Data Controller
NHS West Yorkshire Integrated Care Board
Purpose
In order for us to understand the needs of the community we look after, to promote our work and services, and keep you informed about our work, we will collect and use information you share with us. In order to invite people to take part in engagement activities, we have to hold contact details for individuals. To make sure the views of the whole community are heard, we occasionally collect personal information and special category data from surveys, including information about race, gender, age, and health issues.
We will also occasionally take photographs and videos during our engagement events for publicity use. We will always ask for your permission when we take a photo or video of you to make sure you are happy with us using your image. You will always have the right to say no at the time or withdraw your permission at a later date.
Lawful basis
The ICB’s legal basis for processing personal data under the UK GDPR is Article 6(1) a - consent.
For the processing of special category data, the legal basis is Article 9(2) a – explicit consent.
Type of information used
Personal Data: name, address, email address and photograph.
Special category data: gender, religious beliefs, health, ethnic-origin.
Who we will share the information with (recipients)
The information you provide as a member of one of our patient involvement groups is never shared outside of the ICB.
Do we use any processors
We occasionally use Smart Survey to carry out our surveys. For more information please see Smart Survey’s Privacy Notice
The Health Informatics Service (THIS), our IT supplier who store our information securely on their servers.
Microsoft Azure, supported by IT staff, host our data.
Civica provides us with engagement software.
How we collect (the source) and use the information
We will only receive this information directly from you.
How long we will keep the information
Your information will be held for 6 years, until it is no longer required, or until a request for your information to be deleted is received, whichever is soonest. Details on how to let us know that you no longer want us to contact you about engagement events, or to have your details removed from our system, are below.
The information will be stored in a secure environment and access to it will be restricted to only people who need to access it.
Your Rights
Under the UK GDPR you have the following rights:
- The right to be informed about the processing of your data (this notice)
- The right of access to the data held about you
- The right to have that information amended in the event that it is not accurate
- The right to have the information deleted
- The right to restrict processing
- The right to object to processing
- Right not to be subjected to automated decision making and profiling
- To be notified of data breaches
If you do withdraw consent, you may no longer be able to receive invitations to engagement events, or other engagement activities carried out by the ICB.
To withdraw your consent, please use the contact details below:
Communications Team
NHS West Yorkshire Integrated Care Board
Address: White Rose House
West Parade
Wakefield
WF1 1LT
Telephone: 01924 213050