"Leeds and York Partnership NHS Foundation Trust (“the Trust”) are the accountable Data Controller for data relating to your application for the course you have booked, and marketing of further courses provided by the centre and its partners. Contact addresses are as follows:-
Head Office 2150 Thorpe Park, Century Way, Leeds, LS15 8ZB
Data Protection Officer St Marys House, North Wing, St Martins View, Leeds, LS7 3LA
The Andrew Sims Centre team can be contacted at the Trust Head Office address.
The Andrew Sims Centre team will collect, store and process information relating to your application for our courses, which will be used by the Trust to manage your booking. We will also collect healthcare data for accessibility purposes. With your consent, we will retain your information on our mailing list and / or share information with our partner organisations to keep you informed about future events. The processing of personal data relating to your booking has the following legal basis:- The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract* *General Data Protection Regulation, Article 6, section 1-b
The processing of personal data relating to marketing has the following legal basis:- The data subject has given consent to the processing of his or her personal data for one or more specific purposes* *General Data Protection Regulation, Article 6, section 1-a
The processing of healthcare data for accessibility purposes has the following legal basis:- The data subject has given explicit consent to the processing of those personal data for one or more specified purposes* *General Data Protection Regulation, Article 9, section 2-a
Data processed will include your personal information to identify you, and your contact details for communication purposes. We will keep your information confidential, unless required to disclose by law.
The Trust does not process your personal data outside the European Economic Area.
The Trust will retain and subsequently securely dispose of records in accordance with the requirements of the Records Management Code of Practice for Health & Social Care.
You have the following rights in relation to the processing of information relating to your information:-
You have a right to request a copy of any and all the records the Trust holds that are about you, which we will provide to you within 30 days of receiving your request.
We will correct any factual errors within your records.
We will delete records retained for marketing if you no longer wish to receive this.
You have a statutory right to raise a complaint with the Information Commissioner’s Office if you feel we have failed to honour your rights under Data Protection legislation.