Privacy Notice

University of Dundee - EVIDENCE Pilot Study
Last Updated: May 03, 2019

The EVIDENCE pilot study, run by the University of Dundee, respect that the privacy of your personal information is important to you. We have developed this privacy notice to let you know about the types of personal information we will use in the study and how and where your person information will be used and stored.

How we use your information

Under contract with your GP, your data will be used to send you information about changes in your GP practice prescribing policy for hypertension and will also be sent to ISD Scotland’s National Safe Haven (eDRIS) part of NHS National Services Scotland.

If you choose to contact the University directly your data may be used to identify you within your GP practice allowing for any requests made by you to be carried out in line with Good Clinical Practice (GCP). This data will be retained for the duration of the pilot study. It will then be destroyed or anonymised and retained for research and audit purposes.

Personal data

The personal data required to inform you of changes in your GP practice prescribing policy and inform eDRIS are your Community Health Index (CHI), name and address.

The personal data required to enable us to action any requests made by you in line with GCP are your name and date of birth.

Sensitive (special categories) of personal data

No sensitive personal data is required for the EVIDENCE pilot study.

Data controller

The data controller for your personal information is the University of Dundee. Your data may be processed by the University’s nominated agents such as software or service providers.

Providers used for the purpose are:

  • (CHF) - Docmail
  • (eDRIS) - ISD Scotland

Lawful processing

The University asserts that it is lawful for it to process your personal data for the purposes detailed above under (Article 9 (2)(j)), Processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.

Your rights

The University respects your rights and preferences in relation to your data. If you wish to update, access, erase, or limit the use of your information, please let us know by emailing If you wish to complain about the use of your information, please email You may also wish to contact the Information Commissioner’s Office.