Privacy and GDPR Compliance Policy

Introduction

In order for centres to participate in the Young STEM Leader Programme (YSLP), Tutor Assessors (TAs) and Young STEM Leaders (YSLs) will have to provide personal data to the YSLP Project Team at SSERC. This policy explains the data collection, use and retention process.

Responsibilities

All YSLP Project Team staff are responsible for ensuring the safe keeping of personal data. It is the responsibility of the SSERC CEO to ensure that all relevant staff are aware of, and follow, this privacy policy.

For Tutor Assessors

We will collect and securely store only the following data:

  • your name
  • your email address
  • the centre where you work

Any data we store can be updated or immediately, permanently deleted on your request youngstemleader@sserc.scot. The above data is the minimum which we require and therefore is the only data we will collect and store.

For Young STEM Leaders

We will collect and securely store only the following data:

  • your name
  • date of birth (DOB)
  • parent email address (if you are under 13)
  • the YSLP delivering centre you attend
  • your Scottish Candidate Number (SCN) only if you are completing a formal level of YSLP

All of this data will be deleted when you cease participation in YSLP or your account becomes inactive for a period of 24 months – user activity is identified to admin level users (YSLP Project Team).

We will also keep a record of all YSLP awardee names and the levels they have gained for the lifetime of the YSLP. This will allow future certification enquiries and reissuing of certificates to YSLs should they request this.

Any data we store can be updated or immediately, permanently deleted on your request by emailing youngstemleader@sserc.scot. The above data is the minimum which we require and therefore is the only data we will collect and store.

Sharing of Data with Third Parties

We may share personal data with the third parties and only for the reasons outlined below:

Collection of Insight tariff points – formal levels only

If a centre wish to claim the available tariff points for candidates who have completed YSLP formal levels, then we will provide – per Young STEM Leader – the following data to the Scottish Government Insight Team:

  • SCN
  • DOB
  • Gender
  • SEED

Certification of YSLs

Our contracted development partner, JH Digital Design (JHDD), produce all trained Tutor Assessor and Delivering Centre certificates. In order to produce these, TA’s names and centres are shared for entry on to the certificates. TAs can request that their name appears in shortened form, for example, J Smith, and it will be this shortened form which is shared with JHDD.

Online platform

Pogo Studio are the web builders responsible for creating the YSLP online platform. For maintenance reasons they may access the secure admin section of the website where personal data is stored. Pogo have extensive experience of protecting online data and the YSLP online platform is built using UK-based servers for data storage. The website is fully secure using Microsoft Azure https://cybersecurity.att.com/products/security. More specific detail on the security of our online platform can be provided by Pogo.

All of the third parties listed above will be given an update version of this policy annually and must email YSLP Project Manager to confirm they have read and will follow the policy.

Managing and deleting your information

We endeavour to ensure that all information which we retain is up to date but for us to do that please inform us of any relevant changes - for example, a change of name or centre. We may also update information if we identify that it is incorrect, for example, a centre is renamed.

If you wish to have any personal data that we hold about you deleted, you can request this by emailing us at youngstemleader@sserc.scot.

Accessing your personal information

Individuals can ask for the personal information we have stored by emailing us at youngstemleader@sserc.scot. If we do hold information about you, we will give you a copy of this data, as well as telling you why we are holding it and who it may be disclosed to.

Use of cookies

We use cookies on our website to improve the overall experience and allow our site to function correctly. You may block or delete all cookies used by our site however some website areas may then not function correctly. Cookies are not used for any kind of personal profiling.

The main uses of cookies on our site are as follows:

  • Storing information about a user’s session - such as whether they are logged in.
  • Allowing the online platform to display the correct YSLP level for users on subsequent log in.

If you have questions or concerns regarding your personally identifiable information, please contact us at youngstemleader@sserc.scot

Policy Produced by

Graeme Rough – YSLP Project Manager

Policy approved by

Alastair MacGregor – SSERC CEO

Most recent data protection impact assessment (DPIA)

9/7/20

Date for next policy review and DPIA

9/7/21