NHS UK photography content: GDPR information
Summary
Why and how we process your data in the NHS UK photography content, and your rights.
| Controller | NHS Digital |
| How we use the information (processing activities) | To contact subject to validate consent when necessary and to help identify photos within our database should the subject wish for them to be removed. |
| Does this contain sensitive (special category) data such as health information? | No |
| Who are recipients of this data? |
Publicly available |
| Is data transferred outside the UK? | Outside Europe - Photographs |
| How long the data is kept | 3 years minimum after no longer required |
| Our lawful basis for holding this data | Consent |
| Your rights |
|
| How can you withdraw your consent? |
Yes - via designated mailbox, limited to any future usage |
| Is the data subject to decisions made solely by computers? (automated decision making) | No |
| Where does this data come from? | Public events |
| The legal basis for collecting this data | Explicit Consent |