Data Controller(s)

NHS Sheffield CCG

Purpose

If you have asked the CCG to keep you regularly informed and up to date about the work of the CCG or of you are actively involved in our engagement and consultation activities or patient participation groups, we will collect and use information you share with us. Where you submit your details to us for involvement purposes, we will only use your information for this purpose.

Type of information Used

Identifiable: Personal (such as name, address, date of birth)

Special Category (health information) voluntarily disclosed as part of personal views and care experiences

Legal basis

GDPR Article 6(1)(e) ‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’

Relevant legislation – Health and Social Care Act 2012 – CCGs have a statutory duty to consult with the public.

GDPR Article 9(2)(h) processing is necessary for the purposes of the provision of health or social care or treatment or the management of health or social care systems and services.

How we collect (the source) and use the information

We will be collecting and using your information to enable us to keep you informed of any news, consultation activities or patient participation groups.

Your information will be held securely and accessible only to those who need it for the purposes it was collected.

Information provided about care experience will not be disclosed in an identifiable manner without your explicit written consent

Data Processors

Survey Monkey survey hosting and reporting

Mailchimp Bulk email, engagement management, click analysis

Twitter Click Analysis

Eventbrite Event management

Facebook Click Analysis

SiteKit Ltd   Website hosting

Traktivity Contacts information

FrankLTD Website design / hosting

Your Rights

With regards to Patient and Public Involvement under GDPR you have the right:

• To be informed about the processing of your information (this notice)
• Of access to the information we hold about you.
• To have that information amended in the event that it is not accurate.
• To have the information deleted
• To restrict processing
• To object to processing/withdraw your consent for processing
• Not to be subject automated decision-taking or profiling
• To be notified of data breaches

How long we will keep the information

Information in relation to public consultations will be kept for 5 years following the end of the consultation.

Membership database data will kept for two years after last explicit consent obtained

Who we will share the information with (recipients)

No sharing outside of the CCG