GDPR

DATA PROTECTION

The Data Protection Act 2018 (DPA) makes provisions for the regulation of the processing of personal data. The DPA is a UK law which implements the General Data Protection Regulation (GDPR) and makes additional provisions for data processing for the purposes of intelligence and law enforcement.

Tobar an Dualchais, in the course of the project, maintains certain personal data about living individuals in order to fulfill its purpose and to comply with and meet legal obligations in relation to UK Copyright Law. Tobar an Dualchais recognises that the correct and lawful treatment of personal data maintains confidence in the initiative and is committed to ensuring that personal data is collected, stored and disposed of in a secure and appropriate manner.

Tobar an Dualchais is also committed to a policy of protecting the rights and freedoms of individuals with respect to the processing of their personal data. For this reason, Tobar an Dualchais has adopted robust Information Security and Data Protection measures.

If you have any questions about data protection at Tobar an Dualchais, please contact the Data Protection Administrator at gdpr@smo.uhi.ac.uk

SUBJECT ACCESS REQUEST

Under the terms of the Data Protection Act 2018 all individuals have the right to access personal data relating to themselves that is held by Tobar an Dualchais. Exercising this subject access right is commonly known as making a subject access request.

Tobar an Dualchais respects individual’s rights to privacy and accuracy and their right to access their own personal data where appropriate. Tobar an Dualchais therefore aims to satisfy subject access requests as quickly as possible.

Any individual who wishes to exercise this right can do so in the following ways;

Please send an email to: gdpr@smo.uhi.ac.uk

Or

Write to: Data Protection Administrator, Sabhal Mòr Ostaig (TAD), National Centre for Gaelic Language and Culture, Sleat, Isle of Skye IV44 8RQ

To allow Tobar an Dualchais to process your request as quickly as possible, please include the following information with your request:

Please note that confirmation of identification will be required so that the request can be progressed. We will contact you to discuss the most appropriate way to arrange this.

Personal Details;

· Surname

· Former surname (if applicable)

· Forename

· Address

· Email Address

· Telephone number

· Date of birth

Requested Data;

What personal data do you wish to request under the right of access?

Please provide as much detail as possible regarding the information you wish to access (e.g. where and by whom information is believed to be held, specific details of information required etc.)

Please specify your connection with Tobar an Dualchais.

Please note, you are not required to state why you wish to access the information: the details we require are merely those that will aid the efficient location and retrieval of information.

Information gathered will be treated as described in this privacy notice.

Once a Subject Access Request is received, all efforts will be made to fully comply within 28 days. In any event, you will receive all the information that has been located and can be released within 28 days and an explanation for any information that cannot be provided at that time.

In accordance with the DPA, Tobar an Dualchais does not usually release information held about individuals without their consent. Therefore, if information held about you also contains information related to a third party, Tobar an Dualchais will make every effort to anonymise the information. If this is not possible and Tobar an Dualchais have been unable to secure the relevant consent, we may decide not to release the information.

All queries should be directed to the Data Protection Administrator in the first instance at gdpr@smo.uhi.ac.uk