This Privacy Notice explains how your personal data is handled by the CareChoice Group. This notice applies to prospective residents, residents and visitors to CareChoice. CareChoice is the data controller in respect of the information that we process about you to provide healthcare services. Our contact details are:
CareChoice Group, Block 10-2 Blanchardstown Corporate Park 1, Blanchardstown, Dublin 15 A25K. Telephone 01 2233000.
This notice explains what personal information we collect, hold and share in support of these purposes and your rights in respect of the data we hold about you. Your privacy is important to us, so if there is anything in this privacy notice that is unclear or you do not understand, please contact the Data Protection Officer at email@example.com
DATA PROTECTION PRINCIPLES
Under the General Data Protection Regulations (GDPR) all personal data obtained and held by us must be processed according to a set of core principles. In accordance with these principles, we will ensure that
DATA WE COLLECT ABOUT YOU
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
To support the delivery of appropriate care and treatment to you, to adhere to our contract of care with you and to meet certain legal requirements, CareChoice will collect, store, and use categories of personal information about you. This personal data may include the following:
Other records retained in relation to your personal information include:
We may also process some kinds of more sensitive information about you that is classed as ‘special category’ data, and which receives additional protections under law, and in terms of our processing of it. This includes data about:
OUR LAWFUL BASIS FOR USES OF YOUR DATA
Under data protection laws we must have a legitimate and lawful basis for processing your personal data. The lawful basis for the processing of much of the data listed above is based on legal requirements and our contract obligations with you.
Where we have a specific legal obligation that requires the processing of personal data, the legal basis is:
Article 6(1)(c) – processing is necessary for compliance with a legal obligation to which the controller is subject.
Where we process your data to perform our contract obligations the legal basis is:
Article 6(1)(b) of the GDPR – processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Where we process special categories data the condition is:
Article 9 (2)(h) – Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services.
Where relevant we may process your personal information to look after your vital interests in the event of an emergency.
Where we rely on consent as the lawful basis this requires a very clear and specific statement of consent for your personal data to be processed for a specific purpose with a positive opt-in.
You have the right to refuse/withdraw consent to information processing at any time.
CareChoice uses your personal information in the following ways:
CHANGE OF PURPOSE
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so. Please note that we may process your personal information without your knowledge or consent, where this is required or permitted by law.
FAILURE TO PROVIDE PERSONAL INFORMATION
If you fail to provide certain information when requested, we may not be able to comply with contractual obligations and perform the contract we have entered with you or we may be prevented from complying with our legal obligations.
HOW PERSONAL INFORMATION IS COLLECTED
We collect personal information about you from:
WHO WE SHARE YOUR DATA WITH?
In order to ensure that our residents receive the best care we may share your data with:
KEEPING YOUR INFORMATION UP TO DATE
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees, contractors and other third parties on a strict need-to-know basis, i.e. who need the access in order to fulfil the tasks and duties relating to service provision. All service providers are permitted to process your personal data based on our instructions, they are subject to a duty of confidentiality, and they are required to be compliant and demonstrate compliance with Personal Data Protection.
Our IT systems are protected against unauthorised access with various level of controlled and password protected access rights.
Where personal records are kept in paper format these are stored securely with controlled access.
We have implemented procedures to deal with any actual or suspected data security breach and will notify you and any applicable authority about a breach where we are legally required to do so.
RETENTION OF YOUR DATA
We only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Under certain circumstances, you have the right to:
You may exercise any of the above rights by emailing the Data Protection Officer at firstname.lastname@example.org or by post to CareChoice Group, Block 10-2 Blanchardstown Corporate Park 1, Blanchardstown, Dublin 15 A25K.
CHANGES TO THIS PRIVACY NOTICE
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. This Privacy Notice was updated on September 3rd,2019.
QUESTIONS ABOUT THIS NOTICE
If there is anything in this notice that you are unclear about, please contact our Data Protection Officer at email@example.com or by post to CareChoice Group, Block 10-2 Blanchardstown Corporate Park 1, Blanchardstown, Dublin 15 A25K.
The Data Protection Officer will answer any queries you may have concerning this privacy notice or the way in which we process your personal data.
Should you not be satisfied with our response to your concerns or believe that we have not complied with our data protection obligations you may lodge a complaint with the Data Protection Commission. Contact details for the Data Protection Commission are as follows:
Phone Number: 0761 104 800 or 0578 684 800
Postal Address: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2
For Coronavirus (COVID-19) updates, please click on the link below.Find out more