Development of services at Bridlington Hospital public engagement survey privacy notice

Why are we collecting your information?

York and Scarborough Teaching Hospitals NHS Foundation Trust (the Trust) is working with the NHS Humber and North Yorkshire Integrated Care Board (ICB) to develop a long-term vision for health services in Bridlington, including plans for the Bridlington Care Unit and the expansion of services such as diagnostics, planned care and outpatients. To assist with the development of these plans, we are undertaking a public survey and the feedback from this survey will inform this work.

Who do we collect your information from?

The information we use will be collected directly from you when completing the survey.

Who are we?

The Trust is a ‘Data Controller’, this means that we determine the purposes for which, and the manner in which, your personal data is processed. We have a responsibility to you and your personal data and will only collect and use this in ways which are compliant with data protection legislation.

The Trust has appointed Rebecca Bradley (Head of Information Governance) to be its Data Protection Officer (DPO). The role of the DPO is to ensure that the Trust is compliant with Data Protection legislation and to oversee data protection procedures. The DPO contact details are:

York and Scarborough Teaching Hospital NHS Foundation Trust
York Hospital
Wigginton Road
York
North Yorkshire
YO31 8HE

yhs-tr.information.governance@nhs.net

You can also contact the ICB’s Data Protection Officer at: hayley.gillingwater@nhs.net

What information are we collecting?

• Demographic information about you, such gender, age, ethnic origin
• Your opinions, thoughts and feedback
• Information you may volunteer and would like us to record when completing the survey such as your medical condition, or that of someone you care for (we do not routinely ask for this)

Personally identifiable information such as your name and email address will not be collected.

We may use your information to create reports and statistics that are anonymous and cannot be linked back to you or individuals, including:

• statistical analysis
• statutory returns
• audit framework
• see how the Trust and its partners are supporting individuals
• help design better services
• inform funding decisions.

What is our lawful basis for processing your information?

Any personal data we process is done so in accordance with the UK General Data Protection Regulation (UK GDPR).

• Article 6(1)(a) Consent (you will receive a consent form for us to record this)
• Article 6(1)(e) Public Task: the processing is necessary to perform a task in the public interest, or our official functions, which have a clear basis in law.

Where special category data is volunteered by you we would collect this with your explicit consent.

How long do we keep your information for?

We will only keep your information for as long as it is needed then it will be securely and confidentially deleted or disposed of.

You can find more details about how long YSTHT keeps records in York and Scarborough Teaching Hospitals NHS Foundation Trust - Privacy notices.

You can find more details about how long the ICB keeps records at Privacy Policy - Humber and North Yorkshire Integrated Care Board (ICB)

Who do we share your information with?

We will only share your information where it is appropriate to, with:

• NHS Humber and North Yorkshire Integrated Care Board (ICB)
• Partner organisations e.g. City Health Care Partnership
• third parties including our data processors, partners, or contractors, who undertake work on our behalf
• government agencies
• internal and external auditors.

In some circumstances, such as under a court order or safeguarding, we are legally obliged to share your information.

We will always satisfy ourselves that we have a lawful basis on which to share the information and document our decision making.

Do we transfer your information outside the UK?

No

What rights do you have over your data?

Under GDPR data subjects have the following rights in relation to the processing of their personal data:

• to be informed about how we process your personal data. This notice fulfils this obligation
• to request access to your personal data that we hold, and be provided with a copy of it
• to request that your personal data is amended if inaccurate or incomplete
• to request that your personal data is erased where there is no compelling reason for its continued processing
• to request that the processing of your personal data is restricted
• to object to your personal data being processed

If you have any concerns about the way we have handled your personal data or would like any further information, then please contact our DPO on the address provided above. 

To put in a Subject Access Request please contact:

01904 725680
Yhs-tr-subjectaccesssgh@nhs.net

If we cannot resolve your concerns, you may also complain to the Information Commissioner’s Office (the Data Protection Regulator) about the way in which the Trust has handled your personal data. You can do so by contacting:

First Contact Team
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

0303 123 1113
casework@ico.org.uk