June 27, 2020

Data Processing

Data Processing

Personal data will be retained for the shortest time necessary however, some medical material will require Kent Medical Secretarial Services Ltd to hold your data after a consultation or medical treatment. Under GDPR you have the following rights to request information from the company: 

  • Right of access to the data (Subject Access Request)
  • Right for the rectification of errors
  • Right to erasure of personal data
  • Right to restrict of processing or to object to processing
  • Right to portability

Due to medical notes requiring data to be held for a specific time, the erasure of data may not be possible for legal obligations.  Direction will be sought from the representing consultant regarding the erasure of a data subject.  Some treatment and hospital notes and results will require data to be held for a specific amount of time.  

Lawful Basis for Processing:

The General Data Protection Regulation (GDPR) is legislation explaining your rights over the processing of your personal information. The GDPR requires Kent Medical Secretarial Services Ltd to identify which of the six “lawful reasons” we use when processing your data: we process data on the basis of “consent” when sending newsletters or material relating to Kent Medical Secretarial Services Ltd and we operate on the basis of “legitimate interest” when communicating with you in other ways (e.g. when responding to your enquiry). When processing personal data relating to treatment then we use “Consent” and “Contract” for our lawful basis for processing. This will be dependent upon the consultant that we will be providing our service to being. 

How long we retain your data:

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.