This privacy policy will explain how the National Exercise Referral Scheme (NERS) uses the personal data we collect from you when you are referred to us from the NHS in partnership with Public Health Wales.
NERS is part of Cardiff Council, who is the Data Controller for the purposes of the data collected. All personal data is processed in accordance with the UK GDPR and Data Protection Act 2018.
What data do we collect?
NERS collects the following data:
- Personal identification information (Name, Address, Phone number, e-mail address, medical history, gender, ethnicity)
- Blood Pressure, Height, weight, waist circumference
This is collected for the purpose of carrying out an initial assessment, on going health checks and exercise programme for the duration of the scheme, this information is then collated and fed back to Public Health Wales
Data Protection law describes the legal basis for our processing your data as necessary for the performance of: (e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.
Legislation: Social Services and Well-being (Wales) Act 2014
NERS collect the following special category data:
- Physical Health
- Ethnic Origin
NERS process special category under Article 9 (2): (g) Reasons of substantial public interest (with a basis in law) under Schedule 1 condition 6: Statutory and government purposes.
How do we collect your data?
You directly provide NERS with most of the data when you visit your GP or have your hospital visit. We collect data and process data when you attend for your initial consultation.
NERS may also receive your data indirectly from the following sources:
- NHS
How will we use your data?
NERS collects your data so that we can:
- Carry out your initial consultation and
- Process your Information and manage your details
- Report recorded Information to Public Health Wales
How do we store your data?
NERS securely stores your data within a secure database, Theseus which is controlled by PHW.
NERS will keep your Personal data for 7 years. Once this time period has expired, we will delete your data.
What are your data protection rights?
NERS would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access
You have the right to request NERS for copies of your personal data.
The right to rectification
You have the right to request that NERS correct any information you believe is inaccurate. You also have the right to request NERS to complete the information you believe is incomplete.
The right to erasure
You have the right to request that NERS erase your personal data, under certain conditions.
The right to restrict processing
You have the right to request that NERS restrict the processing of your personal data, under certain conditions.
The right to object to processing
You have the right to object to NERS processing of your personal data, under certain conditions.
The right to data portability
You have the right to request that NERS transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: [email protected]
Or write to us:
Data Protection Officer
Information Governance Team
County Hall
Atlantic Wharf
Cardiff
CF10 4UW
Privacy policies of other websites
Changes to our privacy policy
Our Company keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 27 June 2024.
How to contact us
If you have any questions about NERS privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us via email at [email protected] or by post:
Data Protection Officer
Information Governance Team
County Hall
Atlantic Wharf
Cardiff
CF10 4UW
How to contact the appropriate authority
Should you wish to report a complaint or if you feel that NERS has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner's Office via their website or by calling 0303 123 1113.
