Why we collect Data
Under the GDPR Vitale has a legitimate interest in the client’s information regarding their health and weight.
Your personal details are used for the following reasons.
Telephone number allow us to send text reminders of appointments and communicate with you outside of appointment times.
E-mail addresses are used for sending you information from group and individual sessions, receipts, and your individual programme when required. Emails are also used to update you on services or information.
Weight records are for ongoing analysis by you and us and are stored in a locked cabinet
We will only ask for and keep information that is necessary. We will keep it as accurate and up to date as possible. We will explain the need for any information we ask for if you are unsure why it is needed. We ask you to inform us about any relevant changes that we should know about including personal contact information.
Who has access to your information?
Your information will not be shared outside of Vitale unless you have given consent
How is your information stored?
We commit to retaining your information securely. There are robust security measures on the computer to prevent and minimise the risk of information theft. Our computers are password protected. Hard copy records of weight, BMI and other health stats are kept in a locked filing cabinet
Your right to amend, restrict and object to the information held.
Under the GDPR all individuals have the right to have incorrect information that is held about them amended. If this was to arise within the notes held by Vitale the notes would become restricted, i.e not used until the issue was resolved
You have the right to have the information we hold restricted;
If you contest the accuracy,
You object to the information held.
Your right of access to your health information
You have the right of access to all the personal information held about you by this practice. You can make a formal written access request to Vitale and the matter can be dealt with formally. All requests will be answered in the time frame of one month unless you are notified of a difference to this time scale. There will be no fee for information provided.
We hope this policy has explained any issues that might arise. In the unlikely event that this safety was compromised you will be notified immediately as will the Data Protection Commissionerv