Privacy Policy
Data Privacy Notice
Types of personal data
Personal data are any information relating to an identified or identifiable natural person. The types of data which we request and which are covered by the GDPR include:
- Name
- Birth date
- Contact Phone number
- Medical information
- Data concerning health
How we use your personal data
We hold and use your personal data where:
(a) processing is necessary for the purpose of preventative or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health of social care systems and services;
(b) processing is necessary for the purpose of carrying out obligations or rights of the data controller or the data subject in the field of employment law;
(c) processing data concerning health for the purpose of an insurance policy, health insurance and/or occupational pension; and/or
(d) processing is necessary for reasons of public interest in the area of public health.
We will always process your personal data in accordance with this Privacy Notice and all applicable data protection laws.
Security and retention of your personal data
We have appropriate technical and organisational measures in place to protect your personal data from unlawful or unauthorised destruction, loss, change, disclosure, acquisition or access. Personal data are held securely using a range of security measures [including password protection of Occupational Health reports].
We will retain your personal data on an ongoing basis pursuant to your consent.
You may withdraw your consent at any time by contacting us. We may retain your personal data where we are permitted or required to do so by law.
Your rights
You have certain rights under the GDPR which include the right to access, amend, update, restrict, delete or object to the use of, your personal data; to request information about the basis on which your personal data is processed; and/or to withdraw your consent to the processing of your personal data (where the use of your personal data is based on your consent).
You may request a copy of any personal data that you have provided to us and/or request we send this data to a third party.
If you would like to exercise any of these rights please contact:
The Director, Cpl HEalthcare, 2nd Floor, Investment House, 8-34 Percy Place, Dublin 4
OR
Your HR representative.
You will be required to submit your request in writing, on our request form, to us (Requests sent by verified email are also accepted).
You also have the right to lodge a complaint with the Irish Office of the Data Protection Commissioner at any time.
Sharing your personal data
We only collect and use your personal data when requested to do so by your employer and, in the normal course, we only share any data we collect about you with your employer. We may otherwise only share your data where required or permitted by law to do so, or with your consent.