List of active policies

Name Type User consent
Data Control & Retention Privacy policy All users
Cookie Policy Privacy policy Authenticated users

Summary

The Faculty is the data controller and will process your data in accordance with the regulations that apply to:

Article 6(1)(b) and Article 9(2)(d) of The General Data Protection Regulation 2016 (GDPR) /Data Protection Act 2018 (DPA18)


Full policy

The Faculty is the data controller and will process your data in accordance with the regulations that apply to:

Article 6(1)(b) and Article 9(2)(d) of The General Data Protection Regulation 2016 (GDPR) /Data Protection Act 2018 (DPA18)

Only anonymised / non-sensitive data may be shared internally within the faculty for statistical / project planning purposes - and provided as evidence of educational activity. Should a case arise where your data is needed for reasons other than those already stated, your explicit consent will be sought prior to processing. You have the right to object to your data being used for the research, planning and running of the local EM NHS Educational Programme under Article 21 of the GDPR/DPA 18.

In the context of the coronavirus outbreak (Covid-19) and the Trust’s role as a category one responder under the Civil Contingencies Act 2004, the East & North Hertfordshire Trust are utilising the (web-based) video consultation / conferencing platforms including NHS-optimised Starleaf  and Microsoft Teams. As NHS staff, your NHS mail account will be/will have migrated to the N365 platform by your organisation under contractual process. These platforms require your name and enrolled email as a minimum and operate in accordance with regulations - but are independent of this platform.

Platform data will be stored on the Dreamhost server infrastructure (current site datacenter is in California, US. The Data Retention summary can be found here, at the footer of each page and from within the user profile dashboard.

You can contact the Data Protection Officer via the user profile dashboard - and there is a self-service personal data export / deletion process.


Summary

The backend framework requires cookies (essential) for sessional use.


Full policy

The backend framework requires cookies (essential) for sessional use. These essential cookies support site navigation, preferences and help prevent fraudulent use of user accounts.

Cookie Table
Cookie Name Purpose Duration
_ga Registers a unique ID that is used to generate statistical data on how the visitor uses the website. 1 year
_gat Used by Google Analytics to throttle request rate. Sessional
_gid Registers a unique ID that is used to generate statistical data on how the visitor uses the website. Sessional