Purposes for which we use your personal data/Why does Bushypark need my information
Processing personal data is necessary so that we can provide effective addiction treatment services, tailored to the needs of each individual client. When we process your information, we do so to assist with assessment, and monitor progress as part of the treatment programme.
We also maintain records to meet safeguarding requirements for children, young people and adults at risk; to supervise and audit our processes; to gather statistical information for research and future service provision; and to implement robust policies and practice within Bushypark. These tasks are necessary so that we can fulfil our wider legal obligations in terms of corporate governance, company and charity law.
Please note that information which has been gathered for statistical purposes is always anonymised.
What is the legal basis for processing my personal data?
Bushypark relies upon your explicit consent as the legal basis to process your personal data and as a condition of any processing activities associated with special category data. This consent is obtained in writing at the assessment stage and at admission before treatment begins.
We also rely upon our legitimate interests as a charitable organisation, compliance with our legal obligations and in extreme scenarios, to safeguard and protect an individual’s vital interests.
Family Members/Next of Kin/Support Persons
If you are a family member or next of kin of the service user, the service user may have provided us with certain details about you such as name, address, relationship to service user, contact details in the case of an emergency or where there are safety concerns for the service user or we require you to collect the client on discharge.
Family members/support persons will also be required to be part of the assessment and treatment process.
Who has access to my records within Bushypark
Your data is treated in the strictest confidence.
We have stringent protocols in place regarding the handling and storage of personal data.
- Access to client records is controlled and limited to authorised personnel only, (typically the Clinical team and the General Manager)
- Our administration, catering and finance personnel involved in the management and administration of your contract with us will have access to the information they require to carry out their roles
- Other health and/or social care professionals and emergency services where appropriate
Storage and Security
Bushypark will take all appropriate measures to ensure that any personal data about you or any family members or next of kin is held confidentially and securely in Bushypark files and systems.
All reasonable security measures are taken to prevent unauthorised access or disclosure including a general prohibition against removing client records and case notes from Bushypark.All of our Counsellors undergo routine supervision; however, the Supervisor does not have access to any client records.
How long does Bushypark store my information?
Bushypark generally shall retain personal data only for the necessary period to comply with applicable legal requirements or as advisable in light of an applicable statute of limitations period.
Client Records are retained for 7 years unless a safeguarding issue has arisen or there is a risk of or ongoing litigation. Client Records are stored in date order for efficient and secure disposal.
Other records – finance etc
Promptly after the applicable storage period has ended, your data shall be:
- Securely deleted and destroyed
- Anonymised or
- Transferred to storage (unless this is prohibited by law or an applicable records retention schedule).
Does Bushypark share my information with outside third parties?
We do not share your personal data with any third parties unless one of the following conditions apply:
(i) you have provided your explicit consent
(ii) a disclosure is required by law to a third party such as a Court or Tribunal, a government department or agency or an Garda Síochána, for example: in pursuit of justice in the prosecution of a criminal offence
(iii) intervention is necessary for matters of life or death or for the prevention of harm to you or any individual or child
(iv) when it is necessary to report an allegation, concern or suspicion of abuse
In most instances, a request of this nature will not involve direct access to your case file and will instead seek confirmation of your attendance at treatment.
Is my personal data transferred outside of the European Economic Area?
We do not transfer any personal data information outside of the European Economic Area (“EEA”). Anonymised research material may be available to third level institutions outside the EEA including, but not limited to, the USA or Canada.
What legal rights do I have in relation to the personal data held about me by Bushypark
Access – You have the right to request a copy of the personal data we hold about you using a Subject Access Request Form which you can access from Bushypark staff or Clarecare Data Privacy Officer (details below). We will require written verification of your request and proof of identity. A request made by a third party acting on your behalf, such as your solicitor, must be accompanied by a signed form of consent before any disclosure will be made.
The information furnished may be redacted if it would interfere with the rights of another individual including, but not limited to your spouse, child or other family member.
There is no charge to access this information and a response will be provided within one calendar month.
Rectification or erasure – If any personal data held by Bushypark is incorrect, incomplete or not processed in compliance with applicable law or this policy, you have the right to have your personal data rectified, deleted or blocked (as appropriate)
Object to processing – You have the right to object to the processing of your personal data on the basis of compelling grounds related to your particular situation
Data Portability – You have the right to request a copy of your personal data we hold about you in a commonly uses and machine-readable format. We can provide your data either to you or to such other third party as you specify in your request.
Consent – If you have provided us with consent to process your data, you can withdraw that consent at any time by informing your counsellor.
Keeping your data Accurate, Complete and up to date
Please advise us as soon as possible regarding any changes to your data.
Who do I contact if I have questions about how Bushypark handles my personal data?
If you require any further information or have any queries on this privacy notice or in relation to data privacy in Bushypark generally please contact:
Bushypark Manager or
Clarecare Data Privacy Officer, Clarecare, Harmony Row, Ennis, Co. Clare, V95 F8CN
Tel: 065 689 4200 Email: firstname.lastname@example.org
Alternatively, further information can be found online via the Office of the Data Protection Commission website www.dataprotection.ie
In Bushypark we are committed to finding a fair and lawful resolution to any problems or complaints which arise in the course of data processing. Please report any concerns you have to the Data Privacy Officer using the above contact details.
The Data Privacy Officer will liaise with relevant staff members to deal with the complaint.
If a complaint cannot be resolved by Clarecare or a service user feels that his/her concerns have not been resolved to his/her satisfaction, they have the right to complain to the Data Protection Commission.