Privacy Policy

Introduction

We take our duty to protect personal information and confidentiality very seriously and we are committed to comply with all relevant legislation and to take all reasonable measures to ensure the confidentiality and security of personal data for which we are responsible, whether computerised or on paper.

We gather and use certain information you provide, in order to deliver products or services and enable functionality. This is done when you submit information to us.

We also collect information to better understand how visitors use this website to present timely and relevant information to them. This is done through the use of cookies.

Key Details of the PRIVACY POLICY

The Website/ System privacy policy describes how www.cht.nhs.uk/patient-leaflet-repository/  makes use of the information you give the company when you use this website

If you are asked to provide information when using this website, it will only be used in the ways described in this privacy policy.

This policy is updated from time to time to reflect any changes. The latest version is published on this page. This website privacy policy was updated on: 21/05/2018

If you have any questions about this policy, please email Webteam@this.nhs.uk or write to us at: Oak House, Woodvale Office Park, Woodvale Road, Brighouse, West Yorkshire, HD6 4AB

What information is being collected through personal submission and how do we collect that

This website does not collect and store any personal identifiable data through input from yourself. Name and email are used for creating an staff accounts for the system to ensure accountability of documents provided.  The site collects the data entered on the forms process and submits this against your account.

What information is being collected through Cookies and how we use them

We use cookies for our analytics procedure, which is classed as observed data, to track demographics and movements through our site online. Please see our cookie policy page for more information on cookies and how we use them.

Who is collecting this information and who is your information shared with?

We, Calderdale and Huddersfield NHS Foundation Trust as the data controller, are collecting this information with your consent and will only share your information within Calderdale and Huddersfield NHS Foundation Trust and those involved from the Health Informatics Service who are our Data Processor and are involved in the maintenance of the system.

We promise we will never share your details with anyone else.

We are Calderdale and Huddersfield NHS Foundation Trust
Our registered office is Calderdale and Huddersfield NHS Foundation Trust, Acre St, Huddersfield HD3 3EA
Our Data Protection Officer is: Helen McNae, helen.mcnae@this.nhs.uk, 07748 623531

Data Processor

The Health Informatics Service is an IM&T Provider, providing solutions to over 40 organisations throughout the UK.
Our registered office is Oak House, Woodvale Office Park, Woodvale Road, Brighouse, West Yorkshire, HD6 4AB
Our Data Protection Officer is: Helen McNae, helen.mcnae@this.nhs.uk, 07748 623531

 

Why is this information being collected and how your information will be used?

As outlined above this site only makes use of collecting statistics on site usage through cookies. No other information is collected and stored other than that which you submit within your account if you have one. This submitted data is used in the process uploading leaflets. More details on the use of cookies can be found in the cookie policy.

The legal basis for processing your data

Under The General Data Protection Regulation (GDPR) 2018 your data is processed under the following lawful processing:

Personal data under 6(1)(a) “the data subject has given consent to the processing of his or her personal data for one or more specific purposes;”

or  6(1)(b) “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;”

How long is this information kept for?

As outlined above this site only makes use of collecting statistics on site usage through cookies. No other information is collected and stored other than that which you directly input on the form. This inputted data is kept indefinitely for accountability purposes unless a leaflet is deleted. More details on the use of cookies can be found in the cookie policy.

Your rights as a data subject

You as the data subject have the following rights:

Under the Data Protection Act - 6th Principle:

 

For more information on your rights and what this means please see the ICO’s Documentation here.

Please note: Should you have a problem with the way your data is being handled, in the first instance Data Subjects should be going to the organisations DPO to make a formal complaint, In the second instance individuals have a right to complain to the ICO.

You’re right to object, refuse or withdraw consent

As outlined above this site only makes use of collecting statistics on site usage through cookies. No other information is collected and stored other than that which you directly input on the form within your account if you have one. More details on the use of cookies can be found in the cookie policy which also highlights how you can remove the use of cookies.

If you wish to withdraw your consent for your name to be associated with uploads if you have an account you are withdrawing your contract of use with the system and your account will be removed. This mean you can no longer log in and upload documentation. If you wish to remove your details please email Webteam@this.nhs.uk or write to us at: Oak House, Woodvale Office Park, Woodvale Road, Brighouse, West Yorkshire, HD6 4AB

Please note: Should you have a problem with the way your data is being handled, in the first instance Data Subjects should be going to the organisations DPO to make a formal complaint, In the second instance individuals have a right to complain to the ICO.

Security

Confidentiality affects everyone: the Calderdale and Huddersfield NHS Foundation Trust collect’s, stores and uses large amounts of personal and sensitive personal data every day, such as medical records, personal records and computerised information. This data is used by many people in the course of their work.

We take our duty to protect personal information and confidentiality very seriously and we are committed to comply with all relevant legislation and to take all reasonable measures to ensure the confidentiality and security of personal data for which we are responsible, whether computerised or on paper.

At Trust Board level, we have appointed a Senior Information Risk Owner who is accountable for the management of all information assets and any associated risks and incidents, and a Caldicott Guardian who is responsible for the management of patient information and patient confidentiality.

We will always hold your information securely.

To prevent unauthorised disclosure or access to your information we have implemented strong physical and electronic safeguards.

We also follow stringent procedures to ensure we work with all personal data in line with the GDPR legislation.

Links from our site

Our website may contain links to other websites.

Please note that we have no control of websites outside the www.cht.nhs.uk/patient-leaflet-repository/ domain. If you provide information to a website to which we link, we are not responsible for its data protection and privacy.

Always be wary when submitting data to websites. Read the sites data protection and privacy policies fully.