Privacy notice for Sensium Monitoring System App Users

1. Introduction

Sensium Healthcare Limited (TSC Connected Care) is committed to protecting the privacy and security of your personal information.  We only collect and use personal data in line with the General Data Protection Regulation, the Data Protection Act and any other applicable laws and regulations.

This Privacy Notice informs you (the ‘data subject’) about our processing activities: the data we hold, why we use it, how long we will retain it for, and other relevant information.

Any questions and requests regarding personal data may be sent to our Data Administrator by sending an email to:  alison.burdett@sensium.co.uk or by phone: 01235 438955‬, or by post: 115 Olympic Avenue, Milton Park, Milton, Abingdon, Oxfordshire, England, OX14 4SA . 

2. Applicability

This notice is issued by Sensium Healthcare Limited (the ‘data controller’); it applies only to Sensium Monitoring System App Users. This notice does not form part of any contract between you and Sensium Healthcare Limited.

3. DATA PROTECTION PRINCIPLES

We ensure any personal data we hold about you is:

• Used lawfully, fairly and in a transparent way

• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes

• Relevant to the purposes we have told you about and limited only to those purposes

• Accurate and kept up to date

• Kept only as long as necessary for the purposes we have told you about

• Kept securely

4. THE KIND OF INFORMATION WE HOLD ABOUT YOU

Personal data means any information about an individual from which that person can be identified.

We collect, store, and use the following categories of personal information about you:

• Authentication questions and / or answers

• IP Address of the device on which the application is installed

• Usernames and passwords.

5. WHAT LEGAL BASES DO WE RELY ON?

We use the types of personal data above on the following legal bases:

• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

6. WHY DO WE PROCESS THIS INFORMATION?

The situations in which we will process your personal information are listed below:

CONTRACT - To perform our duties under a contract 

IT – To restrict network access and to monitor and manage the use of systems

SERVICE DELIVERY - To provide our services to clients

Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information.

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

7. WHERE DID WE COLLECT THIS DATA FROM?

We collect the personal data above from you and from our client (i.e. the Hospital Trust that you are employed or contracted to work for).

8. ARE YOU UNDER ANY OBLIGATION TO PROVIDE THE PERSONAL DATA?

You are under no obligation to provide us with your personal data, however, if you elect not to do so you will not be able to use the Sensium Monitoring System Application. 

9. WHO DO WE SHARE THIS INFORMATION WITH?

We will share the personal data above with our client (i.e. the Hospital Trust that you are employed or contracted to work for).

10. TRANSFERS TO OTHER COUNTRIES OR TO INTERNATIONAL ORGANISATIONS

We do not transfer your personal information outside the UK/EU.  If this changes, we will ensure that any recipient countries provide a similar degree of protection to those under UK/EU law.

11. WILL THE INFORMATION BE USED FOR AUTOMATED DECISION MAKING OR PROFILING? 

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.

12. HOW LONG DO WE KEEP THIS INFORMATION? 

We will retain the personal data above for only so long as is necessary to validate your session (which will not normally exceed 1 hour).

13. RIGHTS OF ACCESS, CORRECTION, ERASURE, AND RESTRICTION

Under certain circumstances, by law you have the right to:

• Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.

• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).

• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.

• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.

• Request the transfer of your personal information to another party.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us in writing.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

14. COMPLAINTS

If you have any concerns or complaints about data protection you should first raise this with us either by email to: alison.burdett@sensium.co.uk or by phone: 01235 438955‬, or by post: 115 Olympic Avenue, Milton Park, Milton, Abingdon, Oxfordshire, England, OX14 4SA .

If you have a complaint or concern that has not been remedied internally, you may choose to raise this with the Information Commissioner’s Officer (ICO).  Visit https://ico.org.uk for more information.