Privacy Notice

for Delegate Data

 We take great care to protect the personal data we hold for you in line with the requirements of the General Data Protection Regulation (GDPR).

The purpose of collecting and storing personal data about you is to ensure we can:

• Fulfil any contracts we hold in relation to the service we offer you
• For business administration

Personal data held for our delegates

The personal data we process (processing includes obtaining the information, using it, storing it, securing it, disclosing it, and destroying it) for you includes:

• Name, address
• Email address
• Phone numbers
• BACS payment receipts
• Details of any complaints received

We keep an inventory of personal data we hold on our delegates and this is available on request.

Disclosure to third parties

The information we collect,and store will not be disclosed to anyone who does not need to see it.

We will only ever share your personal information with third parties when required by law.

Personal privacy rights

Under the General Data Protection Regulation (GDPR) you have the following personal privacy rights in relation to the information we hold about you.

You have a right to:

• Access to and copies of your records.
• Have inaccuracies deleted.
• Have information about you erased.
• Object to direct marketing.
• Restrict the processing of your information, including automated decision-making.
• Take your data to another CPD provider or anywhere else.

Delegates who wish to have inaccuracies deleted or to have information erased must speak to Dr Raheel Malik or Dr Richard Porter.

Legal basis for processing data held about delegates

The GDPR requires us to state the legal basis upon which we process all personal data for our delegates and it requires us to inform you of the legal basis on which we process your personal data.

Our Legal Basis is Consent & Contract

Automated decision making

You will be asked to opt in to any processes involving automated decision making. This means that if we want to contact you via direct marketing we will ask for your consent in the very beginning of this process.

Consent

We will always obtain specific, opt in consent, from you, for direct marketing information. Consent would be obtained via an ‘opt in’ button on our website.

Withdrawal of consent

After you have given your ‘opt in’ consent you have a right to withdraw your consent at any time.

Retention period

We will only keep your personal data for as long as is required to.

Complaints

You have a right to complain about how we process your personal data. All complaints concerning personal data should be made in person or in writing to Dr Raheel Malik & Dr Richard Porter. All complaints will be dealt with in line with the business complaints policy and procedures.

Transferring personal data outside the EU

Your personal data is not transferred outside the EU.

This Privacy Notice was reviewed and implemented on: Friday 18^th May 2018

It will be reviewed annually and is due for review

on: 18/5/2019 or prior to this date in accordance with new guidance or legislative changes.

Document Change Record

For

EU General Data Protection Regulation (GDPR)

Privacy Notice for Delegate Data

The table below is used to register all changes to the policy: