Competitions privacy notice

This page clarifies how we process your personal data when you participate in competitions that we run. It also explains your associated rights. Please read our general privacy information in addition to the specific information contained in this privacy notice.

Purpose

Competitions

Explanation of the purpose

Occasionally we run competitions. To participate in a competition you may be asked to provide personal information, for example so that we can contact you about your entry.

Legal Basis

We will only process your personal data for this purpose if you give us consent to do so.

Recipients of the data

This data will be processed by the National Library of Scotland for this purpose.

Retention period

We process competition records for a period of five years from the end of the competition period or for as long as the records are required (if less than five years), at which point we review records for further or permanent retention, or for destruction.

We have a detailed range of retention periods for different types of records, some of which may also apply to information processed for the purpose of participating in our competitions. Please see our retention schedules (811 KB; 77 pages) for details, in particular under business classification 02.02.04.01 'Records related to competitions run by the Library' on page 11.

While we are working to implement our retention schedules, some data may be retained longer than required under the schedules.

Your rights in relation to this data

Your core rights as a data subject apply to this processing. Additionally, you have the right to withdraw your consent at any time and the rights of erasure and data portability apply to this processing.

Will the data be transferred to third parties?

We use a third party provider, Signiant, to send large file transfers using their product Media Shuttle. For more information, see Signiant's privacy policy.

Will the data be transferred outside the UK or the European Economic Area (EEA)?

Signiant are registered in the United States of America and your personal data may be transferred there. Signiant are compliant with the EU-US Privacy Shield Framework which provides a mechanism to comply with Data Protection requirements when transferring data.

Is it obligatory to supply this data and what are the consequences of not supplying the data?

Yes, if you wish to participate fully in certain competitions that we run you need to supply some personal information. If we are not able to process your personal data for these purposes you may be unable to participate partly or fully in our competitions. For example, without your contact details we will not be able to contact you regarding your entry or any prizes for which you could be eligible.

Will the data be used in automated decision-making?

No.