Description of processing
The following is a broad description of the way this organisation/data controller processes personal information. To understand how your own personal information is processed you may need to refer to any personal communications you have received, check any privacy notices the organisation has provided or contact the organisation to ask about your personal circumstances.
Reasons/purposes for processing information
We process personal information to enable us to provide healthcare services for patients, data matching under the national fraud initiative; research; supporting and managing our employees, maintaining our accounts and records and the use of CCTV systems for crime prevention.
Type/classes of information processed
We process information relevant to the above reasons/purposes. This may include:
•personal details
•family details
•education, training and employment details
•financial details
•goods and services
•lifestyle and social circumstances
•visual images, personal appearance and behaviour,
•details held in the patients record
•responses to surveys
We also process sensitive classes of information that may include:
•racial and ethnic origin
•offences and alleged offences
•criminal proceedings, outcomes and sentences
•trade union membership
•physical or mental health details
•religious or similar beliefs
•sexual life
Who the information is processed about
We process personal information about:
•our patients
•suppliers
•employees
•complainants, enquirers
•survey respondents
•professional experts and consultants
•individuals captured by CCTV images
Who the information may be shared with
We sometimes need to share the personal information we process with the individual themself and also with other organisations. Where this is necessary we are required to comply with all aspects of the Data Protection Act (DPA). What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons.
Where necessary or required we share information with:
•our patients
•family, associates and representatives of the person whose personal data we are processing
•staff
•current, past or potential employers
•healthcare social and welfare organisations
•suppliers, service providers, legal representatives
•auditors and audit bodies
•educators and examining bodies
•survey and research organisations
•people making an enquiry or complaint
•financial organisations
•professional advisers and consultants
•business associates
•police forces
•security organisations
•central and local government
•voluntary and charitable organisations
Additional reasonsTrading and sharing personal information
Personal information is traded and shared as a primary business function. For this reason the information processed may include name, contact details, family details, financial details, employment details, and goods and services. This information may be about customers and clients. The information may be traded or shared with business associates and professional advisers, agents, service providers, customers and clients, and traders in personal data.