Data controller and contact details
Scottish Borders Council (including your child's school) is the data controller. We are responsible for ensuring your child's personal information is handled safely and lawfully.
- Address: Newtown St Boswells, Melrose, TD6 0SA
- Enquiries: 0300 100 1800 | customeradvice@scotborders.gov.uk
- Education service
- Data Protection Officer: dataprotection@scotborders.gov.uk
Protecting your child’s identity
Before using Autodesk Inventor Education, we assess whether the educational purpose can be achieved without using personal data and limit information to what is necessary: Anonymisation: Design work and general reporting should not include identifiable information unless it is necessary for the approved learning activity. Data minimisation: School-managed accounts use the minimum identity, school, role and entitlement information needed for sign-in, licensing and administration. Personal email accounts must not be used.
Information we use and purpose
We have determined that the minimum data required to provide Autodesk Inventor Education may include: first name, last name, Glow email address, school, role and product entitlement. Age, date of birth or age-confirmation information may be used where Autodesk requires it to confirm eligibility. We use this information to:
- Authenticate authorised users, administer school-managed accounts and assign Autodesk Inventor licences on approved devices.
- Support Design and Manufacture, engineering, technical and vocational learning, manage access and security, and provide authorised technical support.
Legal basis and safety measures
- Lawful Basis: We process this data under Public Task, because it is necessary to provide education and curriculum learning under the Education (Scotland) Act 1980, the Standards in Scotland’s Schools etc. Act 2000 and the Education (Scotland) Act 2016.
- Security: A Data Protection Impact Assessment (DPIA) has been drafted. Required controls include institution-managed accounts, Glow single sign-on, multi-factor authentication where supported, managed Windows devices, least-privilege administrator access, encryption, logging, patching and approved SBC storage. Shared accounts and personal email registrations are prohibited.
- Retention: Product access is removed promptly when no longer needed and school user lists are reviewed at least annually and through course, term and leaver processes. As removing a licence does not itself delete the underlying Autodesk account or content, a separate deletion request will be made where appropriate. Autodesk’s published information does not specify one fixed retention period, so this arrangement remains subject to confirmation in the final contract and DPIA.
Data sharing and decision making
| Sub-processor | Country / location | Purpose | Stores pupils data? |
|---|---|---|---|
| Akamai | United States | Security management services. | No |
| Amazon Web Services, Inc. | Ireland, United States and Australia | Cloud service provider infrastructure used to support Autodesk offerings. | No |
| AppOmni, Inc. | United States | Assesses security posture and monitors for threats associated with integrated applications. | No |
| Autodesk, Inc. and Autodesk affiliates | United States | Autodesk group processing required to provide, administer and support Autodesk offerings. | No |
| Cloudflare | United States | Advanced security protection and optimisation of application delivery. | No |
| Datadog, Inc. | United States | Crash reporting and performance benchmark application services. | No |
- Who sees it: Access is limited to the pupil or staff member, named school Autodesk administrators, authorised SBC or CGI technical support, Autodesk personnel and approved service providers where necessary for accounts, licensing, security and support. SheerID may receive the nominated administrator’s minimum eligibility evidence where verification is required. Information may be processed internationally by Autodesk group companies and service providers, subject to the applicable agreement and transfer safeguards.
- No Automated Decisions: Autodesk Inventor Education is not approved to make solely automated decisions or create profiles that produce legal or similarly significant effects. Optional cloud, public-gallery and unassessed sharing features must not be used under this notice.
Your rights and complaints
Depending on your child’s age and capacity (usually from age 12 in Scotland), they or their parent/guardian have the right to access their data or request corrections. They may also ask us to restrict processing or object in certain circumstances. For concerns or to exercise your rights, please contact the Headteacher or visit our Data protection and your rights webpage.
How to raise a complaint
We aim to directly resolve all complaints about how we handle personal information. If your complaint is about how we have handled your personal information, you can contact our Data Protection Officer by email dataprotection@scotborders.gov.uk or phone on 0300 100 1800.
However, you also have the right to lodge a complaint about data protection matters with the Information Commissioner's Office (ICO), who can be contacted by
- post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- phone on 0303 123 1113
- Visit the ICO website
If your complaint is not about a data protection matter, visit our Making Complaints webpage for more information.