This Privacy Notice describes how The Orchard Surgery collect and use personal information about you during and after your working relationship with us.
We are required by law to provide you with the following information about how we handle your information.
Data Controller contact details | The Orchard Surgery, Horseshoes Lane, Langley, Kent, ME17 3JYTel: 01622 863030 Email: gp.g82691@nhs.net |
Purpose of the processing | Reasons for processing your personal data include:
|
Information we collect and use | Personal Information:
Job Information:
Performance Information:
Information about your family:
Special Category Data:
|
Lawful basis for processing | Article 6(1)(b)…‘necessary for the performance of a contract with employee’
Article 6(1)(c)…’necessary for compliance with a legal obligation’ Article 6(1)(f)…’in the Practice’s legitimate interests, which are not outweighed by the fundamental rights and freedoms of the data subject’ Schedule 1, Part 2(8) Data Protection Act 2018 – necessary for the purposes of identifying or keeping under review the existence or absence of equality of opportunity or treatment between groups of people specified in relation to that category with a view to enabling such equality to be promoted or maintained Schedule 1, Part 2(14) Data Protection Act – is necessary for the purposes of preventing fraud or a particular kind of fraud |
Recipient or categories of recipients of the processed data |
The Practice may also receive information about you from these organisations. |
Right of access | Subject to certain conditions, you are entitled to have access to your personal data (this is more commonly known as submitting a “data subject access request”). |
Rights in relation to inaccurate personal or incomplete data | You may challenge the accuracy or completeness of your personal data and have it corrected or completed, as applicable. |
Rights to object to or restrict our data processing | Subject to certain conditions, you have the right to object to or ask us to restrict the processing of your personal data.
This right applies where our processing of your personal data is necessary for our legitimate interests. You can also object to our processing of your personal data for direct marketing purposes. |
Right to erasure | Subject to certain conditions, you are entitled to have your personal data erased (also known as the “right to be forgotten”), e.g. where your personal data is no longer needed for the purposes it was collected for, or where the relevant processing is unlawful.
We may not be able to erase your personal data, if for example, we need it to (i) comply with a legal obligation, or (ii) exercise or defend legal claims. |
How to exercise your rights | To exercise your rights, please contact gp.g82691@nhs.net or the Practice Manager. |
Retention period | Your personnel records are kept in compliance with law and national guidance. Details on how long records are kept are set out in the NHS England, Record Management Code of Practice 2021. |
Right to complain | If you are unhappy with how your personal data is processed, you have the right to complain to the Information Commissioners Office (ICO).
Their helpline number is 0303 123 1113. We would, however, appreciate the opportunity to deal with your concerns before you approach the ICO so please do contact us gp.g82691@nhs.net in the first instance. |
Data Protection Officer contact details | P Ashe – GP Data Protection Officer NHS Kent and Medway Kmicb.gpdpoteam@nhs.net |