website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Changes to our privacy policy

The Academy keeps its privacy policy under regular review and places any updates on this webpage. The privacy policy was last updated on 28 February 2020.

How to contact us

If you have any questions about our privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at: digitalacademy@gov.scot Call us: 0131 244 0029 Or write to us at: Scottish Digital Academy, 1G South, Victoria Quay, Edinburgh, EH6 6QQ

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that the Academy has not addressed your concern in a satisfactory manner, you may contact the Information Commissioners Office.

Call: 0303 123 1113 Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Website: https://ico.org.uk/

Press enter to see more results