The Company (RRMG) specialises in Regenerative and Sports Medicine.. We employs staff and accept qualified individuals to assist in that provision. As a Company, we must process personal data (including sensitive personal data) so that it can provide these services – in doing so, the Company acts as a data controller.
You may give or have given your personal details to the Company directly, such as on an application or registration form or via our website, or we may collect them from another source such as a file. We only do this when we have a legal basis for processing your personal data. For the purposes of providing you with our services or employment services, and/or information relevant to you, we will only use your personal data in accordance with the terms of the following statement.
1. Collection and use of personal data
a. Purpose of processing and legal basis
The Company will collect your personal data (which may include sensitive personal data) and will process your personal data for the purposes of providing you with it’s services or employment. The legal basis we rely upon to offer these services to you are:
a. Legitimate interest
Where the Company has relied on a legitimate interest to process your personal data our legitimate interest is:
– The Company provides appraisal to its members and choice to clients as part of our business and employees staff to assist in so doing. We process personal data in order to be able to provide these services. It is in the legitimate interest of all parties involved, that the Company can process personal data.
b. Recipient/s of data
The Company will not process your data with any third party without your prior consent.
c. Statutory/contractual requirement
Your personal data is required in the form of your acceptance of appointments, if taking up the services we offer.
2. Overseas Transfers
The Company may transfer only the information you provide to us to countries outside the
European Economic Area (‘EEA’) for the purposes of providing you with it’s services, if
required. We will take steps to ensure adequate protections are in place to ensure the security
of your information. The EEA comprises the EU member states plus Norway, Iceland and
3. Data retention
The Company will retain your personal data only for as long as is necessary. Different laws
require us to keep different data for different periods of time.
Where the Company has obtained your consent to process your personal data, we will do so
in line with our retention policy. Upon expiry of that period, the Company will seek further
consent from you.
4. Your rights
Please be aware that you have the following data protection rights:
a. The right to be informed about the personal data the Company processes on you;
b. The right of access to the personal data the Company processes on you;
c. The right to rectification of your personal data;
d. The right to erasure of your personal data in certain circumstances;
e. The right to restrict processing of your personal data;
f. The right to data portability in certain circumstances;
g. The right to object to the processing of your personal data that was based on a public
or legitimate interest;
h. The right not to be subjected to automated decision making and profiling; and
i. The right to withdraw consent at any time.
Where you have consented to the Company processing your personal data you have the right
to withdraw that consent at any time by contacting your Consultant or the Data Protection
Officer, on [email protected]
5. Complaints or queries
If you wish to complain about this privacy notice or any of the procedures set out in it please
contact: [email protected]
You also have the right to raise concerns with Information Commissioner’s Office on 0303
123 1113 or at https://ico.org.uk/concerns/, or any other relevant supervisory authority should
your personal data be processed outside of the UK, if you believe that your data protection
rights have not been adhered to.