M.E.R.T. International
MEDICAL | EMERGENCY | RESPONSE | TEAM
Privacy Notice
MERT International Limited (‘MERT’) provides trained and accredited medical personnel to cover complex industry activities and high risk operations. MERT is registered as a data controller with the Information Commissioner’s Office (Registration No: ZA288503).
MERT is committed to ensuring that all personal data we hold is processed in accordance with data protection law and that good data protection practice is imbedded in the culture of our staff and organisation.
MERT processes the personal data of our employees, our clients, contacts, suppliers, contractors and their staff and those who receive medical treatment from MERT and our contractors.
This notice sets out how we process data and the rights data subjects have in respect of their personal data. A separate privacy notices applies to our employees.
We have appointed a Data Protection Officer who may be contacted by you in relation to queries regarding your personal data:-
Rosalind Robertson
The Studio Offices
Kirkhill House Office Park
81 Broom Road East
Glasgow
G77 5LL
UNITED KINGDOM
+44(0)844 800 0906
What information does MERT collect?
MERT collects and processes a range of information containing personal data about you. The personal data processed by MERT will vary according to our relationship with you as follows:-
Our clients, contacts, suppliers and their staff
-
Name, address and contact details, including email address and telephone number
-
Financial information such as bank account, debit or credit card details (where you are paying for our services or MERT is paying you)
Our contractors and their staff
-
Name, address and contact details, including email address and telephone number
-
Financial information such as bank account, debit or credit card details (where we are making a payment to you)
-
Your nationality, employment status and national insurance number, visa and other information relating to your entitlement to work in a particular country
-
Details of your professional qualifications, training and experience
-
Details of assessments undertaken as part of ongoing competency monitoring and continuing professional development
-
Details of your work schedule and pattern
-
Photographs or video footage captured during site survey and inspection
Recipients of medical treatment
-
Name, address and contact details, including email address and telephone number
-
Details of your emergency contacts and next of kin
-
Information relating to your health and any incident or accident you have been involved where treatment has been required by MERT and its contractors
-
Information relating to any illness or condition suffered by you (new or pre-existing) which has required treatment by MERT and its contractors
-
Details of the treatment and medication provided or recommended
-
Information about your lifestyle which is relevant to your treatment
-
Photographs or video footage captured during site survey and inspection
MERT may collect this information in a variety of ways including directly from you, when you use our website or online “contact us” tool or from third parties, including any other individual or organisation involved in your instruction or treatment, our medical contractors, from your employer, other organisations who have referred you to us, your GP or other medical professional consulted by you, your insurance company, or from any representative appointed to act on your behalf.
Your personal data will be retained in hard copy in files which are stored in a locked cabinet/room and in MERT’s IT system.
Why does MERT process your personal data?
We will use your contact details prior to you becoming a client, supplier or contractor to contact you and for the purposes of entering into a contract with you.
Where you have entered into a contract with MERT, we need to process your personal data in order to meet our obligations and exercise our rights in terms of that contract.
In other cases, MERT has a legitimate interest to process your data, for example where your personal data is relevant to the provision of our services or receipt of services from you or your employer and where we have a legitimate interest to process personal data in order to provide or receive those services.
We will also process personal data insofar as necessary to comply with legal obligations to which MERT is subject, for example in relation to Health & Safety regulations or provision of healthcare.
We will also process personal data (including special category data, particularly health data) where it is necessary in connection with legal proceedings (or prospective legal proceedings), obtaining legal advice or for the establishment, exercise or defence of legal claims.
We will process special category data where it is necessary for the purposes of carrying out obligations or exercising rights in respect of employment or providing healthcare or treatment.
There may be some occasions where we seek your consent to process personal data (but in this case we will provide full details of what we are seeking consent for, so that you will be able to carefully consider whether to provide that consent). Where you have provided consent to us for processing, you have the right to withdraw that consent.
Who has access to data?
Your information may be shared within MERT as appropriate to the services which MERT is to provide or receive.
We will also share your data as required by law.
MERT also shares your data with third parties, including sub-contractors engaged by MERT to provide services on our behalf MERT, including IT and software service providers; cloud computing services providers, confidential waste disposal services and document storage providers. Where we use these providers, we have appropriate contractual arrangements in place to ensure the security and confidentiality of your data.
We will also share your personal data with third parties where it is necessary for the purposes of providing our services:- to contractors who deliver our services, your GP or other medical professional, your employer, your insurer, translators, and any representative appointed to act on your behalf.
MERT may also share your data with third parties in the context of a sale of some or all of its business. In those circumstances the data will be subject to confidentiality arrangements.
If your personal data is transferred outwith the UK or the EEA we will ensure that adequate safeguards are in place, an adequacy finding exists in respect of the country of transfer or other contractual arrangements are in place as required by law to protect your data.
How does MERT protect data?
MERT takes the security of your data seriously. We maintain confidentiality in relation to our clients and those who receive treatment. MERT has internal policies and controls in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees in the performance of their duties. We use appropriate standards of technology and operational security to protect your personal data. Please see our Data Protection Policy for further detail.
Where MERT engages third parties to process personal data on its behalf, they do so on the basis of written instructions from MERT, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data. They are also not allowed to use your personal data for their own purposes.
How long does MERT keep your data?
MERT will hold your personal data for the duration of any contract with you and for a fixed period thereafter. Where we do not have a contract with you, we will only hold your personal data for as long as is necessary for the purpose it is processed. The periods for which your data is held are set out in MERT’s Data Protection Policy.
Your rights
As a data subject, you have a number of rights. These include the right to:
-
Access and obtain a copy of your data on request;
-
Require MERT to change incorrect or incomplete data;
-
Require MERT to delete or stop processing your data, in certain circumstances;
-
Object to the processing of your data where MERT is relying on its legitimate interests as the legal ground for processing;
-
In certain circumstances, be provided with data in a portable form; and
-
Object to automated decision making.
If you would like to exercise any of these rights or if you have any concerns about how your personal data is being processed, please contact MERT:
Rosalind Robertson
The Studio Offices
Kirkhill House Office Park
81 Broom Road East
Glasgow
G77 5LL
UNITED KINGDOM
+44(0)844 800 0906
If you believe that MERT has not complied with your data protection rights, you can complain to the Information Commissioner. Further information is available at www.ico.org.uk.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
0303 123 1113
What if you do not provide personal data?
Where you have entered into a contract with MERT for provision of services, failing to provide the data may mean that MERT is unable to properly implement the contract and that you are unable to exercise certain contractual rights.
MONITORING AND REVIEW
This policy was last updated on in November 2020 and shall be regularly monitored and reviewed. We may amend this notice from time to time and will notify you of any significant changes.