a.Cheshire & Merseyside Cancer Alliance is hosted by The Clatterbridge Cancer Centre, NHS Foundation Trust. Further information about us and what we do is available from the ‘About Us’ section of our website –https://www.cmcanceralliance.nhs.uk/about-us
c.The Cancer Academy is part of the Cheshire and Merseyside Cancer Alliance, hosted by The Clatterbridge Cancer Centre NHS Foundation Trust.
a)Organisations that process personal data must comply with the General Data Protection Regulation (GDPR). The GDPR restricts how we can use an individual’s data and consists of 8 Data Protection principles that must be applied when processing data. Under current data protection law, organisations that process personal data, must also register as a ‘Data Controller’, and notify the Information Commissioner (ICO) why they need to process the data. As Cheshire and Merseyside Cancer Alliance is hosted by The Clatterbridge Cancer Centre NHS Foundation Trust, the Trust is the ‘Data Controller’ for the purposes of information collected by them and for also ensuring that any organisation it hosts, such as the Cheshire and Merseyside Cancer Alliance, complies with the GDPR and Data Protection principles.
b)The Clatterbridge Cancer Centre NHS Foundation Trust is registered with the Information Commissioner: registration number Z7367711. Further details can be found here on the ICO website (enter link – https://ico.org.uk/).
a)Personal information will be collected from you upon registration with The Cancer Academy. Further information may be collected when you respond to, or participate in, any survey or questionnaire sent to you by us, or provide comments. We may also ask you for information when you report a problem with The Cancer Academy. Any information collected, will be stored and used only in line with this policy.
b)To register with The Cancer Academy, we ask for:
We will store this data you have inputted as part of your learning experience on the platform.
c) We will collect data relating to your visits to the site, recording use of the learning resources, for example, details of which courses you have accessed and/or webinars you have completed, in order to analyse your interaction with the website to best tailor services.
a)By accessing The Cancer Academy via any means, registering for access, using online resources, webinars and content, responding to or participating in any survey or questionnaire sent to you by us, or providing comments, you agree that your personal information may be collected, stored, used, and shared by us and our partners, course and content providers, or third parties we work with, for any of the following purposes:
i.to provide, maintain, protect and improve the quality of The Cancer Academy
ii.to provide you with a personalised browsing experience when using the learning platform;
iii.to fulfil any contractual agreements between you and us and any third party who has commissioned the education on your behalf;
iv.to manage the personal account that you hold with us;
v.to allow you to use the full range of features on or via The Cancer Academy;
vi.to send you course-specific email notifications and updates about courses you are enrolled on;
vii.to comply with legal and regulatory requirements;
viii.to contact you occasionally to invite you to share your opinions and experiences of The Cancer Academy
ix.to feedback to your employer regarding course attendance
We may use your email address to send you course notices and updates about our services.
b) Information regarding our third parties can be found via their websites:
All third parties engaged with operate in line with the GDPR.
a)All information is stored on secure servers. When you register, we will ask you to choose a password which enables you to access The Cancer Academy. You are responsible for keeping this password confidential. We ask you not to share this password with anyone.
b)LearnDash is our learning management system, which is managed by Gas Mark 8 Limited. The associated data is stored on DigitalOcean servers, which are hosted in a London, UK data center and are SOC 1 Type II, SOC 2 Type II, ISO/IEC 27001:2013 and PCI-DSS certified.
The legal bases for processing your information are:
We may disclose your personal information to third parties when permitted by law including:
We will only keep your data for as long as is necessary. Upon deletion of your account with The Cancer Academy, we will retain identifiable information for 30 days, after which it will be permanently deleted. Anonymised statistics of your use of our resources may be retained to allow ongoing improvement of our services.
You have the following data protection rights:
a) The right to be informed
b) The right of access
Individuals can submit subject access requests, which oblige organisations to provide a copy of any personal data they hold concerning the individual (see details in section 12)
c) The right to rectification
You can edit your personal details via your profile page whenever you wish. We maintain a procedure to help you confirm that your personal information remains correct and up-to-date or choose whether or not you wish to receive material from us or some of our partners.
d) The right delete your personal details
To delete or update your personal information please contact us via email firstname.lastname@example.org
We will answer your email as promptly as possible. If we have collected and processed your personal information on the basis of your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
e) The right to restrict processing
You can request that we limit the way it use your personal data under certain circumstances.
This is an alternative to requesting that we delete your information and might be used when an individual contests the accuracy of their personal data.
f) The right to data portability
g) The right to object
Individuals can object to the processing of personal data under certain circumstances.
h) Rights related to automated decision making including profiling
Under the GDPR a person may request access to information (with some exemptions) that any organisation holds about them. This is known as the Right of Subject Access. To do this, you must make a written request (or email) to:
The Admin Services Team
The Clatterbridge Cancer Centre NHS Foundation Trust
Clatterbridge Cancer Centre – Wirral
Tel: (0151) 556 5844
Please refer to The Clatterbridge Cancer Centre :: Freedom of Information (FOI) (clatterbridgecc.nhs.uk) for instructions on how to make a Freedom of Information Request.
If you have any questions or concerns regarding how we use your information please contact the Trust’s Information Governance Team:
Data Protection Officer
The Clatterbridge Cancer Centre NHS Foundation Trust
If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law you can complain to the ICO. How to make a complaint to the ICO
Information Commissioner’s Office
Cheshire, SK9 5AF