Privacy Notice

Scomis operate as a not-for-profit, wholly traded service as part of Devon County Council (DCC). DCC are a Data Controller under Data Protection Legislation and our ICO registration number is Z6475582.

This notice explains what information we collect, why we collect it and how we keep it secure. It also explains your rights and our legal obligation. Should you wish to find out more, please contact our Data Protection Officer.

Changes to this Privacy Notice

This Privacy Notice was last updated on the 11^th June 2021. It will be reviewed at least annually and we will publish any updates on our website.

If we use your personal data for any new purposes, updates will be made to the policy information and changes communicated, where necessary, in accordance with current data protection legislation. Any queries relating to this Privacy Notice, please contact our Data Protection Officer.

Information we collect

This Privacy Notice tells you what to expect when Scomis collects personal information. It applies to information we may collect, store or otherwise process information about you related to the services described below:

Visitors to our Website

We collect information about you on our website using forms and other methods, which could include the following:

Personal information – such as Title, Full name, Email address, Job title, Local authority, Telephone number

School information – such as Establishment, Registration Code

Cookies – these are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

More information on cookies used as part of the operation of this website can be found here.

Links to other websites – our site contains links to external websites. This Privacy Notice only applies to our websites and services, if you use the links to visit external websites we encourage you to read their Privacy Notices.

Why we collect and use your personal data

We aim to provide a high quality of service delivering the services we offer from our service catalogue. To do this, it is sometimes necessary to collect a small amount of personal data which we will only collect where it is necessary.

We may need to collect personal data so we can:

deliver a contractual service to you
provide you with information because you have asked us to do something before entering into a contract (e.g. provide a quote)
respond to feedback regarding how personal data has been handled
respond to requests from data subjects, to exercise their rights under Chapter III of the General Data Protection Regulation
carry out a risk assessment
carry out a security incident investigation

Personal data that is collected for any of the purposes outlined in this notice is never sold on to any third parties. Information that is collected for any of the purposes listed on this Privacy Notice will be held for the statutory period required from the date that the intended purpose is fulfilled.

The legal basis for us collecting your personal data

Where we are collecting personal data about you for the provision of one of the services outlined in this Privacy Notice, we rely upon the following articles of the General Data Protection Regulation as the lawful basis for processing this personal data:

Article 6 (1)(a) Consent: the individual has given clear consent for you to process their personal data for a specific purpose

Article 6 (1)(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract

We may also need to share some personal data about you, so that we can support third party organisations to discharge their regulatory requirements. This includes organisations such as:

the data protection regulator (the Information Commissioner’s Office)

We may also share information to enable us to comply with court orders and other legal obligations. If this is necessary, we will only share the minimum amount of personal data needed for this purpose.

Your data protection rights

Under Data Protection Legislation, you have the right to obtain a copy of their personal records held by us; this is called a Subject Access Request (SAR).

International transfers

We do not transport or share personal data outside of the European Union.

Your right to complain

If you have any comments, queries or in the event that you wish to complain about the way that your personal data has been handled by Scomis, you should write to Devon County Council’s Data Protection Officer and clearly outline your case. Your complaint will then be investigated in accordance with the Council’s customer feedback procedure. If you remain dissatisfied with the way your personal data has been handled, you may refer the matter to the Information Commissioner’s Office whose contact details are below:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Email: casework@ico.org.uk