Updates to Privacy policies
With GDPR approaching in the new few days, the ARC Healthy Living Centre has updated their Data protection and privacy policies. It is important to us that you as a service user are aware of what information we hold and how we use it. For further information please have a look below; a copy of our privacy notice is also available to download in our Resources section of our site.
New General Data Protection Regulations (GDPR) laws will come into effect in May 2018. Many of the GDPR’s main concepts and principles are much the same as those in the current Data Protection Act (DPA) However, there are new elements and significant enhancements. The GDPR places greater emphasis on the documentation that data controllers must keep to demonstrate their accountability.
The purpose of this Notice
When we provide our services to you, we will collect personal information about you and we want to be open and transparent with you as to the types of information we collect about you, why we collect it, how we use it and who we may share it with.
The data controller of your personal information is ARC HLC of 116-122 Sallyswood, Irvinestown. Co. Fermanagh BT94 1HQ, a charity registered with The Charity Commission for Northern Ireland NIC100857; Charity No: XR46779 and Company number NI039643.
If you have any questions or concerns about our use of your personal information, then please contact our Data Compliance Officer; Ms Jenny Irvine using the contact details provided at the bottom of this Notice in the ‘How to contact us’ section.
You also have the right to contact the Regulator at the Information Commissioner’s Office and these details are also contained in the “Contacting the Regulator” section.
How we collect client information?
We may ask you to provide personal information by filling in hard copy forms and documents or by corresponding with us by phone, letter or during the course of our meetings with you.
What type of personal information will be processed and why?
A full table of the information we hold as a service user is available in our downloadable copy in resources section of our site, you can also click on the following link to view a full breakdown..Types of personal information
Depending upon the types of services you require, some of the information that we may also need to collect information from and about you (and/or your dependent(s)) and which the law considers to be sensitive, such as data about physical or mental health, which we refer to as “special category personal data”.
We will only process the special category personal data listed above in the course of our legitimate activities and with your explicit consent. We ask for your specific consent to the processing of this data (at the end of this Notice). You may choose not to provide us with this consent. However, please note that if you do not provide us with your consent to collect and process the information listed in the table above:
- we may not be able to advise you fully in respect of certain services which require this information, in particular those relating to health service delivery;
- your application may be rejected by the providers of services which require this information; or
In some circumstances, we may receive information about you from third parties. In particular, we may receive information about you from Social or Health Care Services This will help us make the best possible assessment of your situation before we decide whether we can provide you with our services and/or recommend any specific services. It is in our legitimate interests to process your personal information for this purpose. We may also ask you to provide Letters of Authority to allow us to receive information about you from providers.
Who might my personal information be shared with?
We may disclose your personal information to the following categories of recipients:
- to providers of health and social care services in respect of whom you request us to submit applications on your behalf and to receive updates from such providers in order for us to provide our services to you throughout the lifetime of our relationship with you;
- to our suppliers and partners in order for them to help us provide our services to you, this includes:
- our IT systems providers to assist us with providing you with an efficient, modern and professional service;
- our suppliers of audit and regulatory compliance support services who may review our records containing your personal information in order to audit and report to us on our compliance with applicable laws and regulatory requirements;
- our accountants, solicitors, insurer(s) and health regulators) and any other provider of professional services to us;
- to any national and/or international regulatory, enforcement body, government agency or court where we believe disclosure is necessary
- as a matter of applicable law or regulation,
- to exercise, establish or defend our legal rights, or
- to protect your vital interests of those of any other person; and
- to any other person with your consent to the disclosure or where we are permitted to do so by law.
Our legal basis for processing personal information
Our legal basis for collecting and using your personal information will depend on the personal information concerned and the specific context in which we collect it. In respect of the personal information and the purposes for which we may process your personal information which are set out in this Notice, we have confirmed the legal basis upon which we collect and process your personal information in the ‘What type of personal information will be processed and why?’ section above.
If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you or with your explicit consent, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).
Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.
If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “How to contact us” heading below.
Your data protection rights
You have the following data protection rights:
- If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by contacting us using the contact details provided under the “How to contact us” heading below;
- In addition, you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. Again, you can exercise these rights by contacting us using the contact details provided under the “How to contact us” heading below.
- You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please contact us using the contact details provided under the “How to contact us” heading below.
- Similarly, if we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. For specific information about our processing of your sensitive category personal data with your consent, please see the “Your consent to us processing your special category personal data” heading below.
- You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please see “Contacting the Regulator” section below.
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
We retain personal information we collect from you where we have an ongoing legitimate need to do so, for example:
- to provide you with a service you have requested us to provide,
- to perform our contractual obligations to you;
- to comply with applicable legal or accounting requirements;
- to defend or manage any claims or complaints between us, you and any relevant third party including taking legal advice in respect of such claims in order to establish, exercise or defend our legal rights or such claims. This would include complaints and claims which you may bring against us or which are submitted to a court, regulatory authority or ombudsman.
When we have no ongoing legitimate need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
Updates to this Notice
We may change or update this Notice in order to maintain our compliance with applicable law and regulation or following an update to our internal practices. When we update our Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make.
How to contact us
If you would like to contact us in relation to this Notice or if you have any other questions in respect of our processing of your personal information, please contact our Data Compliance Officer; Ms Jenny Irvine @ ARC HLC, 116-122 Sallyswood, Irvinestown. Co Fermanagh. BT94 1HQ.
Telephone: 028 6862 8741.
Contacting the Regulator
If you feel that your personal data has not been handled correctly, or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.
You can contact them by telephoning 0303 123 1113.
You can also go online to www.ico.org.uk/concerns . (We are not responsible for the content of external websites).