zilongwang/ReadingBank huggingface dataset:
bridgecottagesurgery 41 High Street Welwyn Hertfordshire AL6 9EF www.bridgecottagesurgery.nhs.uk Tel 01438 715044 Fax 01438 841149 Privacy Notice We understand how important it is to keep your personal information safe and secure and we take this very seriously. We have taken steps to make sure your personal information is looked after in the best possible way and we review this regularly. Please read this privacy notice (‘Privacy Notice’) carefully, as it contains important information about how we use the personal and healthcare information we collect on your behalf. WHY WE ARE PROVIDING THIS PRIVACY NOTICE We are required to provide you with this Privacy Notice by Law. It explains how we use the personal and healthcare information we collect, store and hold about you. If you are unclear about how we process or use your personal and healthcare information, or you have any questions about this Privacy Notice or any other issue regarding your personal and healthcare information, then please contact the practice Data Controller. The Law says: We must let you know why we collect personal and healthcare information about you; We must let you know how we use any personal and/or healthcare information we hold on you; We need to inform you in respect of what we do with it; We need to tell you about who we share it with or pass it on to and why; and We need to let you know how long we can keep it for. THE DATA PROTECTION OFFICER The contact details of the named responsible Data Controller at the practice is Debbie Crossley You can contact them at Bridge Cottage Surgery on 01438 715044 if:
WYNDHAM CITY COUNCIL PRIVACY POLICY Document Control Document Name Privacy Policy Document ID A1611318 Internal or External Internal and External Owner Coordinator Information Management Document Status Approved – Minor review Approver Major Review – Council Meeting Minor Review – IT Steering Committee Version 3.0 Approved Date 21/03/2017 Next Review Date 21/03/2021 THIS DOCUMENT IS UNCONTROLLED WHEN PRINTED
particular appointments. Undertaking legislative, administrative, policy and program related functions, duties and powers The Department may use and disclose personal information to other Commonwealth, State or Territory government departments and external bodies or contracted service providers responsible for performing the functions, or assisting the Department to perform the functions. Departmental staff and staff of contracted service providers on a ‘need to know’ basis who are responsible for the administration of the particular function. Undertaking fraud and compliance (including health provider compliance) investigations both internally and externally Personal information may be used to undertake fraud and compliance investigations against employees, consultants, health providers as well as contractors and other bodies. The Department may disclose personal information to other Commonwealth and State departments, enforcement bodies, review, audit, investigation and intelligence bodies or consultants as well as the Commonwealth’s legal advisers. Departmental staff and staff of contracted service providers responsible for the particular program or investigation on a ‘need to know’ basis. Undertaking health promotion activities and campaigns Personal information may be used for purposes including health promotion activities, for example campaigns targeting Aboriginal and Torres Strait Islander health and mental health. Departmental staff and staff of contracted service providers on a ‘need to know’ basis. Contract management Personal information may be used or disclosed as part of the approach to market process, even where the applicant is not successful. Departmental staff and staff of contracted service providers on a ‘need to know’ basis. Managing and responding to correspondence and enquiries from members of the public Personal information is used for the purpose of corresponding with the public and distributing departmental publications. Departmental staff and staff of contracted service providers on a ‘need to know’ basis. To undertake research, surveys (including one off and longitudinal) and reports of health activities and businesses Personal information may be disclosed to individual researchers or other Commonwealth and State Departmental staff and staff of funding recipients or contracted service providers
Personal details that we collect about your child include: your child’s name, date of birth, address, health and medical needs, development needs, and any special educational needs. Where applicable we will obtain child protection plans from social care and health care plans from health professionals. We will also ask for information about who has parental responsibility for your child and any court orders pertaining to your child. Personal details that we collect about you include: your name, home and work address, phone numbers, emergency contact details, and family details. This information will be collected from you directly in the registration form. If you apply for up to 30 hours funded childcare, we will also collect: your national insurance number or unique taxpayer reference (UTR), if you’re We may also collect information regarding benefits and family credits that you are in receipt of. Why we collect this information and the legal basis for handling your data We use personal data about you and your child in order to provide childcare services and fulfil the contractual arrangement you have entered into. This includes using your data to: contact you in case of an emergency to support your child’s wellbeing and development to manage any special educational, health or medical needs of your child whilst at our setting to carry out regular assessment of your child’s progress and to identify any areas of concern to maintain contact with you about your child’s progress and respond to any questions you may have to process your claim for up to 30 hours funded childcare (only where applicable) to keep you updated with information about our service With your consent, we will also record your child’s activities for their individual learning journey, this will include photographs. You will have the opportunity to withdraw your consent at any time, for images taken by confirming so in writing. We have a legal obligation to process safeguarding related data about your child should we have concerns about their welfare. We also have a legal obligation to transfer records and certain information about your child to the school that your child will be attending.
