Privacy Policy
EPIC Privacy Notices
Your Personal Data
EPIC will be what’s known as the ‘Data Controller’ of your personal data processed in relation to the EPIC website. This privacy notice will explain how EPIC will process personal data.
Why we need it?
We are collecting your basic personal data such as [name, email address/contact details] in order to respond to our website online submission forms. We will only collect data that we need in order to provide a response to online form submissions [for example via ‘Contact us’] and oversee this service to you.
Legal basis for processing your data
We must have a legal basis for processing all personal data. Where we have relied upon your consent to process your data, you also have the right to withdraw your consent at any time.
What we do with it and who we share it with
All the personal data is processed by staff at EPIC in the United Kingdom.
How long do we keep it for?
Your data will be retained by EPIC for 5 years, or up to 6 months after the end of the project whichever is sooner. After this time, data will be securely deleted.
What are your rights?
You can request access to the information we process about you at any time. If at any point you believe that the information we process relating to you is incorrect, you can request to see this information and may in some instances request to have it restricted, corrected or, erased. You may also have the right to object to the processing of data and the right to data portability.
If you wish to exercise any of these rights, please submit your request via epic.scotland@sruc.ac.uk
Complaints
If you wish to raise a complaint on how we have handled your personal data, you can contact the University of Glasgow Data Protection Officer who will investigate the matter.
Our Data Protection Officer can be contacted at epic.scotland@sruc.ac.uk
If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office (ICO)
Last updated
28 January 2025
Why we need it?
The EPIC consortium conducts research in the field of Notifiable, Exotic and Endemic diseases in Scotland, to assist in the development and delivery of Scottish Government (SG) Animal Health and Welfare (AH&W) Policies. To carry out this research EPIC requires access to data collected by Government and other bodies. These data include livestock movements, demographic data and livestock disease testing data.
We use the following personal information for research:
- Business Name
- Location Data (co-ordinates, postcodes)
- County Parish Holding Number (CPH)
- Herdmark
Where do we get personal information from?
- Scottish Government: https://www.gov.scot/privacy/
- ScotEID: https://www.scoteid.com/index.php/privacy
- Animal and Plant Health Agency;
- Personal information charter https://www.gov.uk/government/organisations/animal-and-plant-health-agency/about/personal-information-charter
- General privacy notice https://www.gov.uk/government/publications/animal-and-plant-heath-agency-privacy-notices/animal-and-plant-health-agency-privacy-notice
- Endemic disease notice https://www.gov.uk/government/publications/animal-and-plant-heath-agency-privacy-notices/endemic-disease-privacy-notice
- Exotic disease privacy notice https://www.gov.uk/government/publications/animal-and-plant-heath-agency-privacy-notices/exotic-notifiable-and-reportable-diseases-privacy-notice
- Livestock Information Ltd: https://livestockinformation.org.uk/privacy/
EPIC consortium institutes processing data include:
- Glasgow https://www.gla.ac.uk/legal/privacy/
- SRUC https://www.sruc.ac.uk/connect/about-sruc/policies-compliance/compliance/privacy-notice-gdpr-cookies/#privacy
- University of Edinburgh [Note no link to Vet School] https://data-protection.ed.ac.uk/guidance/privacy-notices/school-privacy-notices
- Moredun Research Institute https://moredun.org.uk/privacy-policy
- BioSS / The James Hutton Institute https://www.hutton.ac.uk/privacy-notice/
Legal basis for processing your data
Our lawful bases for using personal information for research are:
The legal basis being relied on to share this Personal Data lawfully is Article 6(1)(e) of the UK GDPR, which relates to the processing of personal data necessary for the performance of a task carried out in the public interest.
How long do we keep it for?
Data will be retained by EPIC in accordance with Data Sharing Agreements. After this time, data will be securely deleted.
What are your rights?*
You can request access to the information we process about you at any time. If at any point you believe that the information we process relating to you is incorrect, you can request to see this information and may in some instances request to have it restricted, corrected or, erased.
If you wish to exercise any of these rights, please submit your request via epic.scotland@sruc.ac.uk
*Please note that the ability to exercise these rights will vary and depend on the legal basis on which the processing is being carried out.
Complaints
If you wish to raise a complaint on how we have handled your personal data, you can contact the University of Glasgow Data Protection Officer who will investigate the matter.
Our Data Protection Officer can be contacted at epic.scotland@sruc.ac.uk
If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law, you can complain to the Information Commissioner’s Office (ICO).
Last updated
28 January 2025