Privacy Policy

Lothian Association of Sessional General Practitioners (“LASGP”) is committed to protecting and respecting your privacy. This privacy notice gives you information on how we collect and process your personal data when you use our website, contact us, or become a member. Please read the following carefully to ensure that you fully understand how and why we are using your personal data.

Who we are

LASGP, an unincorporated association based in Scotland, is the data controller responsible for your personal data. This means that we are responsible for deciding how we hold and use personal information about you. If you have any questions regarding this privacy policy or our data protection practices, please contact LASGP’s Membership Secretary via our contact form.

Personal data we may collect from you

Personal data means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data: your name and title.
  • Contact Data: your address, email address and telephone numbers.
  • Profile Data: your membership information and any enquiries, feedback or complaints you send us.
  • Technical Data: your login data, internet protocol (IP) address, browser type and version and other technology on the devices you use to access our website.
  • Marketing Data: your preferences in receiving marketing communications from us.

We do not collect any special categories of personal data about you (this includes race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

Cookies

As you interact with our website, we may automatically collect Technical Data about your browsing actions and patterns. We Google Analytics to track user interaction but we do use other Google services which may involve the use of cookies, for example, if you opt for your login details to be pre-populated every time you log in. Most browsers accept cookies automatically, but you can visit the ‘options’ or ‘preferences’ menu on your browser to change these settings. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

How your personal data is used

We may request that you provide us with personal data when you contact us by phone or email, use our online contact forms, apply for a membership or otherwise use our platform. It is important that the personal data we hold about you is accurate, so please keep us informed if your personal data changes during your relationship with us.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

We use personal data held about you in the following ways:

Purpose Type of personal data Legal basis for processing
To register and manage your membership of LASGP
  • Identity, Profile Contact Data
  • Necessary for our legitimate interests to provide services to our members and fulfil our objectives as an association
To advertise your job listing on our platform and ensure members can apply
  • Identity and Contact Data
  • Necessary for our legitimate interests to provide services to our members and fulfil our objectives as an association
To send you our newsletter via our third party processor Mailchimp
  • Identity, Contact and Marketing Data
  • Consent
To manage our relationship with you, by responding to your enquiries and notifying you of changes to our services
  • Identity, Profile and Contact Data
  • Necessary for our legitimate interests to inform our members of service changes and keep our records updated
To administer our website and ensure that content is presented in the most effective manner
  • Profile and Technical Data
  • Necessary for our legitimate interests to operate our online platform, ensure network security and prevent fraud

You can ask us to stop sending you marketing messages at any time by contacting us at any time.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for. Generally, we will keep personal data which we collect for up to 1 year after you cease using our services.

Disclosure of your personal data

We may share your personal data with the parties set out below for the purposes set out in the table above:

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Some of our third party service providers are based outside the EEA so their processing of your personal data will involve a transfer of data outside the EEA. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least adequate safeguards are implemented. Please see the below table for further information on the specific safeguard used by us when transferring your personal data out of the EEA:

Third Party Name Country location outside EEA Safeguard
Mailchimp USA Privacy Shield
Google USA

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those committee members and third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to our internal data protection policies.

Third-party links

Our website contains links to and from the websites of participant organisations, partner networks and advertisers. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Your Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data.

This includes:

  • Request access to your personal data (commonly known as a “data subject access request“). This enables you to receive a copy of the personal data we hold about you.
  • Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.
  • Request erasure of your personal data. This enables you to ask us to delete personal data where there is no good reason for us continuing to process it.
  • Object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms.
  • Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data if you want us to establish the data’s accuracy; where our use of the data is unlawful but you do not want us to erase it; or where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
  • Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.
  • Withdraw consent at any time where we are relying on consent to process your personal data. If you withdraw your consent, we may not be able to provide certain products or services to you.

If you wish to exercise any of the rights set out above, please contact us at secretary12@lasgp.org

Changes to the Privacy Policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

Complaints

You have the right to make a complaint at any time to the Information Commissioner’s Office (“ICO”), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Agreed on November 26th 2019