Privacy policy
On these pages you will find details of the West Highland Way Management Group Privacy Statement – how we collect information and what we do with it.
Privacy Statement
This is how we generally use information collected or obtained for various services (being updated on an ongoing basis).
This privacy statement is the privacy notice for all West Highland Way Management Group services. We will use your details to provide you with the service(s) which you or someone else (with your consent) have asked us to provide. We will also use your personal details for purposes of crime prevention and crime detection and/or when required by law and will share it with other public bodies for that purpose.
Description of processing
The following is a broad description of the way we process personal information. To understand how your own personal information is processed you may need to refer to any personal communications you have received, check any privacy notices we have provided or contact us to ask about your personal circumstances.
In terms of data protection legislation, Loch Lomond and the Trossachs National Park Authority is the data controller of any personal information provided to or gathered by us.
This privacy statement describes what we will and will not do with the information we hold about you. It sets out the general approach we take, in each case with additional information relating to particular areas of our activity.
General Approach
The West Highland Way Management Group does not sell or rent your personal details to any external organisations.
For most purposes, we will only process your information with your consent. In most cases, we understand that by providing us with your details in order to obtain a service from the West Highland Way Management Group you are consenting to us using those details in order to provide that service to you. Except as set out in this privacy statement, we will not use your personal details for any other purpose without first obtaining your consent to that other purpose or purposes (you may have been asked to provide this additional consent at the time when you originally contacted us, for example in an additional section on an application or other form).
We retain personal data relative to the purpose for which it was gathered in accordance with the time periods for retention set out in the Loch Lomond and the Trossachs National Park Authority record retention schedule. This retention schedule is maintained in accordance with the Public Records Scotland Act 2011. Specific details on the use and retention of your personal data will be provided at the point we collect your data and you may contact us at any time if you have any queries about your rights as an individual in terms of how we are processing your data.
By law, we are obliged to provide information to certain other public bodies such as the Department for Work and Pensions, HM Revenues and Customs, courts, tribunals, hearings and other formal bodies dealing with legal processes, and various external regulatory bodies. We also have an obligation to assist in the prevention of crime and we will therefore generally supply specific information which we are asked to provide to the police or other crime detection agencies, provided we are satisfied that the request is connected to an investigation and that disclosure would be lawful and proportionate.
External contractors who are appointed to process information on behalf of the West Highland Way Management Group will do so under our instructions. All contractors which do this are appointed under written contracts requiring them to keep personal information safe and prohibiting them from doing anything with the personal data they process for us other than following the West Highland Way Management Group’s instructions.
Information will generally be released to the police and other criminal investigation agencies on request in relation to specific investigations; provided the West Highland Way Management Group is satisfied that legitimate grounds exist for doing so. It will also be released to government agencies able to compel disclosure such as the Child Support Agency if we receive an appropriate request. Information will be released to courts and employment tribunals in relevant cases and may be shared with external legal advisers in these cases. It will also be released in response to an order from a court with competent jurisdiction to make such an order. It may also be released (without consent) in response to investigations by external regulators such as Audit Scotland, the UK and Scottish Information Commissioners and Scottish Public Services Ombudsman.
If The West Highland Way Management Group receives a freedom of information (“FOI”) request which includes information relating to staff, then as a general rule such requests will be refused (or the staff information removed/redacted from the response) unless it relates to more senior members of staff.
However, each request will be considered on its own merits and in line with guidance issued by the Scottish Information Commissioner. Even for more senior staff, we will not release information which does not directly relate to that member of staff’s work activities, so information such as home address will not generally be released. Staff will be consulted ahead of any decision to release their personal data in response to an FOI request. The same principles apply to information relating to former members of staff (subject to the caveat that the West Highland Way Management Group may be unable to readily contact such individuals to seek their views on disclosure and will generally reach a decision without making contact).
Marketing
What is ‘DIRECT marketing’? What is ‘DESTINATION marketing’?
Direct marketing is marketing which is directed at specific individuals as opposed to, for example, a newspaper advertisement which would be marketing but not direct marketing as it isn’t directed at you as a particular individual.
