Privacy Statement for Tallaght University Hospital.
Tallaght University Hospital respects your right to privacy. The Hospitals Patient Privacy Statement sets out how we collect, use, manage and store your personal information. Furthermore, it will help you to understand what personal data may be collected on this website, why it is collected, and what is done with it.
All information collected and processed through this website complies with our obligations under the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
Tallaght University Hospital endeavours to protect and cherish the privacy rights of all staff, patients, and visitors and will take all necessary steps to protect the fundamental privacy rights and freedoms of individuals. This Privacy Statement describes options available to you, our end-users and visitors regarding the Hospital’s use of your personal data. It also outlines your rights regarding access to, correction and deletion of personal data held by the Hospital.
You may encounter and access links to third-party/other websites on our website. These external websites should have their own privacy notices. Links to other websites do not constitute an endorsement of that website by Tallaght University Hospital. We cannot accept any responsibility or liability for their website content, links and policies as we have no control over them.
The EU General Data Protection Regulation (GDPR) came into force on the 25th of May 2018. Under the General Data Protection Regulation (EU) 2016/679 Tallaght University Hospital is a “Controller” in respect to personal data that you provide to us. For information on GDPR, you can visit the Data Protection Commissioner website here.
If you wish to view our full Patient Privacy Statement please click here
You can access most of Tallaght University Hospital website without giving your personal data. You will need to give some of your personal data when you request services on our website.
We are committed to protecting your privacy and take the security of your information very seriously. We aim to be clear and transparent about the information we collect about you and how we will use that information.
This statement covers:
- The role of the data controller and the data protection officer (DPO)
- What personal data we collect
- What we use your personal data for
- How long will we hold onto your personal data
- Who will have access to your personal data
- Cookies on the TUH website
- The transfer of personal data
- Your rights
- How to make a complaint
What personal data we collect
Personal data is any information relating to you that allows us to identify you. For example, your name, address, contact phone number and email address. If you want to access TUH services, we will need to collect and process your personal data.
Examples of TUH services are:
- Booking a blood test
- Making a complaint
- Attending an online video consultation
- Completing a patient survey programme
We may collect and use:
- Your name and address
- Your contact details
- Your date of birth and gender
- Your IP address
- Information about a complaint you made
- Information about your use of the website
We will handle any data you share with us in line with the General Data Protection Regulation (GDPR). Generally, we process your personal data as the provider of Health Services, carried out in the public interest. This applies to both general personal data and any special categories of personal data. Where other legal bases are used, you will be told about them when we request your personal data.
What we use your personal data for
Any personal data we collect from you on this website will only be used to:
- Give you a better user experience
- Keep our website secure
- Analyse visitor traffic and how people use our website
- Send you reminders about upcoming appointments
- Process a complaint
We will not use the data we collect about you for any other purposes without asking for your consent.
How long will we hold onto your personal data
We will retain your information for as long as necessary to provide you with services, and to comply with our legal and regulatory obligations. The hospital follows the HSE’s Record Retention Policy. When the Tallaght University Hospital no longer needs your personal data, we securely delete or destroy it.
Who will have access to your personal data
Only Tallaght University Hospital staff, agents and suppliers who are directly involved with services you request on the website will have access to your personal data.
All Tallaght University Hospital staff, agents and suppliers who have access to personal data are bound to Tallaght University Hospital by confidentiality and data protection agreements. They must keep your personal data secure and to use it only for the purposes specified by Tallaght University Hospital.
Cookies
Our website uses cookies as per our Cookie Statement, these includes cookies to:
Make our website work and keep it secure.
Ensure that only humans, not bots, complete forms, these are called ‘strictly necessary cookies’.
Monitor how the website performs for users (for example, the number of visits each webpage gets and how long people stay on the page (these are called ‘analytical cookies’))
Remember the choices you have made and to collect information about how you use the TUH website (these are called ‘functional cookies’).
Allow videos to play on this website. These cookies can also collect data about how you browse the internet. Google uses this data to display targeted advertising to you across the internet.
We automatically set anonymous analytical cookies. We do not need your consent for these but you can opt-out.
All information we collect for cookies is anonymous. This means that you are not identified and we do not know who you are. If you give us permission to collect more information, we only do so with your consent. There are a small number of situations where we collect the information in our legitimate interests for website security purposes. Read our cookies statement to find out more about cookies and how we use them
Transfer of data
We use analytics tools to collect information about your use of this website. Part of this information includes your IP address, which is considered personal data. We use anonymised IP addresses for this website. No individual can be identified by their IP address. We do not transfer any other personal data about you outside the European Economic Area (EEA). If in the future, we need to transfer your personal data outside the EEA, we will comply with Chapter 5 of the General Data Protection Regulation (GDPR).
Your rights
Under certain circumstances, by law you have the:
- Right of access – you can request a copy of the information that we hold about you
- Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete
- Right to be forgotten – you can ask for the data we hold about you to be erased from our records
- Right to restriction of processing – where certain conditions apply
- Right of portability – where certain conditions apply, you have the right to have the data we hold about you transferred to another organisation
- Right to object – you can object to certain types of processing such as direct marketing
- Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling
- Right to review - in the event that we refuse your request under rights of access, we will tell you the reason
- Right to withdraw your consent – where you have consented to receiving emails or newsletters you may withdraw your consent at any time
If you want to exercise any of these rights:
Submit a request to the Release of Information Department, contact the DPO office:
DPO contact details: DPO@tuh.ie (01) 4143110. The DPO oversees TUH compliance with data protection.
When you send a request, we will need to confirm your identity. Once your identity has been confirmed, we will give you your information free of charge. We may charge a fee if we believe your request is clearly unfounded, excessive or repetitive.
Making a complaint
If you are not satisfied with how Tallaght University Hospital is processing your personal data, contact Tallaght University Hospital Data Protection Officer at DPO@tuh.ie.
If we are unable to resolve your complaint, you have the right to lodge a complaint directly with our supervisory authority, the Data Protection Commission.
