Privacy policy
Cycling Scotland is committed to protecting any personal information that we collect and to complying with data protection legislation, also known as the UK GDPR and Data Protection Act 2018. We therefore issue this privacy notice in the interests of transparency over how we use (“process”) the personal data that we collect.
This privacy policy, together with our Cookies Policy, covers how we handle personal data within Cycling Scotland and on our websites.
Any questions about this privacy policy should be sent to info@cycling.scot
The Information Commissioners Office and the UK GDPR defines Personal Data, as:
“‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
“This means personal data has to be information that relates to an individual. That individual must be identified or identifiable either directly or indirectly from one or more identifiers or from factors specific to the individual.”
“Some personal data can be more sensitive in nature and therefore requires a higher level of protection. The UK GDPR refers to the processing of these data as ‘special categories of personal data’. This means personal data about an individual’s:
- race;
- ethnic origin;
- political opinions;
- religious or philosophical beliefs;
- trade union membership;
- genetic data;
- biometric data (where this is used for identification purposes);
- health data;
- sex life; or
- sexual orientation.
Personal data can include information relating to criminal convictions and offences.”
For data protection purposes the “data controller” means the person or organisation who determines the purposes for which and the manner in which any personal data are processed.
The data controller is Cycling Scotland.
We currently collect and process various types of personal information including, but not limited to:
- Website analytics/Cookies
- Device identifiers or IP addresses
- Names
- Contact details
- Email addresses
- Staff details
- Social media information
- Bank details
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- When you visit our website
- When you download or use a Cycling Scotland app
- When you request an e-newsletter
- When you enter a competition
- When you send us feedback
- When you create an account
- When you register for one of our courses
- When you request some of our resources
- When you make a complaint
- When you apply for one of our job vacancies
- When you register for one of our events
- When you are employed to work at Cycling Scotland
- When you work as a tutor, instructor, assessor, contractor or volunteer
- When you apply for Cycling Friendly and Social Housing development fund development grant funding
- When you apply for an award
- When you contact us or leave us a comment on social media
- When you speak to us
- When you email us
- When you write to us
- When you buy something from us
We use the information that you have given us in order to:
- Evaluate how people use our website, ensure we are meeting user needs and consider how we can improve our websites
- Send you a newsletter or resource that you have requested
- Enter you into a competition
- Respond to feedback or complaints
- Compile, evaluate and publish anonymised reports or quotes
- Send you marketing information that you have consented to
- Register you onto one of our courses and manage your training and qualification records
- Provide you with work or employment
- Process your application for one of our vacancies
- Enable you to attend an event
- Process payments to you
- Process applications for funding
- Process applications for awards
- Consulting on a project you have an interest in (TP&E)
- To respond to comments on social media
- To respond to enquires
- To fulfil an order
We may share this information with:
- Our website hosting company
- E-newsletter software provider
- Survey software provider
- Other hosting providers
- Course tutors
- Local authority coordinators
- Registered Cycling Scotland database organisations whose work you have agreed to undertake
- Our mailing companies
- Event management companies or venues
- Online content management systems
- Our Cycling Friendly accredited service centres
- Award assessors
- Our funders
- External evaluators
- Our clients (TP&E)
- Our partners where sharing is necessary to deliver a service you have requested
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent. You are able to remove your consent at any time. You can do this by contacting info@cycling.scot
(b) We have a contractual obligation.
(c) We have a legal obligation.
(f) We have a legitimate interest.
Cycling Scotland tries to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a 'right of access' request under the General Data Protection Regulations. If we do hold information about you we will:
- Give you a description of it
- Tell you why we are holding it
- Tell you who it could be disclosed to
- Let you have a copy of the information in an intelligible form.
This service is free of charge and responses will be issued within one month.
Please email info@cycling.scot to request any information
Your information is stored securely and confidentially.
We keep all personal information in line with our Records Retention policy. At the end of the retention period we will dispose your information by secure means.
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at info@cycling.scot if you wish to make a request.
If you have any concerns about our use of your personal information, you can make a complaint to us at
Email info@cycling.scot
Telephone: 0141 229 5350
Or write to:
Cycling Scotland
160 West George Street,
Glasgow
G2 2HG
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO's address:
The Information Commissioner's Office - Scotland
45 Melville Street
Edinburgh
EH3 7HL
Helpline number: 0303 123 1113
Email: Scotland@ico.org.uk