My guiding principle is that I hold your information in the strictest confidence. If you are happy with how I use your information you do not need to do anything.
Why we process your personal information
We process personal information to enable me to carry out my regulatory duties which may include:
The type of personal information we process
We process information relevant to the above reasons/purposes which may include:
We also process special category personal information that may include:
Who the information may be shared with
Information sharing is subject to strict agreements on how it is used. Unless I am automatically required to share your information by law, or have in place an agreement/contract with a third-party service provider to process information on my behalf or assist me in providing services I will normally let you know if I need to share or release your information - unless the health and safety of others is at risk or it is required to carry out a statutory function.
You should expect that your information may be shared with the CAA/EASA and relevant partner organisations to help provide you with better advice and care.
You can object to sharing information with other relevant parties but this may limit my effectiveness as your Aviation Medical Examiner.
Please feel free to ask at your consultation who any information will be shared with.
How long we keep your personal information
We keep your personal information for as long as you have a relationship with me and, thereafter, for specified purposes in line with legal requirements, to respond to any questions or to maintain records according to European or National aviation rules that apply.
More information on GDPR can be found from the following links:
GDPR regulations: http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN
Under GDPR, the data protection principles that are required can be found here: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/principles/
The conditions for processing special category data are listed in Article 9(2) of the GDPR, but the most relevant one will likely to be:
‘Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3’
SOMS Ltd. Registered in England. Company No: 5594814
Southern Occupational Medicine Services Ltd.