LINK EC1– Martlesham Heath Surgery And Our Routine Sharing Partners Processing Activities Sharing Partners (including any third party providers of services) Link Referral West Suffolk Hospital East Suffolk & North Essex NHS Foundation Trust Norfolk and Norwich Hospital. Addenbrookes Hospital. Allied Physios. Suffolk Social Services. East Anglian Ambulance Service. Nuffield Hospital Ipswich Royal Papworth Hospital Suffolk GP Federation NHS Continuing Healthcare. Norfolk & Suffolk Mental Health Trust OneLife Suffolk www.onelifesuffolk.co.uk Suffolk Family Carers www.suffolkfamilycarers.org Turning Point www.turning-point.co.uk Suffolk Community Healthcare/CCC http://www.suffolkcommunityhealthcare.co.uk/Home.aspx Sue Ryder www.sueryder.org Customer First https://www.suffolk.gov.uk/ St Elizabeth Hospice East Anglia’s Children’s Hospice
Nursing Home AAA Screening http://www.colchesterhospital.nhs.uk/abdominal_aortic_aneurysm.shtml Bupa Alice Grange Nursing Home www.barchester.com/home/alice-grange-care 24 Hr ECGs. Ipswich Hospital The Pathology Partnership https://www.healthwatchsuffolk.co.uk/services/north-east-essex-and-suffolk-pathology-services-neesps/ GP+ Suffolk GP Federation Electronic Prescribing Decided by patient n/a Discharge notices West Suffolk Hospital East Suffolk & North Essex NHS Foundation Trust Norfolk and Norwich Hospital. Royal Papworth Hospital Addenbrookes Hospital. Confidential waste removal Avena Patient Texts SystmOne www.tpp-uk.com Pathology Courier The Pathology Partnership https://www.healthwatchsuffolk.co.uk/.../the-pathology-partnership-riverside-clinic-ip... North East Essex, Suffolk Pathology Services Patient Notes Transfer Capita (PCSE) CitySprint Courier Essex Constabulary Police Requests Suffolk Constabulary Norfolk Constabulary Coroner reports Suffolk Coroners Service Quality, performance, payment and safety reports ACE East Anglian Diabetic Eye Screening Provide
CQRS NHS England IESCCG Public Health Provision of IT Systems and Support NELCCG Provision of clinical system TPP (SystmOne) Infectious Diseases Anglia Health Protection Team Staff Pension PCSE (Pensions) NEST Accountancy Ballams Drug Safety NRLS Website Provider My Surgery Website www.mysurgerywebsite.co.uk Updated 20 November 2018
Click to find out more about the types of lawful basis that we will rely on to process your personal data. Generally we do not rely on consent as a legal basis for processing your personal data. You have the right to withdraw consent to marketing at any time by bam@bam.ac.uk Purposes for which we will use your personal data We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below. Purpose/Activity Type of data Lawful basis for processing including basis of legitimate interest To register you as a new customer (a) Identity (b) Contact Performance of a contract with you To process and deliver your order including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us (a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and Communications (a) Performance of a contract with you (b) Necessary for our legitimate interests (to recover debts due to us) To manage our relationship with you which will include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or take a survey (a) Identity (b) Contact (c) Profile (d) Marketing and Communications (a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To enable you to partake in a prize draw, competition or complete a survey (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (a) Performance of a contract with you (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)
YMCA Privacy Contact If you have any questions or concerns regarding this policy, or your rights under this policy, please contact: YMCA Privacy Officer: Mail: PO Box 1451, Darwin NT 0801 Telephone: 08 8981 8377 Facsimile: 08 8941 0288 Email: Acceptance of Privacy Policy You acknowledge and accept that your use of the website indicates acceptance of the terms and conditions of use and this privacy policy. Changes to this Privacy Policy This statement sets out the current YMCA Privacy policy. It replaces any prior privacy policies or website privacy policy. Please note we may amend or replace this policy or it may change from time to time. We encourage you to periodically review our privacy policy for any changes. Definition of Terms Term Definition Cookies A ‘cookies’ is a small text file placed on your computer hard drive by a web page server, which can then be accessed by our web servers. Individual For the purpose of this policy, ‘individual’ relates to prospective employees, contractors, clients and visitors to the website of YMCA. YMCA YMCA includes entities: 1. YMCA of the Northern Territory Inc. 2. YMCA of the Northern Territory Youth & Community Services Inc. YMCA Staff Includes YMCA Staff, contractors or sub-contractors, labour hire employees, apprentices or trainees and volunteers involved with the activities of YMCA. It also includes YMCA Board Members and any person serving the YMCA on a committee or advisory capacity. YMCA Website www.nt.ymca.org.au
