Covid-19 Privacy Notice Addendum – Members & Volunteers
This privacy notice addendum is designed to advise you about how we may seek to collect and hold additional information about you in relation to the unprecedented challenges we are all facing during the Coronavirus pandemic (Covid-19).
We may seek to collect and process your personal data in response to the recent outbreak of Coronavirus, which is above and beyond what would ordinarily be collected from you, to ensure the safety and well-being of our staff, members and the general public.
Such information will be limited to what is proportionate and necessary, taking into account of the latest guidance issued by the Government and health professionals, in order to manage and contain the virus.
What personal data is being collected?
Personal data, ie name and date attended class, is being collected by register for NHS Track & Trace purposes.
What is our lawful basis for processing your personal data?
The General Data Protection Regulation requires specific conditions to be met to ensure that the processing of personal data is lawful. These relevant conditions are below:
Article 6(1)(d) – is necessary in order to protect the vital interests of the data subject or another natural (living) person.
Recital 46 adds that “some processing may serve both important grounds of public interest and the vital interests of the data subject as for instance when processing is necessary for humanitarian purposes, including for monitoring epidemics and their spread”.
Article 6(1)(e) – is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
The processing of special categories of personal data, which includes data concerning a person’s health, are prohibited unless specific further conditions can be met. These further relevant conditions are below:
Article 9 (2) (c) – processing is necessary to protect the vital interests of the data subject or of another natural (living) person where the data subject is physically or legally incapable of giving consent
Article 9 (2) (g) – processing is necessary for reasons of substantial public interest…
Article 9 (2) (h) - processing is necessary for the purposes of preventative or occupational medicine, where is it necessary for the provision of social care, the provision of health care or treatment or for the management of a health or social care system
Article 9 (2) (i) – processing is necessary for reasons of public interest in the area of public health, such as protecting against cross-border threats to health or ensuring high standards of quality and safety of health care
Am I required to provide my personal data under a statutory requirement, or am I obliged to provide it?
Whilst the provision of data cannot be mandated, you are strongly advised that it is in the best interests of all to provide this information to us so we are able to take relevant steps to keep you and others safe.
The information will be managed in a confidential manner. All information will be held securely and processed on a ‘need to know’ basis by only a limited number of people. If there is a need to disclose outside of this, the minimal amount of personal data will be used.
How long will my personal data be retained?
We will only keep your information for as long as it is necessary, taking into account of Government advice and the on-going risk presented by Coronavirus.
Health information provided by you in relation to this outbreak of Coronavirus will not be used for any other purpose. When the information is no longer needed for this purpose, it will be securely deleted.
Your rights
If you would like to know more about your information rights or how to exercise them, please view our full GDPR privacy notice.