|
GENERAL DATA PROTECTION LEGISLATION GDPR)
May 2018 |
WEBSITE PRIVACY POLICY
This website is operated by Healthwatch and Public Involvement Association (HAPIA) and it takes your privacy seriously. Therefore, we urge you to read this Policy carefully, because it contains important information the personal information collected about you, for instance:
- What HAPIA does with your information, and
- Who your information is shared with.
WHO WE ARE
HAPIA is a 'Data Controller' for the purposes of the Data Protection Act 1998. It is responsible for, and controls the processing of, your personal information.
HAPIA is a 'Data Controller' for the purposes of the Data Protection Act 1998. It is responsible for, and controls the processing of, your personal information.
INFORMATION COLLECTED
Personal information you provide about third parties.
If you give HAPIA information about another person, you confirm that the other person has appointed you to act on their behalf, and agreed that you:
Personal information you provide about third parties.
If you give HAPIA information about another person, you confirm that the other person has appointed you to act on their behalf, and agreed that you:
- Consent on their behalf to the processing of their personal data.
- Receive any data protection notices on their behalf.
- Consent on their behalf to the transfer of their personal data abroad.
HOW THE INFORMATION COLLECTED IS USED
Information is collected for the purpose of communication - updates, notices of Meetings and Conferences, distribution of Presentations and the Annual Report and Annual Membership applications.
Information is collected for the purpose of communication - updates, notices of Meetings and Conferences, distribution of Presentations and the Annual Report and Annual Membership applications.
WHO YOUR INFORMATION MAY BE SHARED WITH
It is not the intention of HAPIA to share you information to any third party, with the exception of:
It is not the intention of HAPIA to share you information to any third party, with the exception of:
- Law enforcement agencies in connection with any investigation, to help prevent unlawful activity.
KEEPING YOUR INFORMATION SECURE
HAPIA will use technological and organisation measures to keep your information secure. However, while HAPIA uses all reasonable effort to secure your personal data, in using the site you acknowledge that the use of the internet is not entirely secure and, for this reason, we cannot guarantee the security or integrity of any personal data that is transferred from you, or to you, via the internet. If you have any particular concerns about your information, please contact us using the details below.
HAPIA will use technological and organisation measures to keep your information secure. However, while HAPIA uses all reasonable effort to secure your personal data, in using the site you acknowledge that the use of the internet is not entirely secure and, for this reason, we cannot guarantee the security or integrity of any personal data that is transferred from you, or to you, via the internet. If you have any particular concerns about your information, please contact us using the details below.
WHAT RIGHT DO YOU HAVE?
Right to request a copy of your information.
You can request a copy of your information held by HAPIA (this is known as a subject access request). If you would like a copy of some of it, please:
Right to request a copy of your information.
You can request a copy of your information held by HAPIA (this is known as a subject access request). If you would like a copy of some of it, please:
- Email, call or write (using the contact details below).
- Let HAPIA have proof of your identity and address (a copy of your Driving Licence or Passport, and a recent Utility or Credit Cared Bill, and
- Information on what you want a copy of, including any account or reference number, if you have them.
RIGHT TO CORRECT ANY MISTAKES IN YOUR INFORMATION
You can require HAPIA to correct any mistakes in your information. If you would like to do this, please
You can require HAPIA to correct any mistakes in your information. If you would like to do this, please
- Contact HAPIA using the contact details below.
- Let HAPIA have enough information to identify you (as mentioned above), and
- Let HAPIA know the information that is incorrect and what it should be replaced with.
RIGHT TO ASK HAPIA TO STOP CONTACTING YOU
You can ask HAPIA to stop contacting you. If you would like to do this, please:
You can ask HAPIA to stop contacting you. If you would like to do this, please:
- Email, call or write to HAPIA using the contact details below.
- Let HAPIA have proof of your identify (as mentioned above), and
- Let HAPIA know what method of contact you are not happy with (for instance, you may be happy for us to contact you by email, but not by telephone).
PERSONAL DATA ... The Meaning
Personal data means any information relating to an identified or identifiable natural person (data subject);
An identifiable natural person is one who can be identified, directly or indirectly, in by reference to:
Personal data means any information relating to an identified or identifiable natural person (data subject);
An identifiable natural person is one who can be identified, directly or indirectly, in by reference to:
** IP address
The Internet Service Provider (ISP) has a record of the temporary IP address and knows to whom it has been assigned. A website provider has a record of the web pages accessed by a dynamic IP address (but no other data that would lead to the identification of the person).
If the two pieces of information are combined, the website provider could find the identity of the person behind a certain IP address.
However, the chances of this happening are small, as the ISP has to meet certain legal obligations before it can hand the data to the website provider.
The conclusion is, all IP address should be treated as personal data in order to be GDPR complaint.
** Social Identity
The Internet Service Provider (ISP) has a record of the temporary IP address and knows to whom it has been assigned. A website provider has a record of the web pages accessed by a dynamic IP address (but no other data that would lead to the identification of the person).
If the two pieces of information are combined, the website provider could find the identity of the person behind a certain IP address.
However, the chances of this happening are small, as the ISP has to meet certain legal obligations before it can hand the data to the website provider.
The conclusion is, all IP address should be treated as personal data in order to be GDPR complaint.
** Social Identity
- Education
- Social Class
- Genetics
CONTACT DETAILS
Healthwatch and Public Involvement Association (HAPIA)
30 Portland Rise, LONDON, N4 2PP ................................................................................................. www.hapia2013.org
Malcolm Alexander, Chair .................................................................................................................. hapia2013@aol.com
Healthwatch and Public Involvement Association (HAPIA)
30 Portland Rise, LONDON, N4 2PP ................................................................................................. www.hapia2013.org
Malcolm Alexander, Chair .................................................................................................................. hapia2013@aol.com