Privacy Policy

Collected Personal Data

EMR Complex Care undertakes to comply with its obligations under the Data Protection Act 2018 any other applicable data protection legislation, codes of practice, and best practice guidance issued by relevant authorities (together, the “General Data Protection Requirements”).

The Company will:

Ensure that people processing the Customer’s data are subject to a duty of care.

Take appropriate measures to ensure the security of all the Customer’s data.

Assist in providing access and allowing the Customer’s data subjects to exercise their rights under the GDPR.

Assist the Customer in meeting its GDPR obligations in relation to the security of data processing.

Only retain the minimum essential level of personal data and delete or return all personal data to the Customer as requested.

Provide the Customer with whatever information it needs to ensure compliance with GDPR obligations.

Inform the Customer immediately if asked to do something relevant to the Customer that the Company believes may infringe the GDPR or other data protection law.
 

The Company will:

Only act on written agreement of the Customer.

Undertake audits and checks to ensure compliance with ICO recommendations.

Co-operate with supervisory authorities.

Ensure the security of its data processing.

Keep records of its data processing activities.

Notify the Customer immediately of any personal data breaches.

Purpose of collecting data

Where in the course of providing products and services we processes personal data on our Customer’s behalf we will:

Act only on written instructions from the Customer.

Take appropriate technical and organisational measures against unauthorised or unlawful processing of such personal data and against accidental loss or destruction of, or damage to the same.

Not transfer any such personal data without, and only to, the extent of any express written consent of the relevant data subject at the Customer’s sole discretion.

Keep all materials containing such personal data safe and secure, or if held electronically ensure appropriate electronic security systems are in place and return them to the Customer (or if held electronically, ensure all files containing data are deleted and provide written confirmation) immediately.