Find out how Stirling Council uses personal data by checking the Council’s website at the following address:
https://www.stirling.gov.uk/privacy-statement/
Our website contains a Register of Data Processing which lists all the different ways
in which the Council uses personal data.
This Privacy Notice provides more information about just one of those processes.
The Council has a Data Protection Officer to make sure it is complying with data protection laws.
They can be contacted at:
Data Protection Officer
Stirling Council
Old Viewforth
14-20 Pitt Terrace
Stirling
FK8 2ET
Email: dataprotection@stirling.gov.uk
Telephone: 01786 404040
Stirling Council schools use internal and external CCTV for the following purposes:
for the prevention and detection of crime
By using CCTV systems, the school collects, stores, and uses static or moving images of individuals located in the surveillance area.
We do not deliberately set out to capture any special category personal data. However, cameras may incidentally record information which falls within these categories.
Our lawful basis for processing your personal data is:
UK GDPR Article 6(1)(e) - Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
UK GDPR Article 9(2)(g) - processing is necessary for reasons of substantial public interest;
UK GDPR Article 10(1) as the processing is authorised by domestic law, in this case – Section 163 of the Criminal Justice and Public Order Act 1994. Section 163 of this Act authorises local authorities to provide CCTV to promote the prevention of crime, or the welfare of victims of crime
Stirling Council have a number of school buildings with CCTV installed and managed on our behalf by a third party. This means CCTV could be operated and/or monitored by Stirling Council employees and by a third party.
CCTV imagery is retained in a secure environment and is only accessible by authorised personnel who have a legitimate reason to do so.
Under normal circumstances your information could be retained for up to 30 calendar days after which point it will be deleted. Imagery required for investigative or evidential purposes may be retained beyond 30 days and is securely disposed of upon completion/conclusion of the purpose for which it has been retained.
You have the following rights under data protection laws. If you have a request under any of these rights, you can make a subject access request.
You have the right to request a copy of the personal information that we hold about you. This is known as a subject access request and is free of charge. We must respond within one month, although this can be extended to three months if the information is complex.
We want to make sure that your personal information is accurate, complete and up to date. Therefore you may ask us to correct any personal information about you that you believe does not meet these standards.
You have the right to ask us to delete personal information about you where:
You have the right at any time to tell us to stop using your personal information for direct marketing purposes, profiling or research purposes.
In some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information that we hold about you or we are assessing the objection you have made to our use of your information.
This right might also apply if we no longer have a basis for using your personal information - but you don't want us to delete the data. Where this right is realistically applied will mean that we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.
Where we use your personal information with your consent, you may withdraw that consent at any time and we will stop using your personal information for the purpose(s) for which consent was given.
If we are processing your personal information with your consent or as part of a contract with you, and it is held in an accessible and machine-readable format, you have a right to ask us to transmit it to another organisation. This is known as the right to data portability.
We make some use of automated decision-making processes but very little use of profiling. Where these techniques are used, this will be explained in the specific privacy statements relating to those functions, together with a description of the reason involved in any automated decision-making.
If you want to complain about or comment on how we have processed your personal information, you should email dataprotection@stirling.gov.uk
If you are still unhappy with how the council handled your complaint, you can contact the UK Information Commissioner's Office at:
The Information Commissioner,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire SK9 5AF
Phone: 0303 123 1113
You can find further information on the Information Commissioners Office website.