Introduction
This page explains why information is collected about you and how your information may be used – this is called a Fair Processing Notice or Privacy Notice. This privacy notice applies to the information of people who have signed up to the Think Kidneys newsletter and describes how the Renal Association Quality Improvement (RAQI) Team collects, uses and processes your personal information and how, in doing so, it complies with its legal obligations to the public. Your privacy is important and we are committed to safeguarding your data privacy rights.
The General Data Protection Regulation (GDPR) became law on 25th May 2018. This is a single EU-wide regulation on the protection of confidential and sensitive information.
This notice will address the following areas:
- Key definitions
- Why we collect your information
- What personal information we collect
- How your information is used
- Who your information is shared with
- The lawful basis for collecting your information
- How the Renal Association Quality Improvement Team maintains the confidentiality of your records
- The RAQI Team and partner organisations
- How long your information will be stored
- Your individual rights
- Objections and complaints
- How to contact The RAQI Team
- Changes to this notice
Key definitions
Data controller – person or persons who determine the purposes and means of processing personal data, in this case, the unit/hospital where you receive treatment.
Data processor – in relation to your personal data, means any person (other than an employee of the data controller) who processes the data on behalf of the data controller.
Data protection officer – an existing employee or externally appointed person in place to assist in monitoring internal compliance, informing and advising on data protection obligations, providing advice regarding Data Protection Impact Assessments (DPIAs) and acting as a contact point for data subjects and the supervisory authority.
Who are the RAQI team?
The RAQI Team aims to improve patient outcomes for individuals with kidney disease. It achieves this by supporting three programmes relating to Kidney Disease
- Acute Kidney Injury (AKI)
- Transforming Participation in Chronic Kidney Diseases (TPCKD)
- Kidney Quality Improvement Partnership (KQuIP)
Full details of the RAQI Team and its supported programmes can be found on the Think Kidneys website: https://www.thinkkidneys.nhs.uk/
The RAQI Team is operated and governed by the Renal Association, a not for profit organisation registered with the Charity Commission as a membership organisation for healthcare professionals caring for people with kidney disease. Full details of their work can be found here: https://renal.org/
Why the RAQI Team collects your information
The Think Kidneys website is governed by the Renal Association and delivered through the UK Renal Registry (UKRR). This privacy notice refers to the personal information collected via the Think Kidneys website and the contact list held for email circulations relating to the work of the RAQI team.
We collect contact information so that we can keep you up to date on the work of the RAQI team. This will be by sending you newsletters and emails about our work.
How your information is used
If you agree (consent) to receive communications from the RAQI team, your full name and email address will be kept as part of a mailing list for the Think Kidneys newsletter and for additional updates about the RAQI teams’ work. This is held on a spreadsheet which is stored on a secure server at the UKRR .
Your information is not used for any other purpose and is not made available to anyone outside of the RAQI team.
Where your data will be collected from
Your data is collected through the Think Kidneys website.
The lawful basis for collecting your information
When you enter your personal details into the Think Kidneys website to sign up to our newsletter, you are asked to consent to receive communications from us. This is the lawful basis under the General Data Protection regulation for processing your data.
How the RAQI Team maintains the confidentiality of your information
The RAQI team is committed to protecting your privacy and will only use information collected lawfully in accordance with:
- Data Protection Act (2018)
- General Data Protection Regulation (2018)
- Human Rights Act (1998)
- Common Law Duty of Confidentiality
- NHS Codes of Confidentiality, Information Security and Records Management.
The RAQI team will not disclose your information to third parties without your consent unless there are exceptional circumstances such as situations when the health and safety of others is at risk, or where the law permits information to be passed on.
All Renal Association employees working on the RAQI team are asked to sign a confidentiality agreement as part of the employment contract.
How long your information will be stored
Your data will be stored by the RAQI team indefinitely for the purposes of sending you information unless you choose to opt out.
Your individual rights
This next section describes how you can access, amend, erase, and move your personal information, withdraw your consent and object to or complain about the data that we hold about you.
Right to access your information (data subject access requests)
You have the right to receive a copy of your personal information that the RAQI team hold about you, without any charge, by making a written request to the address at the end of the document. The RAQI tam will normally provide your information within one month of receiving all the information we need to respond to your request.
Right to rectification (right to amend your information)
You have the right to have your information amended. Please contact us if you want information corrected.
Right to have withdraw consent and have your information erased
You can withdraw consent for the RAQI team to hold your data at any time. You can either contact the RAQI team directly via the address at the end of this document or reply to the emails that we have sent to you with ‘unsubscribe’ in the subject.
Right of data portability (right to move your data)
You have the right to request a secure transfer of your data that the RAQI team hold about you to another data controller. We will transfer your data to you directly for you to transfer on to the new data controller. You should make the request in writing to Renal Association Quality Improvement Team – see the section ‘How to contact Think Kidneys’ for our contact details. No fee will be payable and the information will be transferred within one calendar month.
Right to object
The RAQI team use your information for the purpose you consented to. If you do not agree with this you have the right to object. See the section below on ‘Objections and complaints’ that explains who to contact if you have an objection. The RAQI team will respond to your objection within a month (although may be allowed to extend this period in certain cases).
Right to complain to the regulator
Details on how you can do this are included in the section ‘Objections and complaints’ below.
Objections and complaints
Should you have any concerns about how your information is managed, please contact the data protection officer for the Renal Association (see section below ‘How to contact the RAQI team). If you are still unhappy following a review by the data protection officer, you have a right to lodge a complaint with the Information Commissioner:
Information Commissioner:
Wycliffe house
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 01625 545745
www.informationcommissioner.gov.uk
How to contact the RAQI team
The Renal Association’s Data Protection Officer is: Mr Tom Gray
He can be contacted via:
Post:
Tom Gray
Think Kidneys
c/o The Renal Association
Learning and Research Building
Southmead Hospital
Bristol
BS10 5NB
Tel: 0117 4148 157
Email: tom.gray@renalregistry.nhs.uk
Alternatively, you can contact:
The UKRR’s Senior Information Risk Owner – Dr Retha Steenkamp
Email: Retha.steenkamp@renalregistry.nhs.uk
Or
The UKRR’s Caldicott Guardian – Dr Fergus Caskey
Email: fergus.caskey@bristol.ac.uk
Changes to this notice
We may amend this privacy notice from time to time. If you are dissatisfied with any aspect of our privacy notice, please contact the data protection officer