Covid-19 Testing - Privacy Statement

1. 1.     Who is the data controller?

Argyll and Bute Council will act as the ‘Data Controller’ for the personal data you provide to us. The Data Protection Officer, who is responsible for ensuring personal data is managed in accordance with data protection legislation, can be contacted as follows:

Address: Iain Jackson, Governance and Risk Manager, Argyll and Bute Council, Governance and Law, Kilmory, Lochgilphead PA31 8RT 

Email:  Iain.Jackson@argyll-bute.gov.uk or data.protection@argyll-bute.gov.uk  

Telephone:  01546 604188 or 01546 605522 

1. 2.     What information do we need?

The personal information we need about you or a member of your household is your name, date of birth, address, contact telephone number(s) and email address, car registration (regional centre only), employer, GP name and address.

We also need information relating to your health, in particular, current or previous symptoms related to Covid-19. 

1. 3.     Why we need this information?

We use personal information to enable us to process a referral for you or a member of your household to the Covid-19 priority antigen testing programme.

1. 4.     Our legal basis for using personal information

Our legal basis for processing your personal data is:

• GDPR Article 6(1)(e) – the processing is necessary for the performance of its official tasks carried out in the public interest in providing and managing a health service 
• GDPR Article 9(2)(h)) – the processing is necessary for medical diagnosis and the provision of health treatment and management of a health and social care system
• DPA 2018 – Schedule 1, Part 1, (2) (2) (f) – Health or social care purposes

1. 5.     What will we do with your information?

The personal information you provide on the referral form are sent to the HSCP Covid-19 referral centre, the completed form is then forwarded to the relevant assessment centre. Your basic details will be saved by the data team for Covid 19 and only used in an anonymised way. You will only be identified if we need to follow up your test for contract tracing.

1. 6.     How long we will keep your information

Within Argyll and Bute Council we keep personal information in line within the Scottish Council on Archives Records Retention Schedules, adapted for our own business requirements where appropriate. The schedules set out the retention periods for information, including personal information, held in different types of records including social work records and administrative records.  The relevant retention schedules can be found here: https://www.scottisharchives.org.uk/resources/scarrs/ and some examples are provided below.

1. 7.     How we protect personal information

We take care to ensure your personal information is only accessible to authorised people. 

Our staff have a legal and contractual duty to keep personal information secure, and confidential. The following security measures are in place to protect personal information:
 

• All staff undertake mandatory training in Data Protection
• Compliance with the Council’s ICT Acceptable Use Policy
• Organisational policy and procedures on the safe handling of personal information
• Access controls and audits of electronic systems

1. 8.     Your rights

When you provide information to the Council, you will have the following rights:

• to withdraw consent at any time, where the lawful basis specified above is consent
• to lodge a complaint with the Information Commissioner’s Office – see below for details
• to request access to your personal data – please contact the Data Protection Officer if you wish to submit a request.
• to data portability, where the legal basis specified above is i) consent or ii) performance of a contract
• to request rectification or erasure of your personal data, as far as the legislation permits – please contact the Data Protection Officer and provide details of what data you wish to be rectified or erased.

You can find out more about your rights in relation to data protection here: www.argyll-bute.gov.uk/data-protection or from the Data Protection Officer by telephone or in writing, as detailed above.

Information Commissioner’s Office

The ICO is the UK’s independent body set up to uphold information rights. 

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Telephone:  0303 123 1113

Email:  casework@ico.org.uk 

The Information Commissioner’s Office – Scotland

45 Melville Street, Edinburgh, EH3 7HL

Telephone:  0303 123 1115

Email:  Scotland@ico.org.uk