Data Protection/ Privacy Statement

Jobs and Business Glasgow (JBG) is a company limited by guarantee (SC108565) with charitable status (SC023930). JBG’s head office is located at Ladywell Business Centre, 94 Duke Street, Glasgow, G4 0UW. JBG is an Arm’s Length External Organisation of Glasgow City Council with the aim of delivering economic development activity on behalf of the city.

Property by Jobs and Business Glasgow Ltd, a trading subsidiary of JBG, is a company limited by guarantee (SC142446).

Contact details for our Data Protection Officer can be found at www.glasgow.gov.uk/privacy.

We only ask for the minimum personal data necessary to provide the service you request or are entitled to. The purpose of processing is the service or entitlement for which the information is being collected, and your personal data will not be used for another purpose, unless further specified on the service-specific privacy statements, or otherwise provided to you as appropriate, or as provided for by law.

Please refer to the specific purposes on the service-specific privacy notices for further processing of your information. We also use your information to verify your identity where required, contact you by post, email or telephone and to maintain our records.

The precise legal basis for us using your personal information will vary depending on which service we are providing to you. However, in most cases this will be because it is necessary for us to use your personal information to perform a task carried out in the public interest by us.

If we are using your personal information on a different basis, this will be explained in the specific privacy statements relating to those functions.

If we are using your information because:

• it is required for us to have a contract with you
• or you have consented to give it and if you do not provide us with the information we have asked for, we will not be able to provide that service to you.

Sensitive Information

For some activities, we also need to process more sensitive personal information about you for reasons of substantial public interest as set out in the Data Protection Act 2018. It is necessary for us to process this more sensitive information for a number of reasons, these include:

• to carry out key functions as set out in law
• in order to meet our legal obligations in relation to employment, social security and social protection law
• in order to protect your vital interests or the vital interests of others in circumstances where we will not be able to seek your consent
• where this is necessary for the establishment, exercise or defence of legal claims

for purposes of the provision of social care and the management of health and social care systems and services where this is necessary in the public interest in the area of public health

• for archiving, research and statistical purposes.

We are legally obliged to safeguard public funds so we are required to verify and check your details internally and across the council family to prevent fraud – and we may share this information with other public bodies for the same purpose.

We are also legally obliged to share certain data with other public bodies, such as HMRC and will do so where the law requires this. In general, we will also comply with requests for specific information from other regulatory and law enforcement bodies where this is necessary and appropriate.

Your information is also analysed internally to help us improve our services.

The parties we share your information with will vary depending on which service we are providing to you. Please refer to the service-specific privacy notices for further information.

We only keep your personal information for the minimum period amount of time necessary. Sometimes this time period is set out in the law, but in most cases it is based on the business need. We maintain a records retention and disposal schedule which sets out how long we hold different types of information for.

You can view further information on our Records Retention Schedule or you can request a hard copy from the contact address stated above.

• access to your information – you have the right to request a copy of the personal information that we hold about you.
• correcting your information – we want to make sure that your personal information is accurate, complete and up to date. Therefore you may ask us to correct any personal information about you that you believe does not meet these standards.
• deletion of your information – you have the right to ask us to delete personal information about you where:
  • I. you think that we no longer need to hold the information for the purposes for which it was originally obtained
  • II. we are using that information with your consent and you have withdrawn your consent – see Withdrawing consent to using your information below
  • III. you have a genuine objection to our use of your personal information – see Objecting to how we may use your information below
  • IV. our use of your personal information is contrary to law or our other legal obligations.

Objecting to how we may use your information – You have the right at any time to tell us to stop using your personal information for direct marketing purposes.

Restricting how we may use your information – in some cases, you may ask us to restrict how we use your personal information. This right might apply, for example, where we are checking the accuracy of personal information that we hold about you or we are assessing the objection you have made to our use of your information. This right might also apply if we no longer have a basis for using your personal information but you don’t want us to delete the data. Where this right is realistically applied will mean that we may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.

Withdrawing consent to use your information – Where we use your personal information with your consent you may withdraw that consent at any time and we will stop using your personal information for the purpose(s) for which consent was given.

Please contact us as stated above if you wish to exercise any of these rights.

Contact with you for marketing purposes: You may choose to opt in or to restrict the collection or use of your personal information for marketing purposes, including case studies. If you have previously consented for marketing purposes, you can withdraw your consent by contacting us, or for every electronic marketing message we send you, there is also an unsubscribe link, and where applicable.

Monitoring and statistical research: Some information is analysed after collection and during use to provide statistical information to help improve services, monitor equality and other similar purposes.

Payment facilities: For one-off card payments on behalf of a cardholder, our staff enter payment card details into a payment processing device. If our staff enter cardholder details on behalf of the user, it is entered only as instructed and not recorded or stored in any permanent form.

Information you have given us about other people

If you have provided anyone else’s details, please make sure that you have told them that you have given their information to Jobs and Business Glasgow. The purpose that we use this information for will be detailed in the service specific privacy statement. If they want any more information on how we will use their information they can visit our web site www.jbg.org.uk/privacy or email customercare@jbg.org.uk

We aim to directly resolve all complaints about how we handle personal information. However, you also have the right to lodge a complaint with the Information Commissioner’s Office. Contact details for our Data Protection Officer and for the ICO can be found on Glasgow City Council’s website under www.glasgow.gov.uk/privacy.

If you cannot find the privacy statement you require, or would like more details on how we process your personal information, please email: customercare@jbg.org.uk

Service Specific Privacy Statements

• Employability
• Room Hire 
• Property

Company Wide Privacy Notices

• Subject Access Requests
• Freedom of Information and EIR Requests
• Complaints
• Employees