Donating online privacy notice

Explanation of the purpose

We use a third party platform, Online Express, to process online donations to the Library. If you choose to donate to the Library through Online Express, we will use your personal data to process the transaction and any related Gift Aid.

We may use personal data for our other fundraising activities. See the fundraising privacy notice for details.

Legal basis

Processing of personal data for this purpose is necessary for the legitimate interests of the Library.

As a charity we have a legitimate interest in raising funds for the Library's work and collections. This includes processing data related to donations you make to us online. We use personal data for this purpose on the condition that our use is appropriate, does not contravene your fundamental rights and freedoms, and could be of benefit to you. We only use your data for this purpose if you would have a reasonable expectation that we may do so.

We may process your data for related purposes on other legal bases, including consent or compliance with legal obligations. For example, we have a legal obligation to use certain personal data received in relation to Gift Aid donations.

These legal bases are explained in other privacy notices, in particular the communications privacy notice and the legal compliance privacy notice.

Recipients of the data

This data will be processed by the National Library of Scotland for this purpose and certain data will be sent to third parties (see 'Will the data be transferred to third parties?').

Retention period

We process donor records for at least one year after the date of last action, at which point we review records to assess that we still have a legitimate interest for holding them.

We must retain records related to financial transactions, including Gift Aid, for at least six years after the financial year in which the transaction takes place.

We have a detailed range of retention periods for different types of records, some of which may also apply to information processed for the purpose of making donations online. Please see our retention schedules (811 KB; 77 pages) for details, in particular under business classification 06.02.04.01 'Expenses and transactions' on page 49.

While we are working to implement our retention schedules, some data may be retained longer than required under the schedules.

Your rights in relation to this data

Your core rights as a data subject apply to this processing. Additionally, the rights of objection and erasure apply to this processing.

Will the data be transferred to third parties?

We use a third party provider, Online Express, a platform owned by Blackbaud, for receiving donations online. Your data is held by Blackbaud only for the purpose of processing your donation.

Will the data be transferred outside the UK or the European Economic Area (EEA)?

Online Express is owned by Blackbaud, which is based in the United States of America. We have a Standard Contractual Clauses agreement with Blackbaud to ensure adequate protection for any personal data transferred outside of the European Union. Please see Blackbaud's privacy policy for further information.

Is it obligatory to supply this data and what are the consequences of not supplying the data?

Choosing to supply your data for the purpose of making a donation to the Library is optional. However, if you do not supply your data we will be unable to process your donation through Online Express.

Will the data be used in automated decision-making?

No.