Privacy Notice – RCSI MyHealth App
1. Who we are
We are the Royal College of Surgeons in Ireland of 123 St Stephen’s Green, Dublin D02 YN77. You can contact us at this address by post or by email at info@rcsi.ie.
Our Data Protection Officer may be contacted by email at dataprotection@rcsi.ie.
2. Why we process your data, the lawful basis for processing your data and with whom we share it
A. For users of the RCSI MyHealth App
- To provide and maintain the functionality of the RCSI MyHealth App
- To respond to queries or requests submitted through the app
- To personalise services in order to provide relevant content and features
The legal basis for this processing is our legitimate interest in the administration and operation of our academic, research, and health-related services. RCSI will not process your personal data where these legitimate interests are overridden by your own interests.
B. For individuals who engage with RCSI in a professional capacity
- To facilitate engagement with students, staff, researchers, and collaborators
- To support education, research, and service activities
- To personalise services in order to provide relevant content and features
The legal basis for this processing is our legitimate interest in the administration and operation of academic, research, and service activities. RCSI will not process your personal data where these legitimate interests are overridden by your own interests.
In some instances, we may combine other information with personal data, such as deriving approximate location information from technical data associated with your use of the app. Where we combine such information, it will be treated as personal data.
We will retain this data for the period of time and as per the rationale documented in our Retention Policy.
3. Transfers of data outside the European Economic Area
If we transfer personal data to a service provider located outside the EEA, we will safeguard that transfer by ensuring that appropriate measures are in place, such as European Commission approved standard contractual clauses.
4. Your rights relating to personal data
- Right of access – to request a copy of the personal data we hold about you
- Right to rectification – to have inaccurate or incomplete data corrected
- Right to erasure – to request deletion of your personal data
- Right to restriction or objection – to limit or object to processing in certain cases
- Right to data portability – to receive your data in a structured, commonly used, machine-readable format
To exercise any of these rights, please contact dataprotection@rcsi.ie.
If we process your personal data based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.
If you are unhappy with how we process your personal data, we encourage you to contact us so we can address your concerns. You also have the right to lodge a complaint with the Data Protection Commission (DPC).
5. Requirement to process personal data
You may use the RCSI MyHealth App without providing personal data; however, some features and services may not be available without it.
If you do not provide your information for the purposes described above, we may not be able to:
- Respond to your queries
- Provide certain app features or services
- Personalise your experience within the app
6. Automated decision-making and profiling
The RCSI MyHealth App does not carry out automated decision-making that produces legal or similarly significant effects.
Information collected
We are committed to protecting your personal information and ensuring transparency in how it is used.
We may collect the following types of information when you use the RCSI MyHealth App:
- Name and contact details (if provided by you)
- Information you submit through the app
- Technical information necessary for the operation and security of the app
This information is used solely to support the delivery, functionality, and security of the RCSI MyHealth App.
Data security and retention
RCSI only retains your data for as long as necessary to fulfil the purposes outlined in this notice or as required by law.
Appropriate organisational and technical security measures are in place and are reviewed regularly to protect your personal data.
Data ethics
RCSI is committed to the principle that personal data is generated, stored, and used in a trustworthy and ethical manner.
Staff are required to complete data protection training, and research involving personal data is subject to ethical review where appropriate.
RCSI is confident that it handles personal data in a manner consistent with its mission “to educate, nurture and discover for the benefit of human health.”
Changes to this privacy notice
RCSI may update this privacy notice from time to time to reflect changes in practices or legal requirements.
Queries
Any queries or concerns regarding the processing of personal data in the RCSI MyHealth App should be addressed to:
Dónall King
Data Protection Officer
Royal College of Surgeons in Ireland
123 St Stephen’s Green
Dublin D02 YN77
Email: dataprotection@rcsi.ie