Who is collecting the information – i.e. identify the data controller? Our Data Controller is Dr Martin Ezan.
What personal information do we hold? Personal information including personal identifiers (e.g. name, date of birth etc.) as well as medical information that has been forwarded to us is held.
How is the information collected by us? The information is collected by it being sent to us from either the individual’s Company, GP, OH Provider and Specialist etc.
Why is it collected, for what purpose? The reason it is collected is to undertake Occupational Health/Ill Health Retirement/Injury on Duty Services to be provided. The purpose is to undertake the duties appropriately.
How will it be used by us? The information will be used for Occupational Health/Ill Health Retirement/Injury on Duty deliberations.
Who will it be shared with? The information will remain within Platinum Occupational Health Ltd, dictations will be typed by authorised staff who have a confidential agreement with Platinum Occupational Health Ltd, and the outcome report/certificate will be shared with the commissioner of services.
What will be the potential effect of this on the individuals concerned? The potential effect of this on the individuals concerned is to improve their health/suitability for work/rehabilitation back to work/provision of access to sick pay/access to pension/access to injury on duty payments etc.
Is the intended use likely to cause individuals to object or complain? The intended use is unlikely to cause individuals to object or complain as it is ultimately for their benefit, either physically, financially or psychologically.
What are we doing to ensure the security of personal data? Access to personal data is limited to the Data Controller. Personal data is stored at Platinum Occupational Health Ltd and only the Data Controller has access. Electronic data is password protected and encrypted with only Data Controller visibility.
Information about rights of access to their data Rights of access to the data is as per the GDPR requirements.