party. Personal data has been provided by APCOA Parking Ireland Ltd. who is the Council's Parking Enforcement Contractor and the Department of Transport in respect of vehicle registration and motor tax details. Is personal data submitted as part of this activity shared with other organisations? The Council may, to fulfil statutory or regulatory obligations or in the public interest, from time to time, have to share personal data with other organisations or entities (in Ireland or abroad). Where this is required the Council shall have regard to your rights, to the security and integrity of the data and will minimise the data shared. Sharing applies to this activity in respect to personnel data with APCOA Parking Ireland Ltd. who are the Council's Parking Enforcement Contractor and the Department of Transport. Data is transferred to another country. The server for the Information Technology Provider for APCOA Parking Ireland Ltd. is hosted in Norway. As Norway is a member of the European Economic Alliance then General Data Protection Regulations will apply to data transferred to the location. You can view the privacy statements for the outside organisation at the following: Department of Transport at APCOA Parking Ireland Ltd. at How long is my data kept for? The Council has a detailed record retention policy which outlines time periods for which your personal data will be retained and what will happen to it after the required retention period has expired. A copy of Record Retention Policy can be accessed via the following link: Do you need to update your records? Kildare County Council must take reasonable steps to ensure that personal data we have about our customers is correct and up to date. In addition, if the data held by us is found to be inaccurate you have the right to rectify/correct this.
We want to make sure that you know what data we collect from you as a member of the group, why we need it, and what we do (and don’t do!) with it. Please have a quick read of the information overleaf, and then write your name below so we can be sure everybody has had an opportunity to see this and ask any questions they may have. Full Name Date I’d like to receive [group name]’s marketing emails (e.g. about events) so I can pass the info on to friends and family At the same time, please can you put a tick or a cross in the boxes by your name to let us know if you’d like us to include you in our mailing list (you can change your mind at any time – just let us know). Why do we need your data? We need to collect and store some of your details, for example your name and email address,
If project or program utilizes any of these technologies, please contact Component Privacy Officer for specialized PTA. [ ] Social Media [ ] Mobile Application (or GPS) [ ] Web portal [ ] None of the above If this project is a technology/system, does it relate solely to infrastructure? For example, is the system a Local Area Network (LAN) or Wide Area Network (WAN)? [ ] No. Please continue to next question. [ ] Yes. If a log kept of communication traffic, please answer the following question. If header or payload data is stored in the communication traffic log, please detail the data elements stored. [Enter text] 6. Does this project or program connect, receive, or share PII with any other DHS programs or systems? [ ] No. [ ] Yes. If, yes, please list: [Enter text, if applicable] 7. Does this project or program connect, receive, or share PII with any external partners or systems? [ ] No. [ ] Yes. If, yes, please list: [Enter text, if applicable] Is this external sharing pursuant to new or existing information sharing access agreement (MOU, MOA, LOI, etc.)? Please describe applicable information sharing governance in place. [Enter text]
Your child’s data (consent) What we’ve collected What it will be used for Who it will be shared with When we’ll delete it Their doctor’s surgery Might be useful if your child becomes unwell/is hurt during a session In the case of an emergency, the emergency services When the child turns 21 or 24 for child protection records Other professionals. Eg speech and language, health visitor, social care services, family support, childminders To help support your child’s development When the child turns 21 or 24 for child protection records Some medical information So child receives adequate care Staff within the setting When the child turns 21 or 24 for child protection records Some education needs So your child receives adequate care Staff within the setting When the child turns 21 or 24 for child protection records Dietary preferences Provide the correct snack Staff within setting When the child turns 21 or 24 for child protection records Any previous settings attended Transitions Key person When the child turns 21 or 24 for child protection records Birth certificate number To prove eligibility for funding. Local authority When the child turns 21 or 24 for child protection records Photos Displays, record keeping, assessments Online learning journal system, When the child turns 21 or 24 for child protection records Observations carried out by other agencies Aid the child’s development Local authority, SEND team, health visitors, children centres transition worker When the child turns 21 or 24 for child protection records
Your data (consent) What we’ve collected What it will be used for Who it will be shared with When we’ll delete it Name To give you access to your child’s online learning journal system online learning journal system When the child turns 21 or 24 for child protection records Email address To send you information about Rainbows End such as newsletters or invitations to events. online learning journal system When the child turns 21 or 24 for child protection records NI number To prove eligibility for funding. Local authority When your child leaves Telephone numbers Contact you regarding your child When the child turns 21 or 24 for child protection records Address Contact you regarding your child When the child turns 21 or 24 for child protection records * Our online learning journal system is ‘Tapestry’. Please ask for a copy of their privacy policy if you are interested in seeing it.
