Privacy Policy - CREGG Medical

INTRODUCTION

CREGG Medical fully respects your right to privacy and takes its responsibility regarding the security of your information very seriously.

This Privacy Policy explains what we do with your personal data, whether we are in the process of helping you secure a suitable product or service, continuing our relationship with you once we have found that product or service for you, providing you with a product or service, receiving a service from you, or you are visiting our website.
It describes how we collect, use and process your personal data (including where applicable personal sensitive data) and how, in doing so, we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights.
This Privacy Policy applies to the personal data of our Website Users, Customers, Suppliers, and other people whom we may contact. It also applies to the emergency contacts of our Staff.

Data Controller

“Care About You Ltd T/A CREGG Medical” (referred to as “CREGG Medical”, “we” in this policy) is the “data controller” of all personal information that is collected.

What kind of personal data do we collect?

SUPPLIER DATA: We’ll only collect enough information to support the effective running of our relationship – such as the details for our contacts within your organisation, such as names, telephone numbers and email addresses. We will also collect bank details, so that we can pay you. We may also hold extra information that someone in your organisation has chosen to tell us.

WEBSITE USERS: We collect a limited amount of data from our Website Users which we use to help us to improve your experience when using our website and to help us manage the services we provide. This includes information such as how you use our website, the frequency with which you access our website, your browser type, the location you view our website from, the language you choose to view it in and the times that our website is most popular. If you contact us via the website, we will collect any information that you provide to us, for example your name and contact details.

How do we use your personal data?

Medical Equipment & Services

We’ve listed below various ways in which we may use and process your personal data for this purpose.

Please note that this list is not exhaustive:

Collecting your data from you and other sources, such as LinkedIn;
Storing your details (and updating them when necessary) on our database, so that we can contact you in relation to providing medical equipment &services;
Keeping records of our conversations and meetings;
Carrying out our obligations arising from any contracts entered into between us;
Facilitating our invoicing process;
Carrying out customer satisfaction surveys;
Complying with our legal obligations in connection with the detection of crime or the collection of taxes or duties; and
Processing your data to enable us to send you targeted, relevant marketing materials or other communications which we think are likely to be of interest to you.

We may use your personal data (including sensitive personal data) for the above purposes if we deem it necessary to do so for our legitimate interests

The provision of medical equipment & services.

To fulfil contractual requirements. If you are not happy about this, in certain circumstances you have the right to object. We may also process your personal data:

To comply with a legal obligation
You have consented to us using your personal data (e.g., marketing related purposes)

Marketing Activities

We need your consent for some aspects of these activities which are not covered by our legitimate interests (in particular, the collection of data via cookies, and the delivery of direct marketing to you through digital channels) and, depending on the situation, we’ll ask for this via an opt-in or soft-opt-in.

Soft opt-in consent is a specific type of consent which applies where you have previously engaged with us.

If you are not happy about our approach to marketing, you have the right to withdraw your consent at any time.

All our marketing is based on what we think will serve our Clients best.

Sensitive personal data

Where we collect ‘sensitive’ personal information slightly stricter data protection rules apply to it.

If you are not happy about this, you have the right to withdraw your consent at any time.

In more unusual circumstances, we may use your personal data to help us to establish, exercise or defend legal claims.
SUPPLIER DATA: The main reasons for using your personal data are to ensure that the contractual arrangements between us can properly be implemented so that the relationship can run smoothly, and to comply with legal requirements.

We will use your information:

To store (and update when necessary) your details on our database, so that we can contact you in relation to our agreements;
To offer services to you or to obtain support and services from you;
To perform certain legal obligations;
To help us to target appropriate marketing campaigns; and
In more unusual circumstances, to help us to establish, exercise or defend legal claims.
- We may use your personal data for these purposes if we deem this to be necessary for our legitimate interests.
- We will not, as a matter of course, seek your consent when sending marketing messages to a corporate postal or email address.
- If you are not happy about this, in certain circumstances you have the right to object.

Client Data:

The main reason we hold your personal data including sensitive personal data is in the provision of medical equipment & services to you.
WEBSITE USERS: We use your data to help us to improve your experience of using our website.

Please note that communications to and from CREGG Medical Staff including emails may be reviewed as part of internal or external investigations or litigation.

Who do we share your personal data with?

SUPPLIER DATA: Unless you specify otherwise, we may share your information with any of our group companies and associated third parties such as our service providers and organisations to whom we provide services.

HOW DO WE SAFEGUARD YOUR PERSONAL DATA?

