SSN logo social_instagram social-facebook social-twitter location calendar plus minus internet clock carrotdown

Privacy policy

The Sustainable Scotland Network (SSN) is a network for sustainable development and climate change in the public sector. The SSN is managed by a secretariat at ECCI (Edinburgh Climate Change Institute) which is part of the University of Edinburgh. The secretariat is funded by the Scottish Government.

Information about you: how we use it and with whom we share it

The SSN holds and manages information about its members and others who have an interest in the Network, the work we do and services we provide. The information you provide is used to:

  • Keep an active record of who is doing climate change reporting across public sector bodies.
  • Provide information and communications about climate change reporting and good practice – including answering your questions and inquiries, sharing changes and guidance and keeping you up-to-date with reporting procedures and requirements.
  • Contact you with information and opportunities related to the Network – such as training, case studies or networking events.
  • Keep you informed of developments or changes to the Network and your membership.
  • Enable us to supply you with the goods, services and information which you have requested.
  • Ensure that content from the website and our other communications is presented in the most effective manner for you and for your computer.
  • Analyse the information we collect so that we can administer, support and improve and develop our events, training, website and our communications.
  • Provide you with information, products or services that you request from us or which we feel may interest you, unless you have indicated otherwise.

We are using information about you because you are part of the community of people that form our Network and we want to stay in touch with you and ensure that you receive information relevant to your interest in the SSN. Our basis for holding and using your personal data is legitimate interest – processing your data allows us to provide the SSN service to you and run the Network. Information about you will be shared with:

  • The Edinburgh Climate Change Institute) (the University of Edinburgh) – ECCI host the secretariat and are a core partner for delivering the service.
  • Sniffer, climate resilience and adaptation experts who are another core partner and part of the secretariat team.
  • The University of Edinburgh – ECCI is a centre within the University of Edinburgh and there are shared information systems and processes across these organisations.
  • Our funders, the Scottish Government. For example when the contract to provide the SSN service changes or is awarded to another organisation or when the Scottish Government wish to seek input from SSN members on policy consultations.

How long will we hold your data?

We will hold the personal data you provide us for as long as the SSN continues to provide a service to its members and wider community.

We do not use profiling or automated decision-making processes. Some processes are semi-automated (such as anti-fraud data matching) but a human decision maker will always be involved before any decision is reached in relation to you.

How we keep your data safe

SSN has process in place to keep your information secure, accurate and up to date. We use secure University of Edinburgh filing and email systems. In addition we use the following platforms to process your information and provide the services we offer:

  • Mailchimp: to send enewsletters, invitations and updates to our mailing list.
  • Eventbrite: to manage and allocate tickets for events we run.
  • Highrise: to store and manage professional contacts.

Contact us

If you have any questions, or if you’d like your personal data to be deleted please email ssn@ed.ac.uk (please use: SSN Personal Data Inquiry in the subject) or contact us using the address and phone details in the footer below.

You can view the related University of Edinburgh Privacy Statement here: https://www.ed.ac.uk/records-management/notice

Data controller and contact details

For data collected under this privacy notice, the University of Edinburgh (the “University”) is the Data Controller (as that term is defined in the EU General Data Protection Regulation (Regulation (EU) 2016/679), registered with the Information Commissioner’s Office, Registration Number Z6426984.

You can contact our Data Protection Officer at dpo@ed.ac.uk. Our data protection policy is on our website at http://www.ed.ac.uk/records-management/data-protection/data-protection-policy.

Data sharing

In addition to the primary purposes, we are also legally obliged to share certain data with other public bodies such as HMRC and will do so where the law requires this; we will also generally comply with requests for specific information from other regulatory and law enforcement bodies where this is necessary and proportionate.

Transfers outside the EEA

The University will only transfer data to countries outside the EEA when satisfied that both the party which handles the data and the country it is processing it in provide adequate safeguards for personal privacy. Details of such transfers and safeguards are on our website.

Your rights

You have the right to request access to, copies of and rectification or (in some cases) erasure of personal data held by the University and can request that we restrict processing or object to processing as well as (in some cases) the right to data portability (i.e. the right to ask us to put your data into a format that it can be transferred easily to a different organisation). If you wish to make use of one of these rights, please email your local contact.

If we have asked for your consent in order to process your personal data you can withdraw this consent in whole or part at any time. To withdraw consent, please email your local contact, who will explain the consequences of doing so in any particular case and initiate proceedings for withdrawing consent.

Complaints

If you are unhappy with the way we have processed your personal data you have the right to complain to the Information Commissioner’s Office at casework@ico.org.uk but we ask that you raise the issue with our Data Protection Officer first.