Your Data


Your Data

As most of you are aware there are a lot of changes within 2018 in relation to personal data and new legislation being bought in for the EU called General Data Protection Regulation (GDPR). This new legislation applies to all companies processing the personal data of data subjects that reside in the EU regardless of the companies location.

When you use Festimed we will collect information about you for identification purposes. We will need to record basic information such as your name and date of birth. This is so we and other people involved in your care can successfully identify you. We will also ask for your phone number and address. This is so we can contact you if we need to.

We will also need to collect information about your health. The clinician (e.g. Doctor, Nurse, Practitioner, etc.) will be the person who will seek this during your consultation. They may also record other information not directly related to your health but information that will assist in your health treatment or information used for preventative health.

Information such as gender, marital status, number of children you have, your nationality, your employment status, religion, family health issues; they all may be recorded by the clinician and / or administrative staff of Festimed. Our policy is only to collect and record information about you that helps in your treatment.
Every patient of ours has their own dedicated health file. This file is both in hard copy and computerised and stored on Pebbles, our bespoke computerised system and the hard copy in a file that is kept whilst at the event within the secure administrative area (no public access) and on return to our head office in a locked cupboard within a locked room in an alarmed building. For anyone to access your file they need a unique name and password and / or access to the locked area.

Your personal data will only be used for the treatment of your health care. It will not be passed onto any third parties unless you tell us to do so or we are required to do so by law or a court order. We will always seek your written consent to recording, storing and accessing your personal details.

Under data protection legislation you have enhanced rights. You have the right to request from Festimed:
• Access to and the correction or deletion of your data
• The restrictions of the processing of your personal data
• You can object in general to the processing
• You also have the right to have your data transferred to another organisation or person in a format that they will be able to easily access and understand

Your file will be retained for a period of a minimum of eight years following your last visit.
Festimed’s Data Protection Officer is Anna Rock and she can be contacted via email on admin@festimed.org if you would like to discuss, or give instruction on, our processing of your personal data.

If you are not happy the way we manage your personal data you have the right to lodge a complaint with the Irish Data Protection Commission who can be reached on LoCall 1890 25 22 31 or within the UK then the Information Commissioner’s Office on 0303 123 1113.

Personal data can be anything from a photo, email address, posts on social network sites, medical information, bank details, etc. If you are giving consent then this must be clear and distinguishable from other matters using clear and plain language and it must always be easy to withdraw consent as it would be to give it and the reason for asking your consent always provided.

  • Right to Access Your Data
  • What About Children’s Data?
Right to Access Your Data
You have a right to know whether or not personal data is being processed and if so where and for what purpose.  Should you require a copy of your patient notes then we can supply this to you, free of charge and this can now only be provided to you in electronic format (i.e. email which we password protect).
What About Children’s Data?
Parental consent will be required to process personal data of children under the age of 16 for online services.  There may be discussions whereby this age of consent may drop but it would not be below the age of 13

  • Right to Be Forgotten
  • How do I get a copy of my notes?
Right to Be Forgotten
For the duration that you are a patient at Festimed we will hold your data in hard copy format.  Any paperwork that is completed by you such is attached to this paperwork. This is filed and kept within a locked secure area whilst on the festival / event site.  When the site closes this is moved to a locked cupboard within a locked room prior to being moved to archive storage. Only persons that require access to this data are permitted access to these areas.  
How do I get a copy of my notes?
If you attended one of our medical facilities at an event and require your notes then you must complete this Data Protection release form and email it to us as soon as you can – admin@festimed.org