Controlling your personal information for direct marketing purposes:
You may choose to restrict the collection or use of your personal information for direct marketing purposes in the following ways:
Whenever you are asked to fill in a form on the website or on an application or competition form or otherwise, look for the box that you can click to indicate that you do not want the information to be used by anyone for direct marketing purposes
If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us. Every email we send gives you this option.
E-Mailing
When you send us an email, we use your email address to thank you for your comment and/or reply to your enquiry, and we will store your communication and our reply for any future correspondence in accordance with our data retention policy. Beyond our initial reply, we will never use your email address to send you any unsolicited message or information, nor will we share it with or sell it to anyone else for such use.
When you accept to receive information about our services, promotions, newsletters, press releases, and/or offers, we use your email address and any other information you give us to provide you with the information or other services, until you ask us to stop (using the ‘unsubscribe’ instructions provided with each email communication and/or on the site where you signed up, and/or as we otherwise provide), or until the information or service is no longer available.
Social Media
This website uses the social plugin “like” button, widgets such as “share this” button, or Facebook Pixels, provided by the social network facebook.com, operated by Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304, USA (“Facebook”). The plugin is identifiable by the bluish and white Facebook logo “f”.
By visiting our website(s) your browser (and in some cases your mobile device) establishes a connection to Facebook servers. Facebook directly transfers the plugin, widget or other similar technologies (like pixels) content from your browser (or mobile device), enabling Facebook to receive information about you having accessed the respective page of our website(s). We have no direct influence on the data gathered by these technologies.
If you are logged into Facebook, your visit can be assigned to your Facebook account. If you interact with the plugin by clicking “Like” the corresponding information is transmitted from your browser directly to Facebook and stored by it. Even if you are not logged into Facebook, there is a possibility that the plugin transmits some data e.g. your IP-address to Facebook.
For the information on the purpose and scope of data collection and processing by Facebook, as well as your rights in this respect and settings options for protecting your privacy please visit Facebook’s privacy policy or Facebook’s advertising guidelines.
If you are a Facebook member and do not want Facebook to connect the data concerning your visit to our website with your member data already stored by Facebook, please log out of Facebook before entering our website(s).
The West Highland Way Management Group does not intentionally upload any personal information to Facebook for the purposes of targeted marketing e.g. using Facebook services like Custom Audiences.
For more information about how online behavioural advertising works and what you can do to manage your privacy, please visit the pan European Interactive Digital Advertising Alliance (EDAA) website: Your Online Choices.
Your Rights under Data Protection Legislation
You have a number of rights under data protection legislation in regards to how your data is processed. As a minimum you should be given ‘fair processing’ information which is sometimes referred to as a ‘privacy’ notice or statement. This online ‘privacy statement’ constitutes our general approach to how we process personal information in accordance with our approved Information Use and Privacy Policy. There may be other more specific privacy notices or statements you will have been given or made readily available for a service you are obtaining from us, e.g. in an online or offline form, public notice or orally, etc. You have the following rights in respect to how your data is being processed:
Subject Access Requests (Requests for copies of your personal data that we hold)
The right to request (in writing) a copy of your personal data held by us, given to you in a permanent form. You are entitled to be given if requested:
A description of the personal data being processed
A description of the purposes for which it is being processed
A description of any likely recipients
Any information on the source of this data
Where any automated decisions have been taken, the ‘logic’ behind these decisions
Automated Decisions
You have the right, by notice, to prevent any automated decisions.
Direct Marketing
You have the right to request in writing to cease, or not begin, processing of your personal data, for the purpose of direct marketing.
Preventing Processing
You have a right to request to cease processing personal data if you believe it would cause you ‘damage’ or ‘distress’.
Rectification, Blocking, Erasure & Destruction
By order of a court, you have the right to have any inaccurate personal data or expression of opinion which appears to be based on that inaccurate data, to be rectified, erased, blocked or destroyed.
Complaints to the Commissioner
You have the right to ask the Information Commissioner to carry out an ‘assessment’ of the processing of your personal data if you believe it directly affects you (causes ‘damage’ or ‘distress’) to determine whether the processing is undertaken in accordance with the law.
ICO Scotland contact details
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
How do I make a Subject Access Request?
You must:
supply information to prove who you are (to eliminate risk of unauthorised disclosure)
supply appropriate information to help us to locate the information you require.
Your request should include details and provide evidence of who you are (e.g. driving licence, passport, birth certificate, utility bills). You should also provide as much detail as possible regarding the information you wish to access (e.g. where and by whom information is believed to be held, specific details of information required).
This list is not exhaustive and other forms of identification may be acceptable. At least one form of identification should contain the same signature that is on your application form or letter and one must include a photograph. Please note that the West Highland Way Management Group will not be able to comply with any requests received unless satisfactory proof of identification is provided.
You are not required to state WHY you wish to access the information: the details we require are merely those that will aid the efficient location and retrieval of information.
Once we receive a Subject Access Request, you will receive all the information that has been located and can be released within one calendar month and an explanation for any information that cannot be provided at that time.
Upon receipt of a request, we must provide:
information on whether or not the personal data are processed
a description of the data, purposes and recipients
a copy of the data
an explanation of any codes/jargon contained within the data.
We must respond to Subject Access Requests within one calendar month.
Email: info@lochlomond-trossachs.org
Write to:
WHW Management Group
c/o National Park Authority
Carrochan
Carrochan Road
Balloch G83 9EG
Website Privacy Policy
In terms of data protection legislation, the Park Authority is the data controller of personal data (information relating to identifiable living individuals) collected or obtained by or through this website
The Park Authority is registered under the Data Protection Act 1998 and as a data controller (notification number Z6815521); the register entry can be inspected in the ICO’s Register of Data Controllers.
Our websites do not automatically capture or store personal information, other than logging the user’s IP address and session info such as the duration of the visit and the type of browser used. This is recognised by the Web server and is only used for system administration and to provide statistics which the Park Authority uses to evaluate use of the site.
All marketing information will include an option for you to opt out of any future, similar correspondence. We do not contact children under 12 without the CONSENT of a legal parent or guardian.
Information Security
We believe that keeping personal information secure is one of our most important responsibilities.
We maintain all necessary physical, electronic and procedural security to help safeguard personal, sensitive and payment data against loss, misuse or alteration. Third parties that provide us with support or services may also receive personal, sensitive or payment information, and we require them to maintain security measures similar to ours with respect to such information.
In compliance with the Privacy and Electronic Communications Regulations 2003 (as amended) subscribers are given the opportunity to un-subscribe at any time. This process is detailed at the footer of each email campaign.
Social Media Platforms (Facebook, Twitter etc.)
Communication, engagement and actions taken through external social media platforms that we utilise, and users participate on, are bound to the terms and conditions, and the privacy policies held with each social media platform respectively.
Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. We will never ask for personal or sensitive information through social media platforms, and encourage users wishing to discuss sensitive details to contact us through our standard primary communication channels, such as by telephone or in writing.
Some of our websites use social plugins which help share web content directly from web pages to the social media platform in question. Users are advised before using such social plugins we utilise that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.
Under 12
If you are aged 12 or under, please ask your parent or guardian’s permission before you provide personal information on any of our websites
Content Accuracy on our Websites
The information provided on our websites is believed to be accurate at the time of writing but West Highland Way Management Group accepts no liability for the contents and anyone relying on these contents does so at their own risk. Nothing on our websites is to be construed as binding the West Highland Way Management Group or constituting an offer on behalf of the West Highland Way Management Group.
Scope of Policies
This privacy policy only covers the West Highland Way Management Group website at https://www.westhighlandway.org/ Any links within this site to other websites are not covered by this policy and individuals should check the terms of the privacy policy of those other sites for their terms. The West Highland Way Management Group.is not responsible for the content of external websites.
Changes to this Website Privacy Policy
Any changes to this Privacy Policy will be posted on our website.