School meals

Privacy Notice

Your information: Fingerprint biometrics for school meals

Data Controller

We are a local authority established under the Local Government etc. (Scotland) Act 1994. Our head office is located at Newtown St Boswells, Melrose TD6 0SA.  You can contact us on 0300 100 1800 or CustomerAdvice@scotborders.gov.uk.

Data Protection Officer

Our Data Protection Officer can be contacted using the contact details as set out above or by email at dataprotection@scotborders.gov.uk

How we will use your information

You are consenting for us to be able to use a mathematical algorithm to authorise transactions within the school setting. We will turn your finger impression into a mathematical algorithm which will identify you at the dining hall point of sale, authorise transactions in the school shop and potentially to register attendance at the start of the day.

The finger impression will be discarded as soon as the algorithm is created and the stored information cannot be used to create the finger impression. Biometric information will be deleted when you leave the school. You may also withdraw your consent at any time by contacting the school office.

Who we may share your information with

Your information will be accessed by our staff who need to use it in order to provide the service described above. The mathematical algorithm (not the biometric fingerprint) will be shared with the following third-party organisation  - CRB Cunninghams – under Article 9(2)(a) as you have given consent for your fingerprint to be taken and changed to a mathematical algorithm.  .

Your information may also be shared and analysed internally in order to provide management information, inform service delivery reform and similar purposes to meet our duty to achieve best value and continuous service improvement. 

In general we do not transfer personal data outside either the UK or the European Economic Area (EEA) and on the rare occasions when it does so we will inform you. We will only transfer data outside the UK and the EEA when it is satisfied that the party which will handle the data and the country it is processing it in will provide adequate safeguards for personal privacy. 

Decision-Making

We do not use profiling or automated decision-making processes. Some processes are semi-automated (such as anti-fraud data matching) but a human decision maker will always be involved before any decision is reached in relation to you.

Third Party Information

If you have provided anyone else's details to us, please make sure that you have told them that you have given their information to Scottish Borders Council.  We will only use this information as part of the assessment of your need for services and to contact them in connection with delivery of any such services. If they want any more information on how we will use their information they can view our full privacy statement on our website or by email dataprotection@scotborders.gov.uk.

Your rights

You have the right to request access to any personal data held about you by us. You can also request that we restrict the use of your information or even object to any further processing. You can do this by contacting the Data Protection Officer. We will respond to your request within 30 calendar days. For more information on your rights please visit our Data protection and your rights webpage or alternatively if you would like a hard copy of this information, please contact us.

How to raise a complaint

We aim to directly resolve all complaints about how we handle personal information. If your complaint is about how we have handled your personal information, you can contact our Data Protection Officer by email dataprotection@scotborders.gov.uk or phone on 0300 100 1800.

However, you also have the right to lodge a complaint about data protection matters with the Information Commissioner's Office (ICO), who can be contacted by

  • post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
  • phone on 0303 123 1113
  • Visit the ICO website

If your complaint is not about a data protection matter, visit our Making a complaint webpage for more information.