How we use your data (51-1)

Basic privacy statement

At SAAS we take our responsibilities for how we store, secure and use your personal information seriously and always seek to respect your privacy and meet our legal obligations. These obligations include the General Data Protection Regulation, the Data Protection Act 2018, and other regulations/legislation relating to privacy and communications. Read our full privacy statement (opens in new tab), including your individual rights. This explains more about how we use your personal information, your rights and how to exercise them.

Why we process your data - when applying for student funding you supply us with personal information in support of your application. We may use this information:

- for the provision of financial support to learners in Scotland, including eligibility and payment of bursaries and grants and assessment of student loans

- for appropriately managing public funds through audit, the prevention, detection, investigation and reporting of crime, including fraud, and for the recovery of overpayments

- contributing to research, statistical analysis and policy developments that support learners and the provision of learning support, and improving service levels

Our processing is therefore necessary for performing tasks carried out in the public interest or in exercising official authority invested in us. SAAS is the Controller for your personal information acting on behalf of the Scottish Ministers. Further information on the type of processing undertaken by SAAS and the lawful purpose for processing personal data can be found in the main student privacy statement.

If you don't share your data - SAAS will use your personal information to assess your application, which may be done automatically or by individuals who work for us. As well as assessing your application, we will use your personal information to ensure payment of eligible funding.

If you fail to provide all the information required to assess an application for support, you may not get the funding you're entitled to. We cannot accept any liability for problems caused by incorrect information you provide so please double-check all information. If you knowingly provide incorrect information, you could be investigated and reported for fraud.

The data we may use about you - We collect information from you in various ways including paper and online forms, email, telephone, face to face, social media and audio recordings.

Personal information we process, when necessary, can include name, date of birth, address, relationship status, email address, phone numbers, bank details, National Insurance number, residency eligibility information, education, employment, course information and income details. Sensitive personal information we process can include medical information for assessing Disability Support.

Who we share data with and why - We will share information with:

- universities, colleges and other public bodies to ensure the best outcomes for learners in Scotland

- Police Scotland, HMRC, NFI, Fraud Prevention Agencies and other organisations for the purpose of crime prevention, detection, investigation and reporting

When sharing your information with other organisations we always ensure that sharing is lawful, fair and transparent and that the organisation can provide assurance that appropriate security measures will be in place to protect your information

How long we keep your data - We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for including any legal, accounting or reporting requirements. (51-2)

Individual Rights

Data protection legislation provides data subjects with certain rights including the right to access; the right to rectification; the right to erasure; the right to restrict processing; the right to object and rights in relation to automated decision making and profiling. If you are not satisfied with a request you have the right to make a complaint to the Information Commissioner's Office.
Further information can be found in the full SAAS Student Privacy Statement.

Cookies

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site. The cookies we use (opens in new tab) do not access your computer to obtain personal information and they do not collect information that could identify you.

The SAAS website and online services uses cookies to:

  • Make sure our website works properly;
  • Collect data about the use of our website, including the number of visitors and how frequently pages are viewed;
  • To ensure the secure function of the SAAS online service;
  • To remember your preferences and make the website easier to use.

Fraud statement

Prevention, Detection, Investigation and Reporting of Crime

SAAS is under a duty to protect the public funds it administers, and to this end will use the information you have provided on this form for the prevention and detection of fraud. We will also share this information with other bodies responsible for auditing or administering public funds for these purposes.

For further information, read our Fraud Prevention Guide (opens in new tab) or contact the SAAS National Fraud Initiative Key Contact at: SAAS Counter Fraud Team, Saughton House, Broomhouse Drive, Edinburgh, EH11 3UT or by email SAASCFT@gov.scot.

Fraud Prevention Agency Fair Processing Notice

The personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity.

If fraud is detected, you could be refused further funding from SAAS and certain services, finance or employment from other organisations.

Further details explaining how the information held by fraud prevention agencies may be used can be obtained by reading the full SAAS Privacy Statement (opens in new tab).

You can also obtain a copy of the full fair processing notice by writing to us at: SAAS Counter Fraud Team, Saughton House, Broomhouse Drive, Edinburgh, EH11 3UT or by email SAASCFT@gov.scot. This will include further details on your data protection rights and how your information will used by us and these fraud prevention agencies. (51-2b)

Back