Data Protection Privacy Notice of Karen Adam MSP

This privacy notice explains how my office collects and uses personal information about individuals.

I can be contacted at the details below:

Address: 20 Chapel Street, Peterhead, AB42 1TL

Email: Karen.Adam.msp@parliament.scot

Telephone: 0131 348 6811

Personal information

Personal information is any information relating to a living individual, which can identify them – either directly or indirectly. For example - name, address, email address, national insurance number, photographs. I will hold this data securely and will only use it for the purposes it was collected or acquired for. I will only pass it onto third parties with your consent or according to a legal obligation.

How I use your personal data

I process any personal data under the requirements of the General Data Protection Regulation (UK), the Data Protection Act 1998 in the UK, and any Act that replaces the Data Protection Act. I collect and use personal data to fulfil the following functions and associated activities of my office:

  • To carry out casework on behalf of my constituents

  • To tend to issues and campaigns which I am involved in

  • To promote and raise awareness of local events/issues

  • To manage and support my staff and to maintain supplier relationships

  • To process expenses, accounts and associated records

Sharing of personal data

I sometimes may be required to share the personal information I hold with other individuals or organisations, for example: healthcare, social & welfare organisations; local & central government bodies; educators & examining bodies; statutory law enforcement agencies; elected representatives and other holders of public offices; financial organisations; crime prevention agencies & the police. I may seek your prior express consent to share your personal data in certain circumstances (as set out by the GDPR).

Retention of Information

I retain personal data for five years. If this data is in relation to casework, I will retain the data until five years after the closure of a case. After this point the data will be securely destroyed. Where we recieve correspondence that does not require any follow up action, such as information from non-constituents, data will be deleted within 7 days.

Your rights

The GDPR sets out the rights which individuals have in relation to personal information held about them by data controllers. These rights are listed below, although whether you will be able to exercise each of these rights in a particular case may depend on the purpose for which the data controller is processing the data and the legal basis upon which the processing takes place.

Access to your information – You have the right to request a copy of the personal

information about you that we hold.

Correcting your information – We want to make sure that your personal information is

accurate, complete and up to date and you may ask us to correct any personal information about

you that you believe does not meet these standards.

Deletion of your information – You have the right to ask us to delete personal information about you when:

  • You consider that we no longer require the information for the purposes for which it was obtained

  • We are using that information with your consent and you have withdrawn your consent

  • You have validly objected to our use of your personal information

  • Our use of your personal information is contrary to law or our other legal obligations

Objecting to how we may use your information – You have the right at any time to require us to stop using your personal information for direct marketing purposes. In addition, where we use your personal information to perform tasks carried out in the public interest then, if you ask us to, we will stop using that personal information unless there are overriding legitimate grounds to continue.

Restricting how we may use your information – in some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to our use of your information. The right might also apply where this is no longer a basis for using your personal information but you don't want us to delete the data. Where this right to validly exercised, we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.

Automated processing – if we use your personal information on an automated basis to make decisions which significantly affect you, you have the right to ask that the decision be reviewed by an individual to whom you may make representations and contest the decision. This right only applies where we use your information with your consent or as part of a contractual relationship with you

Withdrawing consent using your information – Where we use your personal information with your consent you may withdraw that consent at any time and we will stop using your personal information for the purpose(s) for which consent was given.

Changes to our privacy statement

I keep this privacy statement under regular review. It was last updated 27 April 2022.

Complaints

I seek to resolve directly all complaints about how we handle personal information but you also have

the right to lodge a complaint with the Information Commissioner’s Office:

Online: https://ico.org.uk/global/contact-us/email/

By phone: 0303 123 1113

By post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF