Patient Data Protection & Privacy Statement

We are committed to protecting and respecting your data protection and privacy rights. Please take a moment to read this Patient Data Protection & Privacy Statement to find out more about why and how we process your personal information.

Who we are and how to contact us

Bon Secours Health System CLG ("Bon Secours") is a private hospital group.

For further information or queries about your data and your data protection rights, please contact

Mr. Clive Stainton,

Data Protection Officer,

Bon Secours Health System,

Bon Secours Group Offices, 7 Riverwalk,

Citywest,

Dublin 24,

D24 H2CE.

Phone: 1890 50 4030, email: dpo@bonsecours.ie

How your personal data is used and the legal basis for its processing

We process your personal data for medical purposes to provide healthcare services to you, on the basis of your contract with Bon Secours or your health insurer or, for patients being treated under the National Treatment Purchase Fund (NTPF) scheme, the performance by the NTPF of its functions and responsibilities under legislation. Medical purposes includes the purposes of preventative medicine, medical diagnosis, medical research, the provision of medical care and treatment and the management of healthcare services. Your data may also be processed for the purposes of quality improvement, medical education, training and audits.

In general, your data may only be processed for medical research purposes on the basis of your informed and explicit consent. However, there are limited circumstances in which your data may be used for medical research or public health purposes without your consent. Examples would include our legal obligation to provide patient data to the National Cancer Registry, or the Health Protection Surveillance Centre or undertaking retrospective chart reviews where the applicable legislative conditions have been satisfied

We also process your information in order to comply with legal obligations to which we are subject and for the purposes of our legitimate interests such as to prevent fraud, for billing purposes and for managing and improving our services.

Data collected about you

To provide treatment to you, Bon Secours needs to process your medical records, medical history and related personal information, such as your address and other contact details as well as your health insurance details.

How your personal data is collected

We obtain your personal data directly from you in the course of your diagnosis and treatment. We may also be provided with information necessary for your treatment by other healthcare providers, such as your GP or other hospitals which have been involved in your care and treatment.

How your personal data is disclosed

Your data will be provided as necessary for medical purposes to those involved in your treatment and care including, where applicable, other hospitals, your GP, external laboratories, external diagnostic providers or your health insurer. Medical consultants practicing at Bon Secours are independent medical practitioners and not employees of the hospitals. As such, to the extent that they need to process your personal data in the course of their professional activities, they are joint controllers of your data with Bon Secours. Your data will be provided as necessary in order to receive payment for medical services provided including health insurers, billing agencies, the NTPF and the HSE.

Your data may also be disclosed where required or authorised by law, for example, for medical research or public health purposes.

International transfers

Bon Secours, as part of Bon Secours Mercy Health Inc. headquartered in the U.S.A., may from time to time use business partners and service providers located outside of the European Union to process patient data. When this is done, at least one of the following safeguards to protect your personal data to a similar level as within Europe will be applied, i.e.:

• We will use service providers located in countries which have been designated by the European Commission as having an adequate national standard of data protection, or;
•  
• We will require our partners or service providers to adopt the standard data protection contract clauses pre-approved by the European Commission.

Data retention

We will only retain your personal data for as long as is necessary to fulfil the medical purposes for which it is recorded, including any legal or regulatory requirements to maintain records.

Your Data Protection rights

• You have the right to be provided on request with a copy of your personal data. For requests for health related data, we are obliged to consult with the appropriate health practitioner (normally, your treating clinician) to ensure providing the data to you will not result in serious harm to your physical or mental health.
• You have the right to rectification of inaccurate data we may have recorded about you.
• You have the right to the erasure of your data ("right to be forgotten") which we no longer have justification for recording.

 

The exercise of your rights might be subject to certain conditions prescribed by law and we might require further information from you before we can respond to your request.

If you are not satisfied with our responses or are otherwise concerned with how we process your personal data, you also have the right to make a complaint to the Data Protection Commission.

• You have the right to object to processing of your data which is being done by Bon Secours on the basis of its legitimate interests.
• You have the right to restrict the processing of your personal data when:
  • the basis for its processing is in dispute;
  • its accuracy is in dispute;
  • we cannot establish a lawful basis for its processing, but you do not wish it to be erased;
  • we no longer need your data, but you need it for the establishment, exercise, or defence of legal claims;
  • you object, where applicable, to our processing of your data on the basis of our legitimate interests, pending verification of whether your interests override ours.
• You have the right to be provided with a copy of your electronic data records in machine readable format, or to have them transferred directly to another data controller ("data portability").

How Can I Access My Medical Records?

Patients can request their own personal health records or the records of a dependent by contacting us directly. We encourage requesters to contact the relevant hospital Department to ensure that the correct information is given and to narrow the field of enquiry.

 For your convenience and in the interests of processing your request more efficiently we have provided a form that you can complete and send to dpo@bonsecours.ie. This form is available using the link at the bottom of this page.

Change to Statement

We may amend this Privacy Statement from time to time at our discretion and will publish such updated version on our website, as appropriate.  At the bottom of this document you can find the date on which this privacy statement was last updated.

 

 

Last Updated: March 2021