Global Health Partnerships (GHP) Privacy notice and confirmation of consent

This privacy policy aims to give you information about how Health Education England collects and processes your personal data.

Personal data, or personal information, means any information about an individual from which that person can be identified.

Your personal data has been collected and processed for the purposes of and in connection with the functions that HEE performs regarding workforce education and planning e.g., through existing contracts for services, from conferences or events held, via HEE’s digital platforms or via HEE’s website and social media accounts.

This privacy notice is to outline that GHP directorate are changing how they store your data by transferring it to an online customer relationship management (CRM) system. The personal data we hold is adequate, relevant, and not excessive to meet the requirements of GHP’s CRM and its associated functions. Your personal data will be used for the purpose of improving cross directorate communication and to streamline productivity.

The following information: full name, job title, employing organisation, team/department, telephone number, email address, and any other information relating to fields of expertise will be collected.

Please can you read our updated privacy notice and contact us using the details below if you require any further information.

Health Education England processes your personal data based on core purpose and its role as a public body with the task of developing the workforce for the UK’s National Health Service.

Personal data will be processed in accordance with relevant data protection legislation, including but not limited to the General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations, and any guidance or codes of practice issued by the European Data Protection Board, the Information Commissioner, the Department of Health & Social Care, NHS England or NHS Digital. Health Education England’s privacy notice is also available via the HEE website to learn more about how HEE handles your information. https://www.hee.nhs.uk/about/privacy-notice

All information held by Health Education England will be stored electronically in a two-factor authentication MS Dynamics application on a secure server, protected against unauthorised access, alteration or disclosure by user authentication and a firewall.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Your data can only be accessed, seen, and used as required and/or permitted by law by staff who need access to personal data so they can do their jobs.
Third parties with whom personal information may be shared include Pythagoras Communications Ltd (CRM supplier) and data processor for system technical and maintenance work only.
Personal data will be kept for no longer than is necessary for the purpose for which it is processed, in line with HEE’s records management policy, and the NHS records retention schedule within the NHS records management code of practice.
If you object to the way in which HEE is processing your personal information or if you wish to ask HEE to stop processing your personal data, please contact
• GHP – BMT@hee.nhs.uk with the subject line CRM

Health Education England
Global Health Partnerships 3rd Floor 3 Piccadilly Place Manchester, M1 3BN is a data controller and responsible for your personal data.

Our data protection officer (DPO) is responsible for overseeing questions in relation to this privacy policy. If you have any questions about our use of personal data, including any requests to exercise your legal rights, please contact the DPO by emailing.
ig@hee.nhs.uk with the subject line FAO the Data Protection Officer

Postal address: FAO the Data Protection Officer, Health Education England, Blenheim House, Duncombe Street, Leeds, LS1 4PL