York Unpaid Carers Consultation privacy notice

Why are we collecting your information?

York and Scarborough Teaching Hospitals NHS Foundation Trust (the Trust) is working with the City of York Council (CYC) on the development of a new Carers Strategy and the Trust is also developing a new Carer’s Improvement Plan. To assist with the development of these documents, we are undertaking a carers survey and the feedback from this survey will inform this work.

Who do we collect your information from?

The information we use will be collected directly from you and the completion of the survey.

Who are we?

The Trust is a ‘Data Controller’, this means that we determine the purposes for which, and the manner in which, your personal data is processed. We have a responsibility to you and your personal data and will only collect and use this in ways which are compliant with data protection legislation.

The Trust has appointed Rebecca Bradley (Head of Information Governance) to be its Data Protection Officer (DPO). The role of the DPO is to ensure that the Trust is compliant with Data Protection legislation and to oversee data protection procedures. The DPO contact details are:

York and Scarborough Teaching Hospital NHS Foundation Trust
York Hospital
Wigginton Road
York
North Yorkshire
YO31 8HE

yhs-tr.information.governance@nhs.net

You can also contact the council’s Data Protection Officer at information.governance@york.gov.uk or 01904 554145, or write to:

Data Protection Officer
City of York Council
West Offices
Station Rise
York
YO1 6GA

What information are we collecting?

• Basic information about you, such as name, contact details, gender, age
• Your opinions and thoughts
• Your feedback

We may also process special categories of information that may include:

• Racial and/or ethnic origin

We may use your information to create reports and statistics that are anonymous and cannot be linked back to you or individuals, including:

• statistical analysis
• statutory returns
• audit framework
• see how the council and its partners are supporting individuals
• help design better services
• inform funding decisions.

What is our lawful basis for processing your information?

Any personal data including special category data that we process about individuals is done so in accordance with one or more of the following Article 6 and 9 of the UK GDPR, and Schedule 1 of the Data Protection Act 2018 (DPA 2018).

Article 6(1):
(a) Consent - the individual has given clear consent to process their personal data for a specific purpose.

Article 9(2):
(a) Explicit consent - the individual has given clear consent to process their special categories of personal data for a specific purpose.

As we are using the information you give us with your consent, you can withdraw your consent at any time by contacting asctransformationteam@york.gov.uk.

How long do we keep your information for?

We will only keep your information for as long as it is needed then it will be securely and confidentially deleted or disposed of.

You can find more details about how long YSTHT keeps records in York and Scarborough Teaching Hospitals NHS Foundation Trust - Privacy notices.

You can find more details about how long the council keeps records in the Council retention schedule – City of York Council.

Who do we share your information with?

We will only share your information where it is appropriate to, with:

• other council services
• third parties including our data processors, partners, or contractors, who undertake work on our behalf
• government agencies
• internal and external auditors

In some circumstances, such as under a court order or safeguarding, we are legally obliged to share your information.

We will always satisfy ourselves that we have a lawful basis on which to share the information and document our decision making.

Do we transfer your information outside the UK?

The majority of the information we collect is held in the UK. In some circumstances we may transfer your information outside of the UK, for example where servers are held in the EU. We will take all reasonable steps to make sure your data is not processed in a country that the UK government does not see as ‘safe’. If we do need to send your data out of the EU, we will ensure that necessary safeguards are in place.

What rights do you have over your data?

Under GDPR data subjects have the following rights in relation to the processing of their personal data:

• to be informed about how we process your personal data. This notice fulfils this obligation
• to request access to your personal data that we hold, and be provided with a copy of it
• to request that your personal data is amended if inaccurate or incomplete
• to request that your personal data is erased where there is no compelling reason for its continued processing
• to request that the processing of your personal data is restricted
• to object to your personal data being processed

If you have any concerns about the way we have handled your personal data or would like any further information, then please contact our DPO on the address provided above. To put in a Subject Access Request please contact 01904 725680 or yhs-tr.subjectaccessrequests@nhs.net.

If you do not want to receive text messages from the Trust, there is an opt-out option for this.

If we cannot resolve your concerns, you may also complain to the Information Commissioner’s Office (the Data Protection Regulator) about the way in which the Trust has handled your personal data. You can do so by contacting:

First Contact Team
Information Commissioner’s Office
Wycliffe House Water
Lane Wilmslow
Cheshire
SK9 5AF
casework@ico.org.uk // 0303 123 1113