8. Where we are processing data based on your consent, you have the right to withdraw that consent at any time. 9. Other than as mentioned below, we will only disclose information about you to third parties if we are legally obliged to do so or where we need to comply with our contractual duties to you, for instance we need to pass on certain information to HMRC, SPPA as pension provider, Practice accountants. 10. We have in place safeguards to ensure the security of your data. Paper records are held in your personnel file, in a locked filing cabinet, with restricted access. Electronic data is held on the Practice Manager’s computer with access restricted to her. 11. Your personal data will be stored for a period of: Payroll data – 6 years. Pension data – 10 years but it should be considered if records of superannuation should be kept until the person reaches retirement age. All other information – for as long as legally necessary or for 6 years following completion of employment. 12. If in the future we intend to process your personal data for a purpose other than that which it was collected we will provide you with information on that purpose and any other relevant information. Your rights 13. Under the General Data Protection Regulation (GDPR) and The Data Protection Act 2018 (DPA) you have a number of rights with regard to your personal data. You have the right to request from us access to, and rectification or erasure of, your personal data; the right to restrict processing; object to processing; in certain circumstances the right to data portability. 14. If you have provided consent for the processing of your data you have the right (in certain circumstances) to withdraw that consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn. 15. If you have any concerns as to how your data is processed you can contact: Practice Manager or one of the GP partners, either in writing or by email 16. You have the right to lodge a complaint to the Information Commissioners’ Office if you believe that we have not complied with the requirements of the GDPR or DPA 18 with regard to your personal data. Identity and contact details of controller and data protection officer 16. Anstruther Medical Practice is the controller and the Practice Manager is the processor of data for the purposes of the DPA 18 and GDPR.
Findings in Table 4.3 show that there are discrepancies between estimated revenue and actual amount of revenue collected. Comparing between estimated revenue and actual amount collected it implies that councils cannot sustain either its recurrent or development expenditure without depending on grants and loans. 4.3.2 Findings Strategies being taken by Local Government Tax System to enhance Revenue Collection after Rationalization of Local Government Taxes On research objective two, the following findings were obtained from the study Table 4.4 Findings (Strategies- city Service Levy) TYPE OF TAX STRATEGY USED NO. OF RESPONDENTS % CITY SERVICE LEVY Site visit to Identify new and existing tax payers within the area 3 3.34 Introduction of Managers with full decision over the revenue source and advice the Municipal Treasurer/council 9 10 Integration of Database that is KMC, IMC and TMC and TRA 6 6.67 Enhancement of policy linkage between service delivery improvement and tax compliance 7 7.78 Negotiation about the rates used to be appended from 0.3% to 0.5%. 8 8.89 To make announcements and reminder notes through different media. 3 3.34 Introduction of revenue collection Database (MRECOM)-Municipal Revenue Collection Manager used as register to collect city service levy and bill boards. 8 8.89 The use computerized system of maintaining taxpayer Register and report revenue and debtors Monthly, Quarterly, and annually. 7 7.78 Source: Researcher
Table 4.6 Findings (Challenges on City Service Levy) TYPE OF TAX CHALLENGES BEING FACED NO. OF % CITY SERVICE LEVY Unwillingness of tax payers to pay tax because they don’t benefit from the tax so collected 8 8.89 Some tax payers declare false returns in order to pay less tax. 4 4.45 Under collection of taxes due to lack of staff motivation 8 8.89 Lack of transportation facilities to reach all tax payers in case of site visit and distributing demand notice as a result there is under collection of tax. 4 4.45 CITY SERVICE LEVY ( FOR COMMERCIAL BANKS ONLY) Non compliance from commercial banks 3 3.34 Source: Researcher S.
