Privacy Notice
We have updated this Notice, to incorporate the changes brought about by the UK General Data Protection Regulation (UK GDPR) that came into force on 1st January 2021. UK GDPR includes provisions on Privacy Notices in Articles 12, 13 and 14.
WellNet Supplementary Privacy Notice - your information
About us
WellNet is an interactive wellbeing hub established to ensure all members of the Dorset integrated care service (ICS) have equal access to wellbeing resources.
Our aim to provide free easily accessible wellbeing resources to our 50,000 staff across the Our Dorset ICS.
Although we are working at an ICS level we are currently hosted by Dorset HealthCare.
Dorset HealthCare is responsible for all mental health services and many physical health services in Dorset, delivering both hospital and community-based care. We are the biggest provider of healthcare in Dorset, and our services continually evolve and develop to meet the needs of the local community.
- Dorset HealthCare's services include:
- Dorset's 12 community hospitals and minor injuries units
- Adult and children's community health services (physical and mental)
- Inpatient Mental Health Services
- Specialist Mental Health Services (Perinatal, Acute Hospital Liaison, Forensic and Eating Disorders)
- Primary Care Mental Health Services across Dorset and Southampton (Steps to Wellbeing)
- Specialist learning disability services
- Community brain injury services
Our community health services include: district nurses, health visitors, school nursing, end of life care, sexual health, safeguarding children, diabetes education, audiology, speech and language therapy, dermatology, podiatry, orthopedic services, wheelchair services, anti-coagulation services, pulmonary rehab, early discharge stroke services, Parkinsons Care, community oncology and breastfeeding support services.
Our annual income is around £253 million.
We have University Trust status and work with Bournemouth University to provide benefits for patients and staff. Our University Trust status supports us in providing innovative care, promoting clinical excellence, and attracting and retaining high quality staff. The Trust also has active relationships with Southampton University and St Loyes.
What is a privacy notice?
A privacy notice is a statement by the Trust to patients, service users, visitors, carers, the public and staff that describes how we collect, use, retain and disclose personal information which we hold.
Why issue a privacy notice?
Dorset HealthCare University NHS Foundation Trust recognises the importance of protecting personal and confidential information in all that we do and takes care to meet its legal and regulatory duties. This notice is one of the ways we can demonstrate our commitment to our values and to being transparent and open. It also shows our commitment to respecting diversity, acting with integrity, demonstrating compassion, striving for excellence and listening and supporting others.
This notice explains what rights you have to control how we use your information.
Who are we accountable to?
Department of Health - https://www.gov.uk/government/organisations/department-of-health
Information Commissioner’s Office - https://ico.org.uk/
Care Quality Commission - http://www.cqc.org.uk/
NHS England - https://www.england.nhs.uk/
Our consultants, doctors, nurses, healthcare professionals and registered support staff are also regulated and governed by professional bodies including numerous royal colleges.
Legal basis for processing your information
We only process your information if we have a lawful reason to do so. We make sure you know how we use your information, and tell you about your rights.
We rely on the following specific conditions in Articles 6 and 9 of the UK GDPR to process your information:
6(1) (e) ‘…for the performance of a task carried out in the public interest or in the exercise of official authority…’
6(1) (c) ‘…for compliance with a legal obligation to which the controller is subject’
We do not rely on consent to use your information as a legal basis for processing.
What information do we collect from you, and why?
We may ask for or hold personal confidential information about you which will be used to help us deliver appropriate wellbeing resources. This supports us to provide high quality care.
These records include:
Name
Email Address
Organisation you work for
Record of resources accessed.
Hydration and step data added to the system.
Emails and App notifications
We may send emails and push notifications via the mobile app to inform you of new wellbeing resources.
You will have the ability to disable these notifications if you wish.
How we use your information
To help inform decisions about what wellbeing resources to develop.
To feed back to organisations about how their staff are feeling and what areas of wellbeing they may need support with.
To support the health of the general public, ensure our services can meet future needs and review care to ensure it is of the highest possible standard.
To ensure our services can meet future needs.
For research and audit.
To prepare statistics on NHS performance
To monitor how we spend public money.
It helps you because:
Accurate and up-to-date information about what wellbeing resources are being accessed helps us to provide you with focused up to date wellbeing resources on areas that you are interested in.
Where possible, when using information to inform future services and resources, non-identifiable information will be used.
How we keep your information safe and confidential
Dorset HealthCare is committed to keeping your information secure. Information is retained in secure electronic and paper records and access is restricted to those who need it. Security and access controls, operational policies and procedures are in place to protect your information.
The UK GDPR regulates the processing of personal information. Strict principles govern our use of information and our duty to ensure it is kept safe and secure.
Dorset HealthCare University NHS Foundation Trust is registered with the Information Commissioners Office (ICO).
Everyone working for the Trust is subject to the Common Law Duty of Confidentiality, the Data Protection Act 2018 and the UK GDPR. Information provided in confidence will only be used for the purposes for which you have consented, unless there are other circumstances covered by the law.
Under the NHS Confidentiality Code of Conduct, all staff are required to protect information, inform you of how your information will be used and to allow you to decide if and how your information can be shared. This will be noted in your records.
All staff are required to undertake annual training in data protection, confidentiality, IT/cyber security, with additional training for specialists, like people who look after healthcare records, data protection officers and IT staff.
Who we share your information with?
