Who is the Controller of the information under the General Data Protection Regulation (Data Protection Act)?
Tees, Esk and Wear Valleys NHS Foundation Trust Membership Engagement Services via a legal contract are the Data Processors.
Who is the Data Protection Officer?
Louise Eastham, Head of Information Governance, Information Governance Department, Tarncroft, Lanchester Road Hospital, Durham, DH1 5RD.
What is the purpose of holding and processing information?
Your information is held on a register for the sole purpose of being a public member of Tees, Esk and Wear Valleys NHS Foundation Trust (the Trust). This is for the delivery of mental health, learning disability and eating disorder services within the areas of the Trust.
What is the legal basis for holding information?
As you have completed an application form to join our membership register you have consented to your information being held for the purposes of membership of the Foundation Trust.
As a Foundation Trust, there is a legal basis for having a representative public membership.
This requires Foundation Trusts to hold:
- Personal data such as information about an individual’s name, address and contact details.
- Special Category data such as ethnicity and gender (where provided by you) and social demographic information
This is set out in the NHS Act 2006 and the Health and Social Care Act 2012.
What are your rights?
- You have the right to know how we will use your personal information.
- You have the right to object to us making use of your information.
- You can ask us to change or restrict the way we use your information and we have to agree if possible.
- You have the right to ask for your information to be changed, blocked or erased if it is incorrect.
- You have the right to be removed from our register of membership.
What information is held?
We hold personal information in terms of:
- Your name
- Your address
- Email or telephone contact details (where provided by you)
- Date of Birth (where provided by you)
- Ethnicity (where provided by you)
We do not hold information on any clinical conditions and medical records.
We also hold social demographic information based on your address.
We hold the level of membership which you will have selected or been allocated via a default level and how you wish us to communicate with you.
We also hold information as to whether you are happy for your details to be included within a public register if requested.
Who will you share my information with?
Your information will be available to the company secretary’s department.
Where you have consented to your details being made available via a public register – your name and allocated Constituency (based on the area that you live) would be made available.
Your information will not be used for any other purpose other than keeping you informed about the work of the Foundation Trust.
How long will you hold my details for?
Your details will be held by us until such a time you ask to be removed from our register.
How do you store my information?
Your information is stored on an external electronic database managed under contract by the Foundation Trust.
Our contractor (Membership Engagement Services) complies with all Data Protection requirements within the Act and also set by us as a Trust.
How will you protect my privacy and confidentiality?
Your information will only be used for the purposes of public membership and will not be shared outside of the Foundation Trust.
How will you meet my communication needs?
We will communicate with you either by post or email based on the preference that you state when joining our membership register.
This preference can be changed at any time.
If you require information in an alternative format please speak with us and we can agree a suitable communication method.