We are committed to taking all reasonable and appropriate steps to protect the personal information that we hold from misuse, loss, or unauthorised access. We do this by having in place a range of appropriate technical and organisational measures. These include measures to deal with any suspected data breach.

If you suspect any misuse or loss of or unauthorised access to your personal information, please let us know immediately.

Unfortunately, the transmission of information via the Internet or a mobile phone network connection is not completely secure. Although we will do our best to protect your PI, we cannot guarantee the security of the PI you transmit to our website. Any transmission is at your own risk. While we cannot guarantee that loss, misuse or alteration to data will not occur during transmission, once we have received your information, we will employ appropriate technical security measures to protect your data.

HOW LONG DO WE KEEP YOUR PERSONAL DATA FOR?

We will Delete your personal data from our systems if we have not had any meaningful contact with you (or, where appropriate, the company you are working for or with) for two years (or for such longer period as we believe in good faith that the law, or relevant regulators allows or require us to preserve your data). After this period, it is likely your data will no longer be relevant for the purposes for which it was collected.
Where services are provided via a third-party company or other entity, “meaningful contact” with you means meaningful contact with the company or entity which supplies your services.
When we refer to “meaningful contact”, we mean, for example, communication between us (either verbal or written), or where you are actively engaging with our online services.

Data Processing Rights:

Under certain circumstances, by law you have the right to;

Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
Right to withdraw consent: Where we have obtained your consent to process your personal data for certain activities (for example, for our marketing arrangements), you may withdraw this consent at any time and we will cease to carry out the particular activity that you previously consented to unless we consider that there is an alternative reason to justify our continued processing of your data for this purpose in which case, we will inform you of this condition.
Request information about whether we hold personal information about you, and, if so, what that information is and why we are holding/using it.
Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it
Request erasure of your personal information. This enables you in certain circumstances to ask us to delete or remove personal information where there is no longer a valid reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
Right to restriction of processing – where certain conditions apply to have a right to restrict the processing in accordance with Section 87 and Section 89 of the Data Protection Act 2018
Right to rectification: You also have the right to Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Right of data portability – subject to certain restrictions, you have the right to have the data we hold about you transferred to another organisation where we hold it in electronic form. This right of data portability applies to: (i) personal data that we process automatically (i.e., without any human intervention); (ii) personal data provided by you; and (iii) personal data that we process based on your consent or in order to fulfil a contract.

Complaints:

We have appointed a Data Protection Officer (“DPO”) to oversee compliance with this policy. If you have any questions about this policy or how we handle your personal information, please contact the DPO at DPO@careaboutyou.ie.

In the event that you wish to make a complaint about how your personal data is being processed by us or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority:
Data Protection Commissioner: Office of the Data Protection Commissioner. Canal House, Station Road, Portarlington, Co. Laois, R32 AP23, Ireland. Phone +353 (0761) 104 800 | LoCall 1890 25 22 31 | Fax +353 57 868 4757 | email info@dataprotection.ie

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during the period for which we hold your data.

Cookies

Our websites and mobile applications may use technology called “cookies.” A cookie is a small text file that is placed on your hard disk by a server. Cookies allow our websites and mobile applications to respond to you as an individual. The website or mobile application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies or receive a warning before a cookie is stored if you prefer. Please refer to your Internet browser’s instructions or help screen to learn more about these functions and to specify your cookie preferences.

If you choose to decline cookies, you may not be able to fully experience the interactive features of our website.

We may use cookies to do two things:

to track your use of our website. This enables us to understand how you use the site and track any patterns that emerge individually or from larger groups. This helps us to develop and improve our website and services in response to what our visitors want and need; and
to help us advertise jobs to you that we think you’ll be interested in. Hopefully this means less time for you trawling through endless pages and will get you into the employment you want more quickly.

Changes

We may occasionally update this Privacy Statement. If the changes we make are material, we also may post a notice regarding the changes on our website. We encourage you to periodically review this Privacy Statement to stay informed about how we are helping to protect the PII we collect.

ANNEX 1 – HOW TO CONTACT US

How you can get in touch with us:

to access, amend or take back the personal data that you have given to us;
if you suspect any misuse or loss of or unauthorised access to your personal information;
to withdraw your consent to the processing of your personal data (where consent is the legal basis on which we process your personal data);
with any comments or suggestions concerning this Privacy Policy
You can write to us at the following address:

Bay 100-101

Shannon Free Zone West

Co. Clare