Privacy Policy

Last updated on January 20th, 2021

1. Welcome
   1. When you visit https://hpftdigitalskills.nhs.uk/hpft/en/ (hereinafter "Website", "Site") personal data is collected about you. This Privacy Policy is meant to help you understand what personal data we collect, why we collect it, and how we delete it.
2. Data controller
   1. Center for Digital Dannelse (hereinafter "us", "our", "us") is responsible for the processing of your personal data and ensuring that it complies with the rules of the General Data Protection Regulation (GDPR).

      Center for Digital Dannelse
      Baadehavnsgade 42K,
      2450 Copenhagen SV
      Denmark
      
      https://mapus.io
      info@mapus.io
      +45 71 74 38 76
      DPO: Anders Skov

3. Personal data
   1. Personal data is information that can identify you, personally. For example: your name, email, address, telephone number, etc. When you use our Service, we collect and process the personal data, you provide to us. This occurs for instance if you answer a questionnaire; sign up for a newsletter; register as an administrator, or use a contact form.
   2. To the extent that you enter information such as name, address, workplace, gender, age, phone number and email, we process this personal data. You can enter this type of information while using the Service or contact forms.
   3. The Centre will also share some usage data with HPFT, to allow them to assess the uptake of the platform, and understand the digital skills mix of staff at the Trust. Once data has been transferred to HPFT, they will become the controller.
4. Security
   1. We have taken technical and organizational measures to prevent your data from being accidentally or illegally deleted, published, lost, impaired, disclosed without authorization, abused or otherwise processed in violation of the law.
5. Purpose
   1. When personal data such as gender, age, zip code or other background data is collected in the questionnaire, the purpose is most often to collect statistical information for analysis, reporting, and benchmarking of data. Publishing such analyses require that the user data is completely anonymous and does not contain any personal identification of a user.
   2. If you are asked to submit your email during the questionnaire, it is to identify your result. We can grant access to your result via email or delete your data on your request. This is your assurance that your personal results cannot be accessed by others. The legal basis on which we process your personal data, is in order to deliver the Service to you.
      1. Your email will only be used for other purposes, if the purpose is clearly stated when asked to submit your email. Examples include, but are not limited to, subscribing to a newsletter, asking for feedback on our Service, or receiving an email as part of an exercise/test.
   3. In case your organization has asked you to complete the questionnaire, personal information such as email and name also have the purpose of making your result identifiable. This ensures that the person(s) who asked you to fill out the questionnaire can find your result. Contact your organization's administrator for more information. At HPFT, all enquiries should go to hpft.dpo@nhs.net in the first instance.
   4. Information such as name, phone, organization, email entered in a contact form is intended to qualify an answer to your inquiry. The legal basis on which we process your personal data is our legitimate interest.
   5. HPFT processes your data on the basis of contract and legal obligation.
6. Period of storage
   1. We only store your data for the purposes described in this Privacy Policy and for the time allowed by law. When we no longer need to use your personal data for the identified purposes and there is no need for us to keep it to comply with our legal or regulatory obligations, we will either remove it from our systems or anonymize it so that you cannot be identified.
7. Disclosure of information
   1. Besides otherwise described in this Privacy Policy, we may disclose personal data that we collect or that you provide to trusted third-party providers (data processors). We only use data processors that can give your personal data adequate level of data protection.
   2. We only use data processors within the EU or in countries which can provide the adequate protection of your information.
8. Cookies
   1. Our Website uses cookies. A cookie is a small text file that is stored in your browser. Cookies allow the Website to recognize your computer, gather information about which pages and features are visited with your browser and make sure the Website is technically functional. Cookies are the only way to make the site function as intended. Cookies are used by virtually all websites.
   2. The cookies that we issue are used to personalize the presentation of the Website based on your computer hardware (e.g. language, screen size), and allow you access to restricted and personal areas, such as your individual result.
   3. Cookies we use:
      1. When answering the questionnaire, the Website stores cookies that help the server register and link your answers, as well as the questions you have already answered.
      2. The Site uses cookies from Google Analytics to measure traffic on the Site.
      3. The Site can contain videos embedded on the page via YouTube, Vimeo or other video services, that use cookies to detect which video is displayed and how much of the video you have seen.
      4. Administrators logging on to the Site are authenticated via a cookie: token.
      5. The Website identifies the appropriate survey, template, language and setup via four cookies: survey_id, template_id, lang_id and setup_id.
      6. The Website stores your accept of cookies via a cookie: cookieAccept
9. Insights and complaints
   1. You are entitled to know what personal information we are processing about you. You may also object to the use of information at any time. You may also revoke your consent to processing information about you. If the information processed about you is incorrect, you are entitled to alter or delete this. Inquiry may be made to Center for Digital Dannelse (see contact details under data controller). If you would like to complain about our processing of your personal information, you also have the opportunity to lodge a complaint with your national Data Protection Authority (DPA).
   2. If you have any concerns about how HPFT is using your data, please contact our data protection officer at hpft.dpo@nhs.net.
10. Publisher and data processor
    1. The website is managed, published and data processed by:

       Center for Digital Dannelse
       Baadehavnsgade 42K,
       2450 Copenhagen SV
       Denmark
       
       https://mapus.io
       info@mapus.io
       +45 71 74 38 76
       DPO: Anders Skov