Wi-Fi privacy notice

Explanation of the purpose

If you choose to log in to our Wi-Fi service we will process some of your personal data in order for you to access and use this service.

We process your personal data for this purpose to confirm that you have agreed to our Wi-Fi service terms and conditions.

Our Wi-Fi provider, Cisco Meraki, offers a location analytics service, which we use for the purposes of system security and identifying where we need to improve Wi-Fi coverage. Data collected for location analytics is irreversibly anonymised upon collection by our Wi-Fi service provider.

Anonymised location analytic data may be gathered from your device even if you are not connected to our Wi-Fi, for example when you pass our buildings.

Legal basis

Processing of this data is necessary for the legitimate interests of the Library.

Types of personal information

We will process device and connection information for the purpose of Wi-Fi provision, including:

• MAC address — a device's unique hardware number
• IP address — unique address that identifies a device on the internet
• Client Hostname — the name assigned to a device.

We will process device information for the purpose of location analytics, including MAC address (a device's unique hardware number). This data is irreversibly anonymised by our Wi-Fi provder, Cisco Meraki, upon collection. For more information, see Cisco Meraki's website.

Recipients of the data

This data will be processed by the National Library of Scotland for this purpose and data may be sent to third parties (see 'Will the data be transferred to third parties?').

Retention period

We process this personal data for 14 months from the date you last agreed to our Wi-Fi service terms and conditions.

Your rights in relation to this data

Your core rights as a data subject apply to this processing. Additionally, the rights of objection and erasure apply to this processing.

Will the data be transferred to third parties?

We use a third party provider, Cisco Meraki, to provide our Wi-Fi service. For more information, please see Cisco Meraki's privacy notice.

Will the data be transferred outside the UK or the European Economic Area (EEA)

Cisco Meraki are registered in the United States of America and your personal data may be transferred there. Cisco Meraki are compliant with the EU-US Privacy Shield Framework which provides a mechanism to comply with Data Protection requirements when transferring data.

Is it obligatory to supply this data and what are the consequences of not supplying the data?

If you wish to use the Library's Wi-Fi Service you are required to supply your data for the purpose of accessing this service. If you do not wish to supply your data we will be unable to provide you with access to our Wi-Fi service.

Location analytics data is gathered automatically from devices that are in-range of our Wi-Fi points. This data is irreversibly anonymised upon collection. You can use Cisco Meraki's global opt-out feature to prevent your device's MAC address being gathered for location analytics at any location that uses the Meraki cloud, including the Library.

Will the data be used in automated decision-making?

No.