About this notice
This privacy notice is to supplement the information the Council currently makes available about how the organisation collects and holds personal information. It relates specifically to help unpaid carers registered with Bury Council and/or receiving support from one of the Council's support providers understand how we use their personal information in the COVID-19 vaccination programme.
This is a voluntary programme and it remains the choice of the individual whether to have the vaccine.
In order for you to be invited to get a vaccine, we need to be able to share your details with the NHS.
Our core data protection obligations and commitments are set out in the Council's privacy notice.
This notice provides additional privacy information for those who wish to report incidences anti-social behaviour
How we use your data
Unpaid carers personal data is needed by the NHS so that they can contact you to offer a COVID-19 vaccination if you are not directly contacted by the Council or one of our support providers. It may also be used to monitor take-up of the vaccination across different priority cohort groups.
Categories of personal data
We will share some or all of the following information:
- Name
- Gender
- NHS number
- Date of birth
- Address
- Contact details
Legal basis for processing
The legal basis for processing your personal information comes from Article 6 and Article 9 of the UK General Data Protection Regulations (UK GDPR) and Data Protection Act 2018:
- UK GDPR Article 6 (1) (e) Public task: The processing is necessary for us to perform a task in the public interest or for our official functions and the task or function has a clear basis in law
- UK GDPR Article 9(2)(i) Public Health: Processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of healthcare
- Data Protection Act 2018, Sch 1, Part 1, (d): Public Health.
The basis in law is met by the Coronavirus (COVID-19): notice under regulation 3(4) of the Health Service (Control of Patient Information) Regulations 2002 - general (Gov.uk):
- Identifying and understanding information about patients or potential patients with or at risk of COVID-19.
- Providing services in relation to testing, diagnosis, self-isolation, fitness to work, treatment, medical and social interventions and recovery from COVID-19.
- Monitoring and managing the response to COVID-19 by health and social care bodies and government.
- Delivering services to patients, clinicians, the health services and adult social care services workforce and the public in connection with COVID-19, including the provision of health care services.
Who your information may be shared with (if applicable)
We will collect, hold and may need to share your information, but we will only do so where it is necessary or required by law. We will only share the minimum information for each circumstance.
We may sometimes need to share information with:
- NHS Bury CCG
- Other NHS agencies
- Carer support providers (for example; The Bury Carers Hub)
- Government agencies (for example; Department of Health)
How long will we keep your personal information?
The personal information will only be held as long as directed by the Department of Health and Social Care (DHSC).
See Coronavirus: notification to organisations to share information (Gov.uk).
If we need to use your information for research or reports, your information will be anonymised and any information taken from notes (handwritten or typed) during any consultation sessions will be securely destroyed. The information will continue to be used in a summarised and anonymised form in any research reports or papers that are published. The anonymised information in the papers may be of historic interest and may be held in public archives indefinitely.
Rights of individuals
Information about the following is accessible in our guide to exercising your rights:
- exercising your rights
- contacting our Data Protection Officer
- raising a concern with us, or
- making a complaint to the Information Commissioner.