Who We Are
Brightstar Scotland offers bespoke events and association management services for some of Scotland’s key professional bodies. We develop and support a wide range of professional learning events, seminars and conferences and provide management and membership services across Scotland.
In order to be able to undertake our work, we make use of personal information – almost wholly basic contact details and financial information of our associates and clients. In this notice, you can read how we collect and use personal information, as well as your rights in relation to this. If you have any questions, please don’t hesitate to contact us.
Importantly, any personal data collected through this website and held by Brightstar Scotland or its associates is treated in line with the principles of the General Data Protection Regulation 2016.
Processing and Use of Personal Information
Lawful Basis for Processing Personal Data
GDPR Art 6 (1) (a) Consent: the individual has given consent to the processing of his or her personal data for one or more specific purposes.
(b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
(f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, may also be used as a basis for processing personal data.
Purposes of Data Processing and Storage
To communicate to potential or current Brightstar Associates or to Brightstar clients.
To hold and process invoices sent by Brightstar Associates or to Brightstar clients.
Communication from Brightstar may take the form of direct email correspondence, telephone communication or by post.
Data Retention and Rights of the Data Subject
Brightstar will keep personal information as long as it is necessary for the purpose for which it was obtained, in compliance with existing regulations and unless asked to delete it at an earlier time. Data subjects have the following rights, including the right to erasure (the ‘right to be forgotten’) as set out in GDPR Articles 12-23.
It is the responsibility of the Joint Controllers to observe these rights and act upon requests in relation to these rights from individuals whose personal data is held by Brightstar.
Data Controllers and Processers
The lead Joint Controller is Elaine Bone, contactable at: email@example.com. The Joint Controllers and Processers of personal data are it’s associates. Furthermore, Brightstar’s appointed accountants, Soroban, will have access to personal data required for the purposes of processing client and associate invoices.
Data Storage and Protection
Personal information may be stored in one of the following locations: Dropbox, Brightstar email; Brightstar Scotland Amazon File Storage and Brightstar Associate hard-disk and Xero.
Under GDPR regulations, Brightstar staff, Data Controllers and Data Processors have a duty to report any data breach to the UK Information Commissioner’s Office.
Brightstar retains an audit of the type of personal information held, where this data is held, and the purpose and legal basis for processing this data. This can be provided upon request.
Information Sharing and Third Parties
Brightstar does not share personal information with third party organisations. Though we make every effort to preserve user privacy, we may need to disclose personal information when required by law wherein we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a court order or legal process served on our web site.
Information We Collect
You can provide us with information about yourself as a potential client, such as your name and e-mail address, by submitted an enquiry to www.brightstarscotland.co.uk. If you correspond with us by email, we may retain the content of your email messages, your email address and our responses. We may also retain any messages you send through www.brightstarscotland.co.uk.
We store details on names, email addresses, postal addresses, organisation and bank details and sort-codes for the processing of invoices from associated and clients.
Newsletter and Website Registration
A user does not have to register to use Brightstar’s website.
Information Sharing - Legal Disclaimer
Though we make every effort to preserve user privacy, we may need to disclose personal information when required by law wherein we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a court order or legal process served on our web site.
Website and Third Parties
Brightstar seeks to ensure that the information published on its website is up to date and accurate. However, the information on the website does not constitute legal or professional advice and Brightstar cannot accept any liability for actions arising from its use. Brightstar cannot be held responsible for the contents of any pages referenced by an external link.
When you visit www.brightstarscotland.co.uk, the website may send one or more cookies - a small text file containing a string of alphanumeric characters - to your computer that uniquely identifies your browser and lets the website help you log in faster and enhance your navigation through www.brightstarscotland.co.uk. A cookie does not collect personal information about you. A persistent cookie remains on your hard drive after you close your browser. Persistent cookies may be used by your browser on subsequent visits to the site. Persistent cookies can be removed by following your web browser’s directions. A session cookie is temporary and disappears after you close your browser. You can reset your web browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of www.brightstarscotland.co.uk may not function properly if the ability to accept cookies is disabled.
Cookies and Website Traffic Analysis
When users enter the Brightstar website, their device will automatically be issued with 'cookies'. Cookies are text files which identify users' computers to the Brightstar server. The website then creates "session" cookies to store some of the preferences of users moving around the website, e.g. retaining a text-only preference. Cookies in themselves do not identify individual users but identify only the device used and they are deleted on departure from the website. Many websites do this to track traffic flows, whenever users visit those websites.
The Brightstar website uses third-party cookies to measure use of the website including number of visitors, how frequently pages are viewed, and the city and country of origin of users. This helps to determine what is popular and can influence future content and development. For this purpose, the Brightstar website uses Real-time Analytics to measure and analyse usage of the website. The information collected by Brightstar will include IP Address, pages visited, browser type and operating system. The data will not be used to identify any user personally.
Users have the opportunity to set their devices to accept all cookies, to notify them when a cookie is issued, or not to receive cookies at any time. The last of these means that certain personalised services cannot then be provided to that user.
This Website contains links to other sites. Please be aware that Brightstar is not responsible for the privacy practices of such other sites, and additionally cannot verify the accuracy of the information contained on external sites - by linking to them, we are not endorsing them. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every Website that collects personally identifiable information. This privacy statement does not apply to information collected by other websites.
Changes and Notifications
Access and Changes to Your Personal Information
You have the right to request, change, or delete personal information we hold about you (such as postal code, phone, email or postal address). This can be done by sending a request to firstname.lastname@example.org.
Under the General Data Protection Regulation, individuals whose personal data is held by Brightstar have the right make a subject access request for their personal data processed by Brightstar for stated purposes. As stated earlier in this notice, data subjects have the following rights, including the right to erasure (the ‘right to be forgotten’) as set out in GDPR Articles 12-23.
Notification of Changes
Policy last updated: May 2018