Data Controller
NHS West Yorkshire Integrated Care Board
Purpose
When someone visits one of our websites, we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to check how our websites are used and find out things such as the number of visitors to the various parts of the site, to help us communicate our work more effectively.
Lawful basis
The ICB’s legal basis for processing personal data under the UK GDPR is Article 6(1) f – processing is necessary for the purposes of the legitimate interests pursued by the controller
Type of information used
Personal data: IP address, telephone number, name.
Who we will share the information with (recipients)
This information is not shared outside the ICB.
Do we use any processors
We use a third party, open source content management system, Concrete, to publish the website. We use a standard Concrete feature to collect anonymous information about visitor activity on the website, for example the number of people viewing pages, in order to monitor and report on the effectiveness of the website and to help us to improve it. No information is stored with Concrete.
The ICB’s website, including the Concrete Content Management System, is securely hosted by a third-party, Frank Designs Ltd.
How we collect (the source) and use the information
When someone visits our website, information is collected in an internet log to enable us to monitor how the website is used. This is done to find out things such as the number of visitors to the various parts of the site.
How long we will keep the information
Six years or until deletion requested.
Your rights
Under the UK General Data Protection Regulation all individuals have certain rights in relation to the information which the ICB holds about them. Not all rights apply equally to all our processing activities as certain rights are not available depending on the lawful basis for the processing.
If you require further detail each link below will take you to the Information Commissioner’s Office website where further detail is provided in the section ‘When does the right apply’.
These rights are:
- The right to be informed about the processing of your data
- The right of access to the data held about you
- The right to have that information amended in the event that it is not accurate
- The right to have the information deleted
- The right to restrict processing
- The right to have your data transferred to another organisation (data portability)
- The right to object to processing
- Rights in relation to automated decision making and profiling
Under the NHS Constitution you have the right to privacy and to expect the NHS to keep your information confidential and secure.
If you have an enquiry in relation to your data protection rights please contact wyicb.