Table 4:7 Challenges (Property Tax) TYPE OF TAX CHALLENGES BEING FACED NO. OF % PROPERTY TAX Weak revenue collection administration capacity 2 2.23 Lack of employees’ motivation. The council employees are not well remunerated for them to work efficiently in data collection, valuation, billing, revenue collection as well as enforcement as result there is Under collection of taxes 5 5.56 Most legislations are outdated and have inadequate penalties to deter repeat offenders 5 5.56 No proper co-ordination between the different levels of government in particular decision on tax rates to different areas. 4 4.45 Harsh enforcement mechanisms (intervention from politicians) 2 2.23 Bureaucracy at the Municipal Council, causing waste of time when making payments. 3 3.34 Source: Researcher
Will the personal information reside only within Canada? * Check all that apply. Yes No Unknown Do you have the ability to delete personal information in the database or online service when it is no longer required? Mark only one. Yes No Other: __________________________________________ If the answer to this question is no, please consult with the IPO before proceeding with the initiative. Will a service provider / contractor be using remote access in order to access personal information within a University system? Mark only one. Yes No Other: __________________________________________ Operational Requirements Please confirm that you have reviewed the Operational Memo found at Please confirm that you will develop the initiative in a manner that is consistent with these Operational Requirements, to the extent that they are relevant. * Yes, I confirm this. Please also confirm that the people within your unit, who are responsible for meeting the relevant requirements in the Operational Memo on an ongoing basis, will be made aware of them before the initiative is implemented. Please do not proceed with your initiative until you confirm this. * Yes, I confirm this. Please note that if the results of this checklist indicate that a privacy review or a security review are not required before implementing the initiative, the IPO or Chief Information Security Officer may review and assess this initiative at a later date, for quality assurance purposes. They may need to ask the unit questions, and may offer recommendations for improvement.
contributing to a range of coordinated, integrated and collaborative groups, agencies and strategies in order to deliver safer and more secure communities. Strategic Policy and Legal Services Legal Advice and Advocacy Legal Services Coordination Unit Right to Information and Privacy Strategic Policy Strategic Policy and Legal Services provides policy advice to the Attorney-General and Minister for Justice and the Director-General on justice portfolio policy and legislative issues; administers the department’s obligations under the Right to Information Act 2009 (RTI Act) and IP Act; provides a range of legal services to the and the executive management of the department; and leads and promotes the development and implementation of legal services policy and practice across government. Youth Justice Capability, Learning and Systems Policy, Research and Partnerships Practice, Program and Design Regional Services Youth Detention Centres Youth Justice provides a fair and balanced response to young people in contact with the youth justice system. This response holds young people accountable for their actions, encourages their reintegration into the community and promotes community safety. What sort of information does the department collect? DJAG collects personal information for a variety of statutory and administrative reasons. Typical collections include: human resource information relating to departmental officers; correspondence from the public; Right to Information Act 2009 (RTI Act) and IP Act document access and personal information amendment applications; enquiries and applications for records and certificates administered by the Registry of Births, Deaths and Marriages; enquiries and applications for appointment as Justices of the Peace and Commissioners for Declarations;
(Helen Sanderson, IG Officer, eMBED, ) Section 2 : System/Project General Details Project title: Objective: Background: Why is the new system/change in system required? Is there an approved business case? Relationships: For example, with other Trust’s, organisations. Other related projects: Project Manager: Name: Title: Department: Telephone: Email Information Asset Owner: All information systems/assets must have an Information Asset Owner (IAO). IAO’s should normally be a Head of Department/Service. Name: Title: Department: Telephone: Email Information Asset Administrator: Information systems/assets may have an Information Asset Administrator (IAA) who reports the IAO. IAA’s are normally System Managers/Project Leads. Name: Title: Department: Telephone: Email Customers and other stakeholders: Section 3 : Privacy Impact Assessment Key Questions Data Items
Step 5: Identify and assess risks Describe source of risk and nature of potential impact on individuals. Include associated compliance and corporate risks as necessary. Likelihood of harm Severity of harm Overall risk Remote, possible or probable Minimal, significant or severe Low, medium or high
Privacy Notice for Parents/Carers, Guardians and Pupils This privacy notice advises parents, carers, guardians and pupils of the school’s data protection responsibilities on the collection and processing of pupil’s personal information. You are being provided with this notice because either you can exercise your child’s data protection rights on their behalf or for older children (usually when they reach the age of 13) they may be considered mature enough to exercise their own data protection rights. This notice provides details about: The personal information we collect on pupils How we collect that personal information What we do with the personal information Your rights in relation to any personal information held and processed by the school The Raleigh Learning Trust is the overall ‘Data Controller’ of the personal data you provide to us. This means that they decide the purpose for which and the manner in which any personal data relating to pupils and their families is to be processed. The Data Protection Officer for the Raleigh Trust is Claire Beardsall. Her role is to oversee and monitor the school’s Data Protection procedures and to ensure they are compliant with GDPR. Claire can be contacted by telephone 0115 9003618 or by e-mail at The Data Protection representative for Woodlands Academy is Linda Maltby. Linda can be contacted on 0115 9155734 or admin@woodlands.nottingham.sch.uk. What is personal information and what does processing mean? Personal information is any information that relates to your child that can be used directly or indirectly to identify them. This includes information such as their name, date of birth and address as well as information relating to their exam results, medical details and behaviour records. This may also include sensitive personal information such as their religion or ethic group, photos and video recordings. Information that we hold in relation to you is known as your “personal data”. This is information that we obtain from you directly and data about you that we obtain from other people and organisations. We might also need to continue to hold your personal data for a period after your child has left the school. Anything that we do with your personal data is known as “processing”.
Data Controller contact details Cherryvalley Group Practice Cherryvalley Health Centre Kings Square Kings Road Belfast BT5 7BP Data Protection Officer contact details Dr Mark Coghlan Cherryvalley Group Practice Cherryvalley Health Centre Kings Square Kings Road Belfast BT5 7BP 02890 401844 Purpose of the processing To give direct health or social care to individual patients. When a patient agrees to a referral for direct care, such as to a hospital or other healthcare provider, relevant information about the patient will be shared with the other healthcare staff to enable them to give appropriate advice, investigations, treatments and/or care. To check and review the quality of care. (This is called audit and clinical governance).
Pension Basic contact details NI Number, financial, income information N/A Pension processing Employees Pension provider, Age UK pensions department, HMRC, payroll provider, auditor/accountants 6 Years To fulfill contractual and legal obligations, audit purposes Locked cupboards, encrypted strorage, access controls Contractual, legitimate interests Finance Manager, System Admin The Square, locked filing cabinets, restricted files Safeguarding Basic contact details NoK, financial, POA Health, disability To make a referral, signpost, report/log Clients, public, partner organisations Safeguarding Team - Bolton Council, GMP 7 Years In case of necessary for referral or reporting Locked cupboards, encrypted storage, access controls Consent Operations Director, Coordinator, System Admin, I&A Officer Charitylog, filing locked in cabinets Wheelchair Hire Basic contact details Phone number Health, ethnicity (opt), disabiltiy Service delivery, in case of late return Clients None 12 Months Monitoring reporting and evaluation Locked cupboards, encrypted storage, access controls Consent Centre Manager, Operations Director, Service Co-ordinators, Systems Admin Farnworth office, locked filing cabinets, Charity Log Wilfred Geere - HfH Basic contact details Hospital number, NoK, GP, Disability, DoB Health involvement of other services, disability, POA To become a client of the service Clients Bolton NHS, Bolton GP Federation, GPs, Bolton Carers Support Group 7 Years Service delivery, monitoring reporting, auditing, quality and evaluation Locked cupboards, encrypted storage, access controls Consent System Admin, Service Coordinators, HfH Volunteers, Operations Director Hospital locked filing cabinets, Charitylog Will Writing Basic contact details N/A N/A Service Delivery Clients Solicitor firms - Joe Egan, Aspinall & Co, AFG Law, Russell & Russell, Kippax Beaumont Lewis and Cyril Morris Arkwright On going In case of Locked cupboards, encrypted storage, access controls Consent I&A Officer, Systems Admin, Manager, service volunteers The Square - locked filing cabinets and Charitylog
Sharing by the Department The Department may share information about school employees with third parties who promote the education or well-being of children or the effective deployment of school staff in England by: conducting research or analysis producing statistics providing information, advice or guidance The Department has robust processes in place to ensure that the confidentiality of personal data is maintained and there are stringent controls in place regarding access to it and its use. Decisions on whether DfE releases personal data to third parties are subject to a strict approval process and based on a detailed assessment of: who is requesting the data the purpose for which it is required the level and sensitivity of data requested; and the arrangements in place to securely store and handle the data To be granted access to school workforce information, organisations must comply with its strict terms and conditions covering the confidentiality and handling of the data, security arrangements and retention and use of the data. To contact the department:
Public Health The law requires us to share data for public health reasons, for example to prevent the spread of infectious diseases or other diseases which threaten the health of the population. We will report the relevant information to local health protection team or Public Health England. For more information about Public Health England and disease reporting see: We are required by law to provide you with the following information about how we handle your information and our legal obligations to share data. Data Controller contact details Dronfield Medical Practice High St Dronfield S18 1PY Data Protection Officer contact details Mrs Kathryn Wileman Dronfield Medical Practice High St Dronfield S18 1PY Purpose of the processing Compliance with legal obligations or court order. Lawful basis for processing The following sections of the GDPR mean that we can share information when the law tells us to. Article 6(1)(c) – ‘processing is necessary for compliance with a legal obligation to which the controller is subject…’ Article 9(2)(h) – ‘processing is necessary for the purpose of preventative…medicine…the provision of health or social care or treatment or the management of health or social care systems and services...’
