Privacy Notice

Find out how we handle your data as part of the Historic Places, Breathing Spaces campaign

This privacy notice applies to the wellbeing campaign entitled ‘Historic Places, Breathing Spaces’ (the “Wellbeing Campaign”) run by Historic Environment Scotland, as described on the webpage Historic Places, Breathing Spaces.  

Please see our Historic Environment Scotland website privacy notice for details of other ways in which we may collect and process your personal data and other important information regarding your personal data and your data protection rights. 

Please see our terms and conditions for information about how to participate in the Wellbeing Campaign.  

1. General information 

1.1 Controller 

We are Historic Environment Scotland, an executive non-departmental public body, incorporated and established under the Historic Environment Scotland Act 2014, being a registered charity (Scottish Charity number SC045925) and having its principal office at Longmore House, Salisbury Place, Edinburgh, EH9 1SH (referred to as “HES”, “we”, “us” or “our” in this privacy notice). 

We are a data controller and responsible for your personal data, in accordance with the Data Protection Act 2018 and related data protection legislation (including the UK General Data Protection Regulation). 

Our registration number at the Information Commissioner's Office is ZA143443. 

1.2 Data Protection Officer 

We have appointed a data protection officer (“DPO”) who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the DPO using the details set out below. 

You have the right to make a complaint at any time to the Information Commissioner's Office (“ICO”), the UK regulator for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance. 

1.3 Contact Details 

By post 
The Data Protection Officer 
Historic Environment Scotland 
Room G.50 
Longmore House 
Salisbury Place 
Edinburgh, EH9 1SH 

By email 
dataprotection@hes.scot

By telephone 
0131 668 8600 

2. Changes to the privacy notice 

We keep our privacy notice under regular review. This version was last updated on 18 June 2025.

3. Website information 

3.1 Webpage 

This webpage forms part of our website (www.hes.scot or www.historicenvironment.scot) (the "Website"). For more details about what personal data we may process when you use our Website, please see our main Privacy Notice. For more information regarding the cookies that we use on our Website, please see our separate Cookie Policy

3.2 Children 

This webpage is not intended for children and we do not seek to collect any personal data relating to children via this webpage or the Wellbeing Campaign. 

4. Submissions to the Wellbeing Campaign 

If you submit a photograph, video or written story (“Submission”) to our Wellbeing Campaign: 

What we receive and process 

Why 

Legal Basis 

Your full name, email address, and region in which you are located.  

To enable us to receive your Submission * 

This is necessary for the performance of a contract, namely the Wellbeing Campaign Terms and Conditions.  

 Your email address 

To enable us to contact you in connection with your Submission 

This is necessary for the performance of a contract, namely the Wellbeing Campaign Terms and Conditions.  

Images or film which include your face, voice, or other identifying information about you** 

To enable us to deal with your Submission.  

This is necessary for the performance of a contract, namely the Wellbeing Campaign Terms and Conditions.  

Images or film which include the face, voice, or other identifying information about someone other than you ** 

To enable us to deal with your Submission. 

To enable us to anonymise or delete any data contained in a submitted photograph or video which may identify an individual 

Our legal basis for this is the consent of the relevant individual(s).  

* All submissions to the Wellbeing Campaign shall be made using the submission form

** Where you have submitted photos or videos of individuals (including yourself) or other data which may identify an individual as part of your submission to the Wellbeing Campaign, you must have the consent of that individual (or in the case of a child, the consent of the parent or legal guardian) to do so. We reserve the right to remove your Submission (or part of your Submission, if applicable) from the Exhibit if a person in that Submission objects to their being included in it. This will be done by us without reference to you.   

5. Enquiries 

If you contact us with an enquiry about the Wellbeing Campaign: 

What we collect 

Why 

Legal Basis 

Your name, contact details (personal email address and/or social media identifier) and details of your enquiry 

To enable us to respond to your enquiry about the Wellbeing Campaign 

This is necessary for the purposes of our legitimate interests (to respond to enquiries and to manage our business effectively) 

To enable you to report to us any problems or suspected problems at a Property in Care (whether or not as part of the Wellbeing Campaign) 

This is necessary for the performance of a task carried out in the public interest and this is a legal requirement. 

To enable us to respond to requests made under freedom of information legislation 

This is a legal requirement 

Your name, contact details (contact address and/or personal email address and/or telephone number and/or social media identifier), details of your enquiry and proof of identity documentation 

To enable us to respond to requests made under data protection legislation 

This is a legal requirement 

6. Sharing information 

There may be circumstances in which we need to share your personal data with certain third parties who are also controllers under the applicable data protection legislation and/or with certain third-party service providers who are our data processors. Please see our main Privacy Notice for further details. 

7. International transfers 

We do not transfer your personal data outside the UK or the EEA. Personal data may be transferred between the UK and the EEA on the basis that the EEA has been deemed by the ICO to provide an adequate level of protection for personal data and vice versa. 

8. Automated decision-making 

We do not use any automated-decision making or profiling in respect of your personal data.

9. How long will we retail your personal data?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. 

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, and the potential risk of harm from unauthorised use or disclosure of your personal data. We also consider the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. 

10 Other important information 

For more information regarding data security, your data protection rights and how to exercise your data protection rights, please see our main Privacy Notice