Data policy
Trident Hyperbaric and Medical Services Ltd is a company registered with the ICO under the data protection register (GDPR). Our registration number is ZB539309. The data protection officer is Dr Michael Gonevski. His contacts are available on the website.
GDPR principles
We strictly follow all requirement and principles provided by the GDPR, namely:
Lawfulness, fairness and transparency
Purpose limitation
Data minimisation
Accuracy
Storage limitation
Integrity and confidentiality (security)
Accountability principle
Your personal data
We will keep only information that is strictly necessary for the purpose of your examination and for what is required by law. This may include:
information about your health status, collected from the patients’ medical records, and/or provided by the patient during examination and/or through enquiries (via e-mail, telephone, or in person).
personal information like name, title, date of birth, contact details, photographic identification.
We aim to keep this information down to minimum. Under the GDPR we control and process any personal information about you electronically using the following lawful bases: consent and legitimate interest. “Processing” the data encompasses all actions related to it, like collecting, storing, amending, transferring, deleting, etc. If the lawful basis upon which we process your personal information changes, we will notify you about the change. We shall stop processing your personal information if the lawful basis used is no longer relevant.
We will use your data only with regards to the medical service we provide. This may include on rare occasions communicating some of your personal information with other medical professionals, like GPs or consultants when this is necessary.
We will also use your contact details to communicate with you when this is necessary.
We will not distribute your information to third parties, unless we have your permission, or we are under a legal obligation to do so.
Your data is kept secure.
We do not store any data for longer than this is required by law. Current legislation requires retention of medical records for a minimum of seven years. Any other information will be retained according to the purpose, nature, and sensitivity of the personal data for a period that is reasonably necessary or required by low.
Your rights
The UK GDPR provides a number of rights for individuals, like the ones described in brief below:
• The right to be informed: You have the right to be informed about the collection and use of your personal data, including: the purposes for processing any personal data, the retention periods for that personal data, and who it will be shared with. We call this ‘privacy information’.
• The right of access: You have the right to access and receive a copy of your personal data, and other supplementary information.
• The right of rectification: Individuals who have inaccurate personal data have the right to rectify it, or complete it, if it is incomplete.
• The right to restrict processing: You have the right of erasure of data in certain circumstances, when this doesn’t contradict with other lawful requirements, as well as the right to restrict processing.
• The right to data portability, which allows individuals to obtain and reuse the personal data for their own purposes across different services.
• The UK GDPR gives individuals the right to object to the processing of their personal data in certain circumstances and gives an absolute right to stop their data being used for direct marketing, which is never the case in our practice.
Full description of the Individual rights under ICO can be found here: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
If you have further questions or concerns with regards to this policy, you can contact the Data Protection Officer (Dr Michael Gonevski) through the contact form on our website, or via e-mail.
All the information about the data policy we follow is published on the ICO website: https://ico.org.uk/. If you feel there is a problem with the way we handle your data, you also have the right to raise a complaint with the ICO. Information about how to do this is given on their web-site: https://ico.org.uk/make-a-complaint/.
