Who do we share your information with?

We will not sell your details to any third parties but we will sometimes share your information with our trusted service providers who are authorised to act on our behalf, organisations who work on our behalf, or whom we work with in partnership to deliver and improve services for people affected by life limiting illness.

We will share your information with other organisations who fundraise on our behalf. The legal basis we rely on to use your data in this way is article 6 (1) (f) of the GDPR which relates to information being processed for the purposes of the legitimate interests of the Ayrshire Hospice.

We will only share clinical information with other health and social care providers in order to ensure that we provide the best care possible to all patients and their families. The legal basis we rely on to use your information for these purposes is article 9 (2) (h) of the GDPR which is where processing is necessary for the purposes of the provision of health or social care or treatment. We also comply with Article 9 (3) of the GDPR and ensure that we only share for these reasons with parties whose professional regulation obligates them to secrecy.

The hospice is obligated to share health and social information with other parties such as the National Health Service including National Services for Scotland and their Information Services Division to comply with national reporting and statistical requirements. The hospice will also be required to share information with Healthcare Improvement Scotland in order to ensure that the care we provide meets the standards expected of a Scottish healthcare provider. The legal basis we rely on to use your information in this way is article 9 (2) (i) which relates to the processing of data where it is necessary in the area of public health to ensure high standards of quality and safety of health care.

When individuals apply to work at the Ayrshire Hospice we may disclose information to a third party, for example where we want to take up a reference. The legal basis we rely on to use your information for these purposes is article 6 (1) (b) of the GDPR which is where processing is necessary in order to take steps prior to entering into a contact.

When individuals apply to work at the Ayrshire Hospice we will disclose information to a third party to obtain a ‘disclosure’ from Disclosure Scotland. We will not do so without informing them beforehand unless the disclosure is required by law. The legal basis we rely on to use your data in this way is article 6 (1) (c) of the GDPR which relates to information being processed where it is necessary to comply with a legal obligation.

From time to time we may exchange your personal information with other organisations for the purposes of fraud and credit risk reduction. We may also share information with our financial and legal advisers for the purposes of obtaining advice and protecting our legal rights. If a complaint is made against the hospice we will require to share personal information with the relevant governing bodies. We may also share your information with the emergency services if we think there is a risk of serious harm or abuse to you or someone else. The legal basis we rely on to use your data in this way is article 6 (1) (c) of the GDPR which relates to information being processed where it is necessary to comply with a legal obligation.

We will share information internally between our clinical and non-clinical departments to ensure that all information held within the organisation is accurate as required of us by the General Data Protection Regulation. The legal basis we rely on to use your data in this way is article 6 (1) (c) of the GDPR which relates to information being processed where it is necessary to comply with a legal obligation.

Website data

Your data may also be available to our website provider to enable us and them to deliver their service to us, carry out analysis and research on demographics, interests and behavior of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply:

1. Your data will be made available to our website provider, however no clinical data will be shared with the provider.
2. The data that may be available to them include any of the data we collect as described in this privacy policy.
3. Our website provider will not transfer your data to any other third party, or transfer your data outside of the EEA.
4. They will store your data for a maximum of 7 years.
5. This processing does not affect your rights as detailed in this privacy policy.