THE RAHERE ASSOCIATION
DATA PROTECTION
PRIVACY NOTICE
WHO WE ARE
The Rahere Association is a charitable fund (registered charity number 221171), formed in 1953, devoted to the welfare of patients and staff at St. Bartholomew’s Hospital. It is managed by a committee of voluntary members who meet throughout the year. Financial grants are made from the funds of the Association, which have been built up from donations and legacies that have been received over many years.
The Rahere Association is committed to protecting your privacy. This privacy notice explains how we use information about you and how we protect your privacy.
INFORMATION THAT WE HOLD
We hold a database with the names and addresses of all our supporters to whom we send our Christmas Appeal letter annually. This database also holds information on financial donations made by supporters.
Our database of supporters has been held for many years and we believe that the individuals stored on our database would expect this data to be held about them. We will of course erase any data on request.
Information on grant recipients is also received by the Association, including their names and contact details (which may include addresses, email addresses and telephone numbers), which are received in the process of administering grant applications. Grant applications may also include the following personal data:
• Date of birth of the grant recipient
• Family information
• Education, training and employment details
• Financial details
• Lifestyle and social circumstances
• Physical and / or mental health details. This category of information is considered ‘special’ and needs more protection due to its sensitivity.
The personal data received in the administration of grant applications may have been provided by doctors, nurses or other healthcare workers within St Bartholomew’s Hospital, social workers working with patients of the Hospital, hospices, or other third parties.
The Rahere Association also holds personal information about its Trustees and its employees.
The Association believes that it is necessary for the legitimate interests pursued by the Association to hold this data. Its interests are to provide financial grants to the patients and staff of St Bartholomew’s Hospital and to raise funds, through donations, towards the continuation of this interest.
WHO DO WE SHARE YOUR INFORMATION WITH
The Rahere Association has no intention of transferring any data to any other organisation whether for remuneration or otherwise, with the exception of the example laid out below.
It may occasionally be necessary to share the names and contact details of grant recipients with third parties, for example, with suppliers of equipment being paid for by a grant. The Association will discuss with the grant recipient before information is shared to ensure that we act with consent.
All supporters and grant recipients have a right of access to a copy of what is comprised in their personal data and to have inaccurate personal data rectified or erased or destroyed.
SECURITY OF YOUR INFORMATION
Personal information held on our database of supporters is stored securely on the Barts Health NHS Trust secure IT system with password protected access limited to the Treasurer of the Association.
Trustees and employees of The Rahere Association have a legal duty to retain the highest level of confidentiality. Grant applications are received in the first instance by the Treasurer of the Association. It is the Association’s policy that the names and contact details of grant recipients are not shared with the Trustees who consider these applications. It is necessary that some personal details presented within grant applications, such as financial information and health status, is shared with Trustees considering applications, in order for them to fairly and properly consider each application.
Documentation relating to grant applications and their administration are stored digitally on the secure Barts Health NHS Trust IT system with password protected access limited to the Treasurer of the Association.
All records are kept for six years in compliance with regulations set out by Companies House on financial record retention. After six years this information is destroyed by secure means.
COMPLAINTS
If you are unhappy with the way in which your personal data has been processed you may in the first instance contact The Rahere Association at [email protected]
If you remain dissatisfied then you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at: –
Information Commissioner’s Office,
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire,
SK9 5AF
www.ico.org.uk
Please contact The Rahere Association using the contact details below if you have any queries.
The Rahere Association
St Bartholomew’s Hospital
West Smithfield
London WC1A 7BE
Email: [email protected]
Telephone: 020 3785 8600