Our legal bases for using your personal data

We collect the information in order to provide you with our services, to market our services to you, to improve our website and to recruit staff.

We will use this information:

• To provide you with healthcare services.
• To anonymise your data so that we can carry out carry out clinical audits. Patient data is processed by the hospital to improve and advance treatment and care. We conduct clinical audits with the purpose of ensuring best practice and for quality assurance and improvement purposes. If your records and data are to be used for activities such as clinical audit and quality improvement it will be anonymised i.e. you cannot be identified from the data.
• We conduct Retrospective Chart Reviews in accordance with international best practice. Research using patient medical records for this purpose is only conducted by healthcare professionals. Medical records are reviewed but no direct patient contact is required. You will not be asked to give your explicit consent. Your personal information will be protected by being fully anonymised or given a unique code so that your name does not appear alongside the information or in any of the results of the research. Any findings from a study that are published will not identify you. Any such study will be reviewed and approved by a research ethics committee prior to commencement.
• To undertake health research, with your consent or on the basis of a consent declaration from the Health Research Consent Declaration Committee.
• The results of quality improvement and clinical work can be published subject to our internal governance procedures.
• We support the placement of students and trainees who may have access to your medical record. All staff are required to comply with the General Data Protection Regulation and other Saint John of God Hospital policies.
• To communicate with you as part of our relationship with you or as per our contract with you;
• To ensure payment of our invoices.
• To set you up as a supplier on our systems.
• To liaise with you about projects that we are undertaking with you.
• To create a candidate profile for you if you are a prospective employee.
• For our website, to administer and improve our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes, to keep our site safe and secure For further information please see our Cookie Policy. To make suggestions and recommendations to you and other users of our website about services that may interest you or them.
• To deliver information about our services, where you have subscribed or consented to receiving same.
• To carry out fundraising and marketing activity where you have consented to this.
• To comply with applicable laws and regulations.
• We carry out patient satisfaction and experience surveys.

The legal bases for the processing of your data are:

• The processing is necessary for the performance of a contract which you have entered into with us or to take steps at your request prior to entering into a contract.
• Where you have provided consent for the processing for one of more specified purposes, such as marketing, for example, when you opt-in to receiving this information.
• The processing is necessary for compliance with a legal obligation to which we are subject.
• The processing is necessary in order to protect the vital interests of you or of another natural person.
• The processing is necessary for the purposes of the legitimate interests which we pursue prior to contract (for example, in providing you with information about our services) and post contract (for further details, see the section entitled ‘Who Do We Share This Information With?’) where such interests are not overridden by your interests or fundamental rights or freedoms which require the protection of your information.

The legal bases for the processing of your Special Categories of Personal Data are:

• The processing is necessary for the provision of health care or treatment and for the purposes of medical diagnosis.
• In some circumstances, where the processing is necessary for reasons of public interest in the area of public health.
• The processing is necessary in order to protect your vital interests or that of another person where you are physically or legally incapable of giving consent.
• If processing is necessary for the establishment, exercise or defence of legal claims or to comply with a legal obligation arising from substantial public interest.