Menu

Test and Protect Tracing Data (Scotland) Privacy Notice 

Glasgow Clyde College takes its data protection responsibilities seriously. The purpose of this Privacy Notice is to inform you how we will process your personal information, setting out our responsibilities and obligations as a Data Controller. 

The Data Controller for your information is Glasgow Clyde College, 690 Mosspark Road, Cardonald, Glasgow, G52 3AY, registered with the ICO, registration number Z7497735.

 All your personal information will be treated in accordance with data protection law including the Data Protection Act 2018 and the General Data Protection Regulation (GDPR).  

For any queries or concerns about how your personal data is being processed you can contact the Data Protection Officer at gdpr@glasgowclyde.ac.uk  

The College will use your personal data for the following purpose(s): 

There is potential for NHS contact tracers to seek contact data (staff, students and other College users) from Glasgow Clyde College whilst undertaking their work in regards to the Scottish Government’s Test and Protect programme. Further details can be found on the Scottish Government website here: https://www.gov.scot/publications/coronavirus-covid-19-test-and-protect-advice-for-employers/ 

The College will assess requests from the Scottish Government Test and Protect Team on a case-by-case basis. If it is deemed proportionate and reasonable to release the data, it will be released when the identity of the requestor has been confirmed in writing.

Our lawful basis for using the data is:  

  • necessary for the College to comply with law, specifically:
    • Health and Safety at Work etc Act 1974,including general duties of employers to their employees, and general duties of employers and self-employed to persons other than their employees. 

The data being used does not include special category (sensitive) data.

If you were to withhold the personal information we require for this process, you would be breaking the law, the consequences of which could result in a fine. 

Your data will, or may, be shared with NHS staff (Contact Tracers).  

This process does not involve your data being sent outside of the European Union. 

The processing of your data does not involve automated decision-making.  

Your data will be retained for the following length of time:  

The College collect your contact details as part of your employment (staff) and learning (students) and will hold this in-line with Staff and Student Privacy Notices (please see the College website). 

Please refer to the NHS Inform website about data retention in relation to the Test and Protect programme here - https://www.nhsinform.scot/campaigns/test-and-protect  

Related Privacy Notice(s):  

Student Privacy Notice - https://www.glasgowclyde.ac.uk/studentprivacynotice

Staff Privacy Notice - https://www.glasgowclyde.ac.uk/staff-privacy-notice

Covid-19 Privacy Notice - COVID-19 Data Processing Privacy Notice for Staff​  

Your rights 

Under data protection law, you have legal rights in relation to your information, including: 

  • your right to be informed of how your data is being processed, (as in this privacy notice);
  • your right to access and obtain a copy of your data on request, often referred to as a subject accessrequest; 
  • your right to ask an organisation to change incorrect or incompletedata; 
  • your right to ask an organisation to delete or stop processing your data under certaincircumstances; 
  • your right to object to the processing of your data under certaincircumstances; 
  • your right to data portability and in relation to automated decision making and profiling.

Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply. Further details about your privacy rights can be found on the Information Commissioner’s Office website www.ico.org.uk   

Further Information 

If you would like further information about how your personal data is processed by the College or you have any concerns, please contact our Data Protection Officer (DPO) in the first instance at gdpr@glasgowclyde.ac.uk. 

If you are dissatisfied with the response, you have the right to lodge a complaint with the Information Commissioner’s Office using their website https://ico.org.uk/make-a-complaint/ by email: casework@ico.org.uk or by phone on 0303 123 1113. Alternatively, you can write to: 

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.  

We review our privacy notices regularly.  

Last reviewed September 2020.