Premex Services Limited (trading as 3D Rehabilitation) Privacy Notice – Injured Parties
WHO WE ARE
Premex Services Limited (trading as 3D Rehabilitation) (“we”) are a provider of specialist outsourcing services to the insurance and legal industries.
We have been asked to contact you by your insurer or solicitor, to carry out the following service:
- Facilitate in the provision of rehabilitation and diagnostics services to injured parties.
THE PURPOSE FOR PROCESSING:
We will need to process your personal data, and in particular personal data relating to your health, for the following reasons:
- To provide you with a suitable rehabilitation provider. This can include sourcing relevant medical records, identifying a suitably qualified rehabilitation provider and, where appropriate arranging individual sessions.
- To provide you with service updates or important notices that we think may impact on our ability to deliver services to you.
- In order to defend any claim that may be brought against us in respect of the work we undertake as a business.
- To process your personal data in line with any legal obligations we are required to comply with. This will include our obligations to you in relation to the processing of your personal data.
- To carry out market research to help us improve our services and product offerings, however we will ask for separate consent prior to this.
We can assure you that we will only ever process the minimum personal data required to carry out the services identified above.
LAWFUL BASIS FOR PROCESSING
We will process your personal data in line with the following lawful bases:
We operate on the instructions of an insurer/solicitor that is directly engaged with you. They are responsible for ensuring that the correct controls are in place to enable us to lawfully undertake our work.
We operate on the basis that you are already actively aware of our involvement in this process and you fully expect us to provide this service to the insurer/solicitor that we have received our instructions from.
We may be required to process your personal data to comply with our legal obligations. This can include complying with a subject access request you have made or supplying personal data to public authorities once we have verified a request.
CATEGORIES OF PERSONAL DATA COLLECTED
We will have received the following information from your insurer/solicitor prior to us getting in touch with you:
- Your name, basic personal information (address, date of birth) and contact details
- Basic information relating to your claim
- We may also be provided with instructions on the particular type of rehabilitation provider, especially in cases where specialist rehabilitation providers are required.
- Information relating to your health, this can include your medical records and we will also have sight of the reports produced by the rehabilitation/diagnostics provider.
CATEGORIES OF RECIPIENTS
- We will never share your information with any third parties that intend to use your personal data for their own purposes, other than what they are required to by law.
- We will be required to transfer your personal data to the nominated rehabilitation provider as they will require this to provide rehabilitation services to you.
- We will also share your personal data with selected third parties who assist us in our service provision to you.
- All third parties are fully vetted to ensure that your data is only shared and stored with companies that comply with all applicable Data Protection Regulations, including the General Data Protection Regulation and the Data Protection Act.
- Your personal data will not be shared or stored outside the European Economic Area.
As a maximum, we will retain your personal data:
- During the course of our service provision and;
- For a further 7 years following the settlement of your claim
We will only use your personal data to the extent necessary to comply with our legal obligations (for example for HMRC financial accounting obligations as well as to enable us to defend any claim that may be brought against us in respect of the work we undertake as a business).
Under the Data Protection Act, you have the following rights in relation to your personal data.
- Right to Access - You have a right to request a copy of your personal data.
- Right to Rectification - You have the right to ask us at any time to make any corrections or remove any personal data that you believe is inaccurate.
- Right to Erasure - You