Communications privacy notice

This page clarifies how we process your personal data when we communicate with you. It also explains your associated rights. Please read our general privacy information in addition to the specific information contained in this privacy notice.

Purpose

Communicating news, events and information about our work and collections

Explanation of the purpose

You can choose to receive communications from the Library about our news, events, or other information about our work and collections.

If you choose to receive communications from us, we will use your personal data to send these to you in the format you have requested them in, for example by email or by post.

Occasionally we may send communications with updates regarding our core services. These communications convey essential information about your relationship with the Library which it is important that we inform you of. These types of communication are kept to a minimum and only sent when necessary.

Legal Basis

We will normally only process your personal data for this purpose if you give us consent to do so.

Sometimes we process your personal data for this purpose to perform a task carried out in the public interest or for our official functions, for example if we use a third party like MailChimp or Online Express to provide an update about our services to registered users (see 'Will the data be transferred to third parties?').

Recipients of the data

This data will be processed by the National Library of Scotland for this purpose and certain data may be sent to third parties (see 'Will the data be transferred to third parties?').

Retention period

We process this data until you tell us that you no longer wish to receive updates from us.

Your rights in relation to this data

Your core rights as a data subject apply to this processing. Additionally, you have the right to withdraw your consent at any time and the rights of erasure and data portability apply to this processing.

Will the data be transferred to third parties?

We use a third party provider, MailChimp, to deliver our e-newsletter. Your e-mail addresses and communications preference are held by MailChimp only for the purpose of sending you Library communications. For more information, please see MailChimp's privacy policy.

Certain communications are delivered by Online Express, a platform owned by Blackbaud. Your email address and communications preference are held by Blackbaud only for the purpose of sending you Library communications. For more information please see Blackbaud's privacy policy.

Certain data is sent to third party providers in order to send communications by post. To deliver the Library's 'Discover' magazine, we send your name and address to the publisher Connect, who forward this data to the mailing house for 'Discover', Advanced Mailing Solutions. For more information, please see Connect's privacy policy and Advanced Mailing Solutions' privacy policy.

To deliver the Library's 'What's On' events leaflet we send your name and address to APS, which is the publisher and mailing house for 'What's On'. For more information please see APS' privacy policy.

To deliver certain print communications we use Printwell Ltd. For more information, contact us.

We use a third party provider to deliver our external recruitment website. Our vacancy portal is provided and hosted by Engage ATS who are part of the Havas Group. Your email address and communications preference are held by Engage ATS for the purpose of sending you vacancy alerts about the Library. For more information see the Havas Group's data protection policy.

We use a third party provider, Signiant, to send large file transfers using their product Media Shuttle. For more information see Signiant's privacy policy.

Will the data be transferred outside the UK or the European Economic Area (EEA)?

MailChimp and Signiant are registered in the United States of America and your personal data may be transferred there. The Library has a Standard Contractual Clauses agreement with MailChimp to ensure adequate protection for any personal data transferred outside of the European Union. Please see MailChimp's data processing addendum for more information. Signiant is compliant with the EU-US Privacy Shield Framework which provides a mechanism to comply with Data Protection requirements when transferring data.

Online Express is owned by Blackbaud, which is based in the United States of America. Your data may be transferred to the United States. The Library has a Standard Contractual Clauses agreement with Blackbaud to ensure adequate protection for any personal data transferred outside of the European Union. Please see Blackbaud's privacy policy for further information.

Is it obligatory to supply this data and what are the consequences of not supplying the data?

No, supplying data for this purpose is entirely optional. If you choose not to provide your data for this purpose we will not be able to send you notifications about Library news and events.

Will the data be used in automated decision-making?

No.