Doncaster NHS Health Checks – Privacy Notice

This Privacy Notice sets out what you need to know about how the City of Doncaster Council (the Council) will use your information for the purpose of commissioning and contract management of Doncaster’s NHS Health Checks Service (the Project).

The Council is committed to meeting its data protection obligations and handling your information securely.  You should make sure you read and understand this notice and the privacy notice of the Project Provider (Randox Health) Privacy Policy - Randox Health Checks

Randox Health will be using a sub-contractor (Health Diagnostics) to collect information, their privacy notice can be found here https://healthdiagnostics.co.uk/security-privacy-for-patients/

What information about you do we collect?

For the processing to which this notice relates to be carried out the Project uses the following information:
  • personal information – such as: your name, contact information, date of birth, NHS number
  • special category personal information – such as: your ethnicity, information about your physical and mental health

How do we collect information about you?

Information for this Service will be provided to us by the Service inviting you for an NHS Health Check. This information will have been collected from you directly during the invite process or at your appointment.

How will your information be used?

Your information might be used:
  • For auditing and monitoring purposes to ensure high quality of standards and safety across the NHS Health Checks Service
  • To investigate any reported incidents, complaints, safeguarding issues
  • During transfer of the Service to a new Provider upon expiry or termination of the Contract.

The Legal Basis for using your information

The table below sets out the legal basis for each of the activities that this Privacy Notice covers:



Personal Data Activity

Legal basis - GDPR Article 6

S8 DPA (delete as appropriate)

UK Legislation

Collecting information for provision of the service.

(1)(c) to do so is necessary because of a legal obligation that applies to the Council

 

Health and Social Care Act 2012


Special Category Data Activity

Legal basis - GDPR Article 9

DPA 2018 condition

Other considerations

Collecting information for provision of the service.

(2)(i) processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical

devices.

Part 1 of schedule 1

 

Who will your information be shared with?

We sometimes need to share your information within the Council or with other organisations. We will only share your information when necessary and when the law allows us to, and we will only share the minimum information we need to.

For NHS Health Checks Service matters we may need to share your information with:
  • The Project Team
  • Project Providers
  • Your Care Provider
  • Support Services where a referral has been received
In certain cases we may also share your information with other individuals and organisations. For example, if you make a complaint to your Councillor, or if the sharing would help with a safeguarding issue, or help prevent a crime. Sometimes, we might share your information without your knowledge.

The Council will never sell your information to anyone else.

How long will we keep your information?

We will keep your information for different periods of time, depending on what we are using it for. We only keep your information for as long as we need to, after which we will securely delete the information. We will keep your information for only so long as is necessary – the table below sets out typical timescales for each activity:


Activity

Time information kept for

Auditing and monitoring of Health Checks

6 years

Safeguarding / Incident reports / Complaints

6 years

Your rights

The law gives you specific rights over your information. These rights are:
  • to be informed of our use of information about you;
  • of access to information about you;
  • rectify information about you that is inaccurate;
  • to have your information erased (the ‘right to be forgotten’);
  • to restrict how we use information about you;
  • to move your information to a new service provider;
  • to object to how we use information about you;
  • not to have decisions made about you on the basis of automated decision making;
  • to object to direct marketing; and,
  • to complain about anything the Council does with your information (please see the ‘Complaints’ section below).
Some of the rights listed above apply only in certain situations, and some have a limited effect. Your rights are explained further in the Individuals’ Rights Procedure on our website, as is how to make a request under one or more of them. You can request information about yourself by making a subject access request on this page of the Council’s website.

Changes to this privacy notice

This notice is kept under regular review to make sure it is up to date and accurate.

Data Protection Officer (DPO)

The Council is required by law to have a DPO. The DPO has a number of duties, including:
  • monitoring the Council’s compliance with data protection law;
  • providing expert advice and guidance on data protection;
  • acting as the point of contact for data subjects; and,
  • co-operating and consulting with the Information Commissioner’s Office (see ‘Complaints’ below).
The Council’s Data Protection Officer can be contacted by email at information.governance@doncaster.gov.uk 

Complaints

If you are unhappy with the way in which your information has been handled you should contact the Council’s Data Protection Officer so that we can try and put things right. Alternatively, and if we have been unable to resolve your complaint, you can also refer the matter to the Information Commissioner’s Office (ICO).

The ICO is the UK's independent body set up to uphold information rights, and they can investigate and adjudicate on any data protection related concerns you raise with them. They can be contacted via the methods below:

Website: www.ico.org.uk

Telephone: 0303 123 1113

Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

 

Display your introduction over featured image?: No

Last updated: 02 February 2024 15:40:53

Did you find this page helpful?