Data & Privacy
Data Protection & Privacy
The Pension Fund has a duty to protect the personal data we process and to inform members about how their data is managed and used.
Our Policies
The security and privacy of member data is paramount, and all personal information collected will be managed in accordance with the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). In line with GDPR, the Fund has published a Privacy Notice which outlines:
-
what data we collect and why,
-
how your data will be processed and stored,
-
who we share your information with, and
-
your rights in relation to your data.
You can access our Privacy Notice and other related data protection policies and documents below.
Information on website data and privacy can be found on our Privacy & Cookies page.
Subject Access Request
The Pension Fund collects and holds certain personal data about our members which is used to administer and pay member benefits (e.g. name, address, DoB etc). As a data subject, under the UK General Data Protection Regulation (GDPR), you have certain legal rights including the right to find out about how your personal information is being used; how it is processed, what it is used for, whether it is shared or transferred and how long it is held for.
To submit a Subject Access Request, you can:
- submit a signed written request; or
- complete our optional form; or
- make a verbal request over the telephone/in person.
The Fund will carry out sufficient checks, where necessary, to confirm the requestor’s identity and we may need to request further proof of identity.
The Fund will not charge for a Subject Access Request under normal circumstances. However, we reserve the right to charge a reasonable fee for requests that are considered manifestly unfounded or excessive (in particular if they are repetitive).
Subject Access Requests should always be sent directly to:
North East Scotland Pension Fund
Level 1
2 Marischal Square
Broad Street
Aberdeen
AB10 1BL
Marked for the attention of the Governance Manager.
By Email: governance@nespf.org.uk (sending information by this means is not secure)
Helpdesk: 01224 045045
We will respond to all subject access requests within one month of receipt. However if we require more information from you, or if your request is complex and we require more time to respond fully we will let you know in writing.
Overseas Existence Checking
This will be done via Heywood Pension Technologies by The Tracing Group (TTG). The Service will provide, where possible:
- Matching of member information
- ID verification
- ID and member image verification
Heywood/TTG will be "data processors":
The Council is the data controlled and the Contractor is the data processor for the purpose of this Service. Sub-processors and third parties used for this Service are detailed at https://heywoodhelp.co.uk/list-of-sub-processors-third-parties/,, as may be updated form time to time, and the Council hereby consents to the appointment of the relevant sub-processors/third parties. The Contractor confirms that it has in place with each sub-processor a contract containing all required Data Protection provisions and which is compliant with the YK General Data Protection Regulation (GDPR).
