Introduction

The Naas General Hospital (NGH) owns and operates this website.

Health Service Executive (HSE) collects and uses data from its website (www.hse.ie).

NGH is committed to protecting your privacy and takes the security of your information very seriously. We aim to be clear and transparent about the information that is collected and how that information will be used.

This policy will set out the following:

• The data controller and the data protection officer (DPO)
• What personal data we Collect
• What we use your personal data for
• How long will we hold onto your personal data
• Who will have access to your personal data
• Cookies on the NGH site
• Transfer of data and International data transfers
• Your Rights
• How to make a complaint

The Data Controller

The HSE is the data controller for all personal data that is collected and used by www.hse.ie. A Data Controller is the legal entity which determines how and why personal data is collected and used.

The HSE’s headquarters is located at:

Dr. Steevens Hospital

Steevens Lane

Dublin 8

Ireland

The data protection officer (DPO)

The HSE has appointed a Data Protection Officer to oversee the HSE’s compliance with its data protection obligations. The HSE Data Protection Officer (DPO) can be contacted directly, here:

Email address: dpo@hse.ie

Address: HSE National Data Protection Office, Dr Steevens Hospital, Steevens Lane, Dublin 8 D08 W2A8

What personal data we collect

Personal data means any information relating to you which allows the HSE or NGH to identify you, such as your name & address, contact phone numbers and email address.

At present, all areas of the www.naashospital.ie website can be accessed by you without the need for you to provide any of your personal data. Some areas of the HSE website, may require you to submit your name, email address and other contact details.

The HSE (and in some cases, NGH) may collect and use the following personal data about you:

• your name and address
• your contact details
• your individual health identifier (IHI)
• your personal public service (PPS) number
• your date of birth, gender, mother's full birth name
• your IP address
• details you give as part of signing up for a programme or newsletter
• information about a complaint you made
• information about your use of the website
• information about your location - if you choose to, this may be shared with Google and you can find more information in the Google Terms of Use and Privacy Policy

Please refer to the HSE’s Privacy Statement for the most up-to-date information on all aspects of coverage: https://www2.hse.ie/privacy-statement/

What we use your Personal Data for

Any personal data we collect from you on this website will only be used by the NGH for the following purposes:

• To provide you with a better customer experience
• Keeping the website secure
• To process a complaint
• Analysis of visitor traffic and usage of our website
• To gain your feedback on this website

NGH will not use the data we collect about you on the www.naashospital.ie website for any other purposes without first contacting you and seeking your consent.

NGH may use anonymised data for the purposes of analysing, planning and improving services. We may track activity on the website such as where visitors stop using the website.

We collect website analytics data that is anonymised and aggregated. Please refer to the Cookie Policy.

How long will we hold onto your Personal Data

The NGH will only retain your personal data for as long as it is necessary to fulfil the purpose it is being processed for. All personal data collected is retained in accordance with the HSE Record Retention Policy.

When NGH no longer needs your personal data, it is securely deleted or destroyed.

Who will have access to your Personal Data

As noted, at present, all areas of the www.naashospital.ie website can be accessed by you without the need for you to provide any of your personal data. Some areas of the HSE website, may require you provide personal data.

Please refer to the HSE’s Privacy Statement (https://www2.hse.ie/privacy-statement/).

Cookies

This website uses cookies to enable NGH to improve its service to you. Cookies are small text files which are downloaded to your computer device when you visit a website. Your web browser (for example, Internet Explorer, Mozilla, Google Chrome etc.) then sends these cookies back to website on each subsequent visit so that they can recognise you and remember things like your preferences.

The NGH cookie policy is published here. Control your cookie preference for NGH using the "personalise" option within the cookie management pop-up panel .

The www.hse.ie cookie policy is published here.

Transfer of data

We use analytics tools to collect information about your use of this website. Part of this information includes your IP address, which is considered personal data. We use anonymised IP addresses for this website. No individual can be identified by their IP address.

We do not transfer any other personal data about you outside the European Economic Area (EEA). If in the future, we need to transfer your personal data outside the EEA, we will comply with Chapter 5 of the General Data Protection Regulation (GDPR).

What are your rights

Under certain circumstances, by law you have the right to

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply
• Right of portability – where certain conditions apply, you have the right to have the data we hold about you transferred to another organisation.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
• Right to review: in the event that the NGH refuses your request under rights of access, we will provide you with a reason as to why.
• Withdraw your consent – where you have consented to receiving emails or newsletters you may withdraw your consent at any time

If you wish to exercise any of these rights:

- Submit a request at https://www.hse.ie/eng/gdpr/data-requests/

- Contact a DPO office

When submitting a request, NGH may need information from you to confirm your identity. Once your identity has been confirmed, NGH will supply you with your information free of charge, however, we may charge a reasonable fee if believe your request is clearly unfounded, excessive or repetitive.

Making a Complaint

If you are not satisfied with how NGH is processing your personal data, contact the HSE’s Data Protection Officer at dpo@hse.ie.

If we are unable to resolve your complaint, you have the right to lodge a complaint directly with our supervisory authority, the Data Protection Commission.