CHRYSTAL MEDICAL PRIVACY NOTICE AUGUST 2019

This is a statement of our privacy practices in relation to any personal data you provide to us either on this website or in any other way. We are Chrystal Consulting Limited of 500 Styal Road Manchester M22 5HQ and we are the Data Controller. All your questions about your personal data and what we do with it are to be directed to us using any of the methods at the end of this notice.

We collect your name, work address, work title, work mobile/direct line number, work email. These details will go into our contacts database. We will also have emails with you and there will be quotes, reports and other documents related to your workplace which are addressed to you from time to time. Emails are in our email system and documents are kept in our servers in the UK.

We use your personal data for the purposes of:

• Communicating with you and your colleagues about new services requested

• Communicating with you about problems or issues with existing services 

• Meeting with you as part of our service management obligations 

• Telling you about any work related developments or additional or enhanced services we identify as potentially of benefit to your employer or services

• Liaising with subcontractors so we and they can provide the contracted or requested new services efficiently

We share your personal data with the following parties:

• Your employers and colleagues

• Our subcontractors 

• Any party who we legally are obliged to release such personal data to (such as Police, Medical Councils, Employers (including line managers), Authorities)

If you call our Hotline you are talking to an outside company which we contract to provide that service. We have no control over the personal data you give to them nor what they may do with it. Likewise, we have no control over personal data you provide to our subcontractorswhen you deal with them.

We delete your personal data from our systems when we no longer need it, which usually will be six years after we last deal with you in any capacity or from the end of the relevant service (if later) unless we need it for any legal or regulatory purpose, in which case we will keep it until that purpose is fulfilled.

We take commercially reasonable steps to protect your personal data. We require sub-contractors to comply with the data protection legislation. Our IT service providers also are required to comply with the data protection legislation.

Right to access – you can ask us whether we’re processing your personal data, including where and for what purpose. You can also request an electronic copy of your personal data free of charge

Right to restrict processing – in certain circumstances, you can ask us to restrict our use of your personal data

Right to rectification – you can already ask us to correct inaccurate personal data we hold about you

Right to erasure (right to be forgotten) – in certain circumstances, you can ask us to erase your personal data

Right to data portability – you can ask us to provide you with a copy of your personal data in a commonly used electronic format so that you can transfer it to other businesses

Right to lodge a complaint – you can lodge a complaint with your local data protection authority -visit the Information Commissioner’s Office website – it’s an independent authority that upholds information rights in the public interest

If you have any questions about our privacy notice, or you would like more information on your rights, or want to exercise them, please contact us through our Data Protection Officer by writing to: The Data Protection Officer Chrystal Consulting Limited 500 Styal Road Manchester M22 5HQ. Or you can send an email to ian@chrystyalconsulting.co.uk or call us on 0161 493 9770.

You can ask us for a copy of this privacy notice using the contact details set out above. We may change or update this privacy notice from time to time. If changes to this privacy notice will have a major effect on what we do with your personal data or on you personally, we will give you enough notice to allow you to exercise your rights (for example, to object to the processing). 

 [ ] August 2019