Website Privacy Policy
NHS 111 Wales is committed to protecting the privacy of all individuals using this website.
The following privacy policy provides you with information about how We collect, process and share your personal information through your use of http://111.wales.nhs.uk. It applies solely to this website.
Data Controller
The Welsh Ambulance Services University NHS Trust is the Data Controller and responsible for your personal data (collectively referred to as “We”, “Us”, or “Our” in this privacy policy).
If you have any questions about this privacy policy, including any requests to exercise your legal rights detailed below, please contact us using the information set out in the contact details section.
The types of personal data we collect about you
Personal data means any information about an individual from which that person can be identified.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
Identity Data includes first name, last name, any previous names, or similar identifier, marital status, title, date of birth and gender.
Contact Data includes home address, email address and telephone numbers.
Technical Data includes anonymised internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
Usage Data includes information about how you may interact with and use our website. Information collected includes referring / exit web pages, click patterns, most / least viewed web pages, session duration, number of visitors, etc.
When you voluntarily submit data on this website (this includes submission of feedback forms or questionnaires), the information is recorded to continually evaluate and improve the website.
We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' Usage Data to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.
How your personal data is collected
We use different methods to collect data from and about you including through:
- Your interactions with us. You may give us your personal data by filling in online forms or using the website functionality such as entering your postcode to find local services.
- Automated technologies or interactions. As you interact with our website, we will automatically collect Usage Data and Technical Data about your devices, browsing actions and patterns. We collect this data by using cookies, server logs and other similar technologies such as pixels and tags. These cookies and similar technologies record your visit to our website, the pages you have visited, the links you have followed, and capture how visitors move around our website when they are using it. We will use this information to measure the effectiveness of our website and communications.
- Geo-location data. We use geolocation to deliver location-specific results for services that are local to you. Geolocation is a technology that uses data acquired from an internet-connected device to identify an individual’s geographical location, both longitudinal and latitudinal. Some of our location-enabled services require your personal information for the feature to work such as postcode. Postcodes can be extracted through geolocation technology by using the longitudinal and latitudinal data. Once you have given permission for us to know location, the website will access your location each time you visit the webpage, unless you change your browser settings. You can withdraw your consent at any time by disabling Location Data in your browser settings. We do not retain the geo-location data.
Legal basis
The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:
- Public Task: We may use your personal data where it is necessary to perform a public task or in the public interest.
- Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.
- Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose.
Purposes for which we will use your personal data
We have set out below, in a table format, a description of all the ways we plan to use the various categories of your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
|
Purpose / Use
|
Type of Data
|
Legal Basis
|
|
To provide information on local services, including using postcode and geo-location.
|
(a) Identity
(b) Contact
(c) Technical
|
Necessary for our public task function to provide health information services.
|
|
Managing your feedback, requests, complaints and queries.
|
(a) Identity
(b) Contact
(c) Usage
|
Necessary to comply with a legal obligation.
Necessary for our public task function (to keep our records updated and appropriately manage your correspondence with us).
|
|
To administer and protect this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).
|
(a) Identity
(b) Contact
(c) Technical
|
(a) Necessary for our public task function (for providing health information services, provision of administration and IT services, network security, to prevent fraud).
(b) Necessary to comply with a legal obligation.
|
|
To use data analytics to improve our website, services, user experiences and to measure the effectiveness of our communications and content.
|
(a) Technical
(b) Usage
|
Necessary for our public task function to provide health information services (to keep our website updated and relevant, and to inform the development of our content and functionality.)
We will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
|
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ('Google'). Google Analytics uses cookies and JavaScript code to help analyse user activity on websites. Information generated about use of the website (including anonymised IP addresses) will be transmitted to and stored on Google servers in the United States, European Union, and United Kingdom.
Google will use this information to produce user activity reports for this website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. We may also share this anonymous information with third parties.
You may refuse the use of cookies by selecting the appropriate settings on your browser. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
Read Google's Full Privacy Policy and Terms of Service for detailed information.
This website has also implemented Google Analytics Demographics and Interest Reporting. This is used to gain an insight into the age, gender and interests of our users to help us make decisions on how to improve the website in the future.
Users can opt out of this reporting by visiting Google Ads Settings. There is also a Google Analytics Opt-out Browser Add-on available to download.
Third Parties
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We may transfer your personal data to service providers that carry out certain functions on our behalf. This may involve transferring personal data outside the UK to countries which have laws that do not provide the same level of data protection as the UK law.
Whenever we transfer your personal data out of the UK to service providers, we ensure a similar degree of protection is afforded to it by ensuring that we will only transfer your personal data to countries that have been deemed by the UK to provide an adequate level of protection for personal data, namely, EEA based Adequacy Decisions.
Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Cookies
A cookie is a piece of data stored on the user’s hard drive while they are visiting a particular website. They are used to uniquely identify web browsers, track user trends and store information about user preferences. You can restrict or disable cookies on your browser. Disabling cookies may result in some website features not functioning properly.
By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can withdraw your consent and change your cookie preferences at any time through your browser settings, most web browsers allow some control of most cookies through the browser settings. Find out how to manage cookies on popular browsers:
To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.
Links
This website contains links to other sites. Please be aware that NHS 111 Wales is not responsible for the privacy practices of other websites. We encourage our users to be aware when they leave our site and to read the privacy statements of other websites.
Embedded content
We use ‘plug ins’ or embedded media such as embedded YouTube videos. We embed ReciteMe for accessibility purposes.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Contact Details and How to Complain
If you have any concerns about our use of your personal information, or wish to make a data request, you can contact the Data Protection Officer, Welsh Ambulance Services NHS Trust, Ty Elwy, Richard Davies Road, St Asaph, Denbighshire, LL17 0LJ, or email: amb_infogovernance@wales.nhs.uk
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk