We recognise the importance of protecting the privacy of the users of our websites. Any personal data collected through this website will only be held and used with care and in accordance with this policy and the Data Protection Act 1998. This policy was updated on 1 July 2011 in accordance with the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011.
The Data Protection Act
Under the Data Protection Act, we have a legal duty to protect any information we collect from you. We use leading technologies and encryption software to safeguard your data, and keep strict security standards to prevent any unauthorised access to it.
Collection and use of personal information
Historic Environment Scotland (HES) is the sole owner of the information collected on this website. HES processes personal data for the purposes of providing the service that you have signed up for. We may share non-personal aggregate statistics (group) data about visitors to this website, use and other traffic patterns with connected, or third parties. However, we do not sell or share any information outside HES about you as an individual user of this website unless you agree to us doing so.
Online data collection
We will not collect any personal information about you, except where it is specifically and knowingly provided by you, for example when you register as a user of the website or request information or provide us with feedback on the website. We collect two kinds of information from visitors: your details (through registration) and site usage information, using cookies and page tagging techniques.
This information is stored securely on our database until such time as you choose to unsubscribe from hearing from us. Users who no longer wish to receive our e-newsletters and other updates may opt-out of receiving these communications by clicking unsubscribe option on any email communication received or the user may contact us to opt-out.
Offline data collection
Historic Environment Scotland collects personal data from a variety of sources including the visitor book, competitions, quizzes and discount vouchers. None of this data is collected without the user’s permission. Information that is collected includes name, address, email address, telephone number and preferences. This information is stored securely on our database until such time as you choose to unsubscribe from hearing from us. Users who no longer wish to receive our mailings, e-newsletters and other updates can click on the Unsubscribe link on any email communication, or contact us at email@example.com to opt out of postal contact.
You do not have to register to use our websites but you must register if you wish to join our e-newsletters, email alerts, shop on our website or visit the members-only area.
When you shop on this website, we will ask you to input and will collect personal information from you such as your name, email address, billing address, telephone number, product selections, payment information and a password. We may also collect information such as where you are on the internet, your browser type, the country you accessed the site from and the pages of our website that were viewed during your visit.
We confirm that any personal information which you provide to us and any user information, from which we can identify you, is held in accordance with the registration we have with the Information Commissioner's Office. We will use your information only for the following purposes:
- Processing your orders
- Statistical purposes to improve this website and its services to you
- Servicing website content
- Administering this website
Historic Environment Scotland also maintains an opt-in policy in regard to sending promotional e-communications. When you are contacted by email, you will be told how to opt out of hearing from us if you wish. Users who want to be removed from our database can also contact us directly.
International data transfer
Personal information that is submitted to us to purchase online tickets and/or guides (audio, souvenir) on www.edinburghcastle.scot, www.stirlingcastle.scot or membership on www.historicenvironment.scot/member will be transferred to, and stored at a destination outside the European Economic Area (EEA”). At present the personal data is being transferred, stored and processed in the United States of America or Canada. Different countries have different data protection laws, some of which provide more protection than others. In these circumstances contractual safeguards are in place to comply with laws applicable to such transfers, as defined in the Data Protection Act 1998. By providing us with your information you agree to such international data transfer and storage in accordance with the terms of this Policy.
Though we make every effort to preserve user privacy, we may need to disclose personal information when required by law wherein we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a court order or legal process served on our website.
Third Party Intermediaries
We use an online ticket store user database. This does not retain, share or use personally identifiable information for any secondary purposes.
Notification of changes
Historic Environment Scotland (HES) Data Protection Policy
The Data Protection Act 1998 (DPA) was passed in order to implement the European Directive on data protection and applies to all personal data which are held either electronically or in a manual filing system. The Act commenced on 1 March 2000 with most of its provisions becoming effective on 24 October 2001.
HES is committed to a policy of protecting the rights and freedoms of individuals with respect to the processing of their personal data. The Historic Scotland Data Protection Policy was approved by the HES Board on 16 November 2015.
Download our Data Protection Policy [PDF, 305KB]
HES holds personal information about individuals such as employees, members and others, defined as data subjects in the Act. Such data must only be processed in accordance with this policy and with the terms of the Historic Environment Scotland’s Notification to the Information Commissioner, which sets out the purposes for which HES holds and processes personal data.
Any breach of the policy may result in HES, as the registered Data Controller, being liable in law for the consequences of the breach. This liability may extend to the individual processing the data and his/her Head of Department under certain circumstances.
This policy applies regardless of where the data is held and, in respect of automatically processed data, the ownership of the equipment used, if the processing is for Historic Environment Scotland purposes.
Telephone: 0131 668 8600
Data Protection Officer
Historic Environment Scotland