This privacy notice is intended to provide transparency regarding what personal data, we will collect about you, how it will be processed and stored, how long it will be retained and who will have access to your data.
Privacy Notice for Patients and carers
Privacy Information - Children and Young People
Personal data is information from which an individual can be identified either directly or indirectly when the information is read in conjunction with other data that a data controller holds.
From 25 May 2018 the Data Protection Act 1998 will be replaced by the General Data Protection Regulation and this will be the principal piece of UK legislation concerning personal data. Parc Canol Group Practice will be subject to the General Data Protection Regulation (GDPR).
Our Users should be aware that this privacy notice applies to all the processing of your personal data by Parc Canol Group Practice in relation to this website.
Why your personal data is collected
Your personal data is collected and held to facilitate us in helping you and staying in touch around your individual medical records and appointments.
How your personal data is collected
Personal data is collected when you contact us via this website.
How your personal data is kept secure
Access to your personal data is restricted to the authorised team within Parc Canol Group Practice. Access may be granted on a limited basis to NHS Wales health boards but only where necessary for a specified and legitimate purpose.
How and why your personal data may be shared
Parc Canol Group Practice and NHS Wales health board staff members may share data to enable effective management of your health, wellbeing and maintaining standardised records. As detailed above, this may include Quality Assurance activities which are carried out to assess whether the the practice is meeting specified standards and remains fit for purpose.
Parc Canol Group Practice will not transfer your data to a third party unless it is satisfied of the following matters:
1. That there is a fair and lawful basis to share your personal data with the third party.
2. The data will be handled by the third party in accordance with the law on data protection.
Where the data is used for analysis and publication by a recipient or third party, any publication will be on an anonymous and aggregated basis, and will not make it possible to identify any individual. This will mean that the data ceases to become personal data.
Third parties may include the following non-exhaustive list: the UK health departments, Colleges/Faculties, the GMC, NHS Trusts/Health Boards/Health and Social Care Trusts, Public Health Wales and approved academic researchers.
Your rights and responsibilities
It is important that you work with us to ensure that the information we hold about you is accurate and up to date. Please ensure that your personal and professional details are updated regularly (as required under the declarations section).
All communications from Parc Canol Group Practice will normally be by telephone or email. It is therefore essential for you to maintain an effective and secure email address or you may not receive important notifications regarding your appraisal or other important news and information about your user role.
If at any point you wish to gain a copy of your personal data that is held by Parc Canol Group Practice you may submit a subject access request in writing to us.
The lawful basis for processing are set out in Article 6 of the GDPR. As a result, you do not have the right to erasure.
If you have any concerns in relation to how your personal data is processed, please contact Parc Canol Group Practice.
Caldicott Guardian name: Dr Paula Hannant
Should you wish to learn further information about data protection, please visit the Information Commissioner's Office (ICO) website. The ICO deals with complaints about how data controllers have dealt with information matters and provides useful guidance.