The Integrated Care Board (ICB) completes a range of engagement with patients and members of the public to understand the uptake of services and support that can be provided within the Derby and Derbyshire area.
This includes hosting patient participation and engagement groups and sharing surveys to be completed allowing the ICB to improve the quality of services delivered.
We collect and store information that has been received directly from you if you are actively involved in the Patient Participation or Engagement.
We may share information with the following organisations with your explicit consent or when the law allows: GP Practices or other Healthcare Providers.
You have the right to withdraw your consent for your identifiable information to be used or shared for this purpose. Please speak to the ICB if you no longer wish to have your data used or be a part of the patient participation or engagement.
Data Controller contact
If you have any queries, concerns, or want to request that we change or delete your information, you may contact NHS Derby and Derbyshire ICB at the following address:
Information Governance Team, Scarsdale, Nightingale Close, Newbold, Chesterfield, Derbyshire, S41 7PF
Email: ddicb.igteam@nhs.net
Purpose of the processing
This data is used to allow the ICB to fulfil their public task.
Lawful basis for processing
The lawful justification for the processing and possible sharing of this data is under the following Article 6 and Article 9 of the UK General Data Protection Regulations (UK GDPR):
Article 6(1)(a) “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”
Article 9(2)(a) “the data subject has given explicit consent to the processing of those personal data for one or more specified purposes”
Recipient or categories of recipients of the processed data
The data may be shared with GP practices or other healthcare providers.
Right to object
You have the right to object to some or all the information being processed under Article 21 of UK GDPR. To object to the processing of your information, please contact the controller. You should be aware that this is a right to raise an objection, which is not the same as having an absolute right to have your wishes granted in every circumstance.
Right to access and correct
You have the right to access the data that is being shared and have any inaccuracies corrected. There is no right to have accurate medical records deleted except when ordered by a court of law.
Retention period
The data will be retained in line with the law and national guidance. Or speak to the ICB.
Right to complain
You have the right to complain to the Information Commissioner’s Office (ICO).
Contact the ICO online or call their helpline on 0303 123 1113 (local rate) or 01625 545 745 (national rate).
There are National Offices for Scotland, Northern Ireland and Wales.