To provide best care possible, your information will be shared with the Here for Each Other wellbeing team and the wellbeing team from your organisation.
The ICS and local wellbeing teams work together so we may need to share information about what wellbeing resources are being accessed more frequently. We do this to insure we are continuing to provide and develop the wellbeing resources that the system needs.
You have the right to opt out of your information being shared in this way at any time. Please discuss this with your health care professional as this could have implications in how you receive further care
We will not disclose any health information to other third parties without your explicit consent, unless there are exceptional circumstances, such as when the health or safety of others is at risk or where the law requires the disclosure of information
Sharing information for improving services
To help us monitor our performance, evaluate and develop the services we provide we need to review and share minimal information with organisations that commission our services (such as NHS Dorset) and organisations that regulate and monitor our services (such as NHS England and NHS Digital).
To ensure that we have accurate and up-to-date patient records, we carry out a programme of audits. Access to your personal data records for this purpose is monitored and only anonymous information is used in any reports that are shared internally within our organisation.
Deactivating your Account
At any point you will be able to delete your account with in WellNet. Once you have deleted your account all personal data that has been link to this account will be removed.
Contacting us about your information
Each organisation has a senior person responsible for protecting the confidentiality of your information and enabling appropriate sharing. This person is known as the Caldicott Guardian. You can contact Dorset HealthCare University NHS Foundation Trust’s Caldicott Guardian by using the Contact Us section of this website. There is also a Data Protection Officer to meet our requirements under the UK GDPR.
If you have any questions or concerns about the information, we hold on you, the use of your information or would like to discuss further, please contact the Information Governance team:
Information Governance Team
Dorset HealthCare University NHS Foundation Trust
Sentinel House
4-6 Nuffield Road
Poole
BH17 0RB
Phone: 01202 277327
Email: dhc.informationgovernance@nhs.net
How can I access the information you hold about me, and what are my rights?
Under the current Data Protection Act 2018 and the UK GDPR a person may request access to information (with some exemptions) that is held about them by an organisation. This is called a Subject Access Request. From 1st January 2021 (UK GDPR) there is no fee for this unless a request is unfounded or excessive, particularly if it is repetitive. In that case, a reasonable fee may be charged.
To submit a Subject Access Request, please email to dhc.sar.enquiries@nhs.net
Your Rights under the UK GDPR are:
1. Right to be informed
2. Right to access
3. Right of rectification
4. Right to erasure
5. Right to restriction of processing
6. Right to data portability
7. Right to object
8. Automated individual decision-making, including profiling
We will comply with your rights and our responsibilities as stated above
Data breaches under UK GDPR
Under the UK GDPR we have a duty to report certain types of data breach (where information has not been appropriately protected) to the Information Commissioner’s Office (ICO). If the breach creates a risk to your rights and freedoms we will notify you without undue delay and the ICO within 72 hours of becoming aware of the breach, where possible.
If the breach is likely to bring a high risk of adversely affecting your rights and freedoms, we will also inform you without undue delay.
Further information
To find out about other resources to help put you in charge of your healthcare
NHS Choices - http://www.nhs.uk/pages/home.aspx
Contacting us if you have a complaint or concern
We try to meet the highest standards when collecting and using personal information. We encourage people to bring concerns to our attention and we take any complaints we receive very seriously. You can submit a complaint through the Trust’s Complaints Procedure by emailing the below address:
dhc.wellnetdorset@nhs.net
If you are still dissatisfied with the Trust’s decision following your complaint, you may wish to contact:
Data Protection Officer
Dorset HealthCare University NHS Foundation Trust
Sentinel House
Nuffield Industrial Estate
4-6 Nuffield Road
Poole
BH17 0RB
email: dhc.informationgovernance@nhs.net
phone: 01202 277327 You can find more information on their website at www.ico.gov.uk
The Information Commissioner will not normally consider an appeal until you have exhausted your rights of redress and complaint to the Trust.
Copyright
Our copyright and database right material is licensed for use and re-use under the Open Government Licence (OGL).To view this licence, visit www.nationalarchives.gov.uk/doc/open-government-licence or write to:
Information Policy Team
The National Archives
Kew, Richmond
Surrey
TW9 4DU
Use of information expressly made available under this licence indicates your acceptance of the terms and conditions as set out in the OGL. When you use our information under the OGL, you should include the following attribution: [Insert name of information resource, Dorset HealthCare University NHS Foundation Trust, date of publication], licensed under the Open Government Licence www.nationalarchives.gov.uk/doc/open-government-licenceFor information where the copyright is owned by another person or organisation, you must apply to the copyright owner to obtain their permission to use/re-use.
The information supplied to you continues to be protected by the Copyright, Designs and Patents Act 1988. You are free to use it for your own purposes, including any non-commercial research you are doing and for the purposes of news reporting. Any other re-use, for example commercial publication and subscription charge, would require the permission of the copyright holder. In accordance with the Re-Use of Public Sector Information Regulations 2005, information provided to you may not be used for commercial publication, subscription charge or sold on to a third party, without the permission of
Dorset HealthCare University NHS Foundation Trust
If you need further clarification, please contact the Information Governance team on 01202 277327 or email dhc.informationgovernance@nhs.net
Where any contact details are given for members of Trust staff, notice is hereby given, on behalf of the individual or individuals that this personal information may not be used for the purposes of direct marketing.