A right to data portability This is a right to obtain and re-use your personal information for your own purposes; It includes a right to ask that your personal information is transferred to another organisation (where technically feasible). This right only applies in certain limited circumstances. If this right applies we must provide your personal information to you in a structured, commonly used and machine reasonable form Again, we must act without undue delay and in any event within 1 month of receipt of your request; We cannot charge you for this service. A right to object This is a right to object to the use of your personal information. The right applies in certain specific circumstances only. You can use this right to challenge our use of your personal information based on our legitimate interests; You can also use this right to object to use of your personal information for direct marketing If you object to us using your personal information for direct marketing, we must stop using your personal information in this way as soon as we receive your request. If you object to other uses of your personal information, whether we have to stop using your personal information will depend on the particular circumstances.
A right to object to automated decision making This is a right not to be subject to a decision which is made solely on the basis of automated processing of your personal information where the decision in question will have a legal impact on you or a similarly significant effect. Where such a decision is made, you must be informed of that fact as soon as reasonably practicable; You then have 21 days from receipt of the notification to request that the decision is reconsidered or that a decision is made that is not based solely on automated processing; Your request must be complied with within 21 days. A right to restrict processing This is a right to ‘block’ or suppress processing of your personal information. This right applies in various circumstances, including where you contest the accuracy of your information). If we are required to restrict our processing of your personal information we will be able to store it but not otherwise use it. We may only retain enough information about you to ensure that the restriction is respected in future. If we have disclosed your personal information to others, we must (subject to certain exceptions) contact them to tell them about the restriction on use.
The right to erasure of your personal information. The School will remove your personally identifiable data on request should you no longer wish your personal data to be processed. The right to restrict processing of your personal information. If at any point you object to us using your personal data, you have the right to suppress or block its processing. The right to withdraw consent. If, at any point, your situation changes or you have concerns about the way your personal data is processed, you have the right to withdraw your consent. The right to data portability. You have the right to request your personal information to be transferred to another party in an appropriate format so that you can re-use it across different services for your own purposes. Should you wish to exercise any of these rights, please contact the School’s HR Officer. The School may need to verify your identity before your request is actioned. This is a security measure to ensure that your personal information is not disclosed to any person who has no right to receive it. The School’s HR Officer oversees compliance with this privacy notice for applicants. If you have any questions about this privacy notice, how we handle your personal information or you wish to exercise your rights as above, please contact the HR Officer: Mrs Gill Morgan, HR Officer, St Leonards School, South Street, St Andrews, Fife, KY16 9QJ Telephone: 01334 460501 You have the right to complain to the Information Commissioner’s Office (ICO), if you are concerned about the way the School has processed your personal information. However the School would encourage you to make contact with our HR Officer, Mrs Gill Morgan, with a view to resolving any queries or questions in the first instance. Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Telephone: 0303 123 1113
COLLECTING YOUR DATA You provide several pieces of data to us directly during the recruitment exercise. In some cases, we will collect data about you from third parties, such as recruitment agencies, recruitment platforms, former employers, when gathering references, or credit reference agencies. Should you be successful in your job application, we will gather further information from you, for example, your bank details and next of kin details, once your employment begins. LAWFUL BASIS FOR PROCESSING The law on data protection allows us to process your data for certain reasons only. The information below categorises the types of data processing we undertake and the lawful basis we rely on. Activity requiring your data Lawful basis Carrying out checks in relation to your right to work in the UK Legal obligation Making reasonable adjustments for disabled employees Legal obligation Making recruitment decisions in relation to both initial and subsequent employment e.g. promotion Our legitimate interests Making decisions about salary and other benefits Our legitimate interests Making decisions about contractual benefits to provide to you Our legitimate interests Assessing training needs Our legitimate interests Dealing with legal claims made against us Our legitimate interests Preventing fraud Our legitimate interests SPECIAL CATEGORIES OF DATA Special categories of data are data relating to your: health age disability gender re-assignment marriage and civil partnership pregnancy and maternity race religion and belief sex or sexual orientation trade union membership criminal convictions (which are not spent) line
How long will your data be kept? When will it stop being used? Unsuccessful candidates: 6 months from the date of the appointment of the successful candidate. Successful candidates: Data will be held in line with the Data Retention Schedule. How long after this will it be deleted? Unsuccessful candidates: 6 months from the date of the appointment of the successful candidate. Successful candidates: Data will be held in line with the Data Retention Schedule. Our use of the data will be subject to your legal rights (marked if applicable): Inform Access Erase Restrict Portable Object Automate As you are giving us your data directly: This is the reason why we are allowed to ask for it and use it: Contract Law Eligibility to work in the UK Keeping Children Safe in Education 2016 (As Updated). This is what could happen if you refused to let us use your data for this purpose: Unable to process application/continue with recruitment process As you are not giving your data directly to us: This is who is giving us your personal data: Previous employer/s, DBS service, The Teaching Regulation Agency, Overseas Embassies This is a source of personal data open to anyone Yes No These are the categories of personal data being given to us Basic Demographics, e.g. name, address, date of birth, contacts, references from previous employers, employment suitability/safeguarding checks, prohibition, right to work and qualifications checks Visit the following websites for more information about Privacy Law, our obligations and your Rights: If you have concerns over the way we are asking for or using your personal data, please raise the matter with our Data Protection Officer by the following means: Postal Address SBM Services (uk) Ltd, 12 Park Lane Business Centre, Langham, Colchester CO4 5WR Email info@sbmservices.co.uk Phone Number 01206 671103 If you still have concerns following our response you have the right to raise the matter with the Information Commissioner’s Office: Postal Address Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Online Form Phone Number 0303 123 1113
Privacy notice for pupils You have a legal right to be informed about how the Academy and City Learning Trust (CLT) uses any personal information that we hold about you. To comply with this, we provide a ‘privacy notice’ to you where we are processing your personal data. This privacy notice explains how we collect, store and use personal data about you. We, The City Learning Trust (CLT) High Lane, Burslem, Stoke on Trent, is the ‘data controller’ for the purposes of data protection law. Our data protection officer is Joanne Shaw (see ‘Contact us’ below). The Headteacher, of Mill Hill Primary Academy, acts as the representative of the data controller, in their Academy, on a day-to-day basis. The personal data we hold. We hold some personal information about you to make sure we can help you learn and look after you at school. For the same reasons, we get information about you from some other places too – like other schools, the local authority and the government. This information includes: (This is by no means an exhaustive list) Your contact details (address, parents’/carers’ telephone numbers) Your test/exam results/school reports Details of any additional support you may receive in school for example special educational needs. Details of any behaviour issues or exclusions from school Photographs taken in school Video images recorded in school CCTV images that are captured in school Dietary information (if you have any specific foods you can or cannot eat) Unique Pupil Number ( an identification number that is given to you whilst you are at school) Date of Birth Safeguarding information (information to keep pupils/students safe if they are in danger of being harmed) Detail of other schools that you have attended Detail of any accidents you have had in school Immigration details (information which says that you can live in this country) We may also collect, store and use information about you that falls into ‘special categories” of more sensitive personal data. This includes information about: (where applicable) Race, ethnicity, religious beliefs, Health, including any medical conditions, and sickness/attendance records
Privacy Notice May 2018 – Parents and pupils Please be advised that not all of this data is shared with everyone listed. We only share data required for that particular function and only the minimum required. What is the service being provided? Creation, Maintenance of the Pupil Record, Curriculum Delivery and Pastoral Care, including Pupil and Parent/Carer data What personal data do we need from you? Full name (including previous names/known as name) Address Date of birth Gender Email address Ethnicity, nationality, language, religion Eligibility for free school meals Other family members SEN and medical/dietary information Parent/carer contact and emergency contact details Consent School history Welfare details Who will be using your Personal Data? Who is the ? Kirkby College Who is the Data Controller’s ? Operational Support Administrator Are there any ? Yes No Who are they? SIMS CPOMS SQUID What will it be used for and what gives us the right to ask for it and use it? The Purpose(s): Statutory Duties The (s): Statutory Duty & Substantial Public Interest Who else might we share your data with? Central & Local Government, Health Providers, Other Education Providers, Regulatory Bodies Will your data be stored in or accessible from Privacy Law protections? NO How long will your data be kept? When will it stop being used? When the Pupil transfers to another education setting, e.g. another school/college