GDPR

General Information

Homerton Healthcare NHS Foundation Trust is committed to protecting your privacy when you use our services. This privacy notice explains:

• who we are, how we use your information and who our Data Protection Officer is
• how do we lawfully use your data
• how your personal information is used 
• how long we store your personal data 
• what are your rights under data protection laws.

Who we are?
Homerton Healthcare NHS Foundation Trust provides general and specialist hospital services and community health services in Hackney and the City. Last year the hospital admitted 63,000 patients, saw over 236,000 outpatients and delivered over 5,500 babies. Every day the A&E team saw an average of 325 patients and became the first such team in the country to be rated ‘outstanding’ by the Care Quality Commission (CQC).

We are also extremely proud of the fact that Homerton Hospital has attained the highest possible rating of "Outstanding" from the Care Quality Commission (CQC). This includes an "Outstanding" rating for our Urgent and Emergency Services.

Based in the London Borough of Hackney, we provide general health services at hospital and in the community with staff working out of 75 different sites. The hospital has almost 500 beds spread across 11 wards, a nine-bed intensive care unit and maternity, paediatric and neonatal wards.

Our registration with the Information Commissioner
We are registered with the Information Commissioner’s Office to process personal and special categories of data under the Data Protection Act 2018. Our registration number is Z5917319.

Our Data Protection Officer
Our Data Protection Officer makes sure we respect your rights and process your personal information according to the law. If you have any concerns or questions about how we look after your personal information please contact the Data Protection Officer at huh-tr.ig@nhs.net

Information for staff
By staff we mean applicants, employees, former employees, agency staff, apprentices, volunteers, trainees, secondees and contractors. 

How do we lawfully use your data?
We process and share your information under Article 6 1(b) of the General Data Protection Regulation (processing is necessary for the performance of a contract), Article 6 1(a) (consent has been given for the processing of personal data) – this mostly applies to the sensitive categories of information you give us when you apply for a job as this ensures we treat you fairly and equitably. We will also seek your consent if we want to refer you to occupational health or similar external agencies.

How your personal information is used?
To carry out our activities and obligations as an employer we process your personal information where required in relation to:

• name, home address, telephone, personal email address, date of birth, national insurance number, employee identification number and marital status, and any other information necessary for our business purposes, which is voluntarily disclosed in the course of an employee's application for and employment with us
• special categories of personal data: for example, data about race, ethnic origin, religious or philosophical beliefs, trade union membership, health, and sexual orientation (collected only where required by law and used and disclosed only to fulfil legal requirements) 
• absence information, e.g. annual leave, sickness absence, study leave, maternity leave, paternity leave, occupational health clearance information 
• qualification and training information 
• statutory and voluntary registration data 

When you are no longer our employee, we may continue to share your information as described in this notice as long as this is fair and lawful.

We may be required by law to share information about you. This includes preventing and detecting fraud, disclosure under a court order, to HM Revenue and Customs, Pensions Agencies, with the police for the prevention and detection of serious crime, or where there is an overriding public interest to prevent abuse or serious harm to others. 

We also share information through Electronic Staff Records (ESR) and with our payroll provider to enable us to pay you. 

How long will we store your information?
We keep your personal information according to the NHSX records management code of practice 2020. We do not store or routinely send your personal data overseas. 

What formats do we use to keep your information safe?
The records we hold about you centrally are mostly electronic. Records held locally by your manager may be either in electronic or paper format. 

How can you access your personal information?
You have a right under Data Protection legislation to request a copy of the information we hold about you, or to ask to see it. Please send your request to huh-tr.ig@nhs.net
You will need to give us adequate information about you to verify your identity (name, address, date of birth, NHS number and what information you are requesting). We may ask you to provide documents to confirm your identity. 
There is no charge for this. We will respond to you within one month.

If your personal information changes, please tell the team where you are receiving your care so we can update your records.

If you think the information we hold about you is inaccurate please state this clearly in writing to huh-tr.ig@nhs.net. We can change factual information if it is incorrect. We are not able to change clinical opinions. If you think these are wrong please set out why you think this and we will add it to your clinical record to make this clear.

Objections and complaints
If you have any concerns or queries about how your information is managed, you can contact our Data Protection Officer at huh-tr.ig@nhs.net or call 02076 834102. The Data Protection Officer can also provide you advice about your rights in respect of the data we hold about you.

If you are still concerned you have the right to complain to the Information Commissioner:
Call their helpline on 0303 123 1113 (local rate – calls to this number cost the same as calls to 01 or 02 numbers) or see the ICO website at https://ico.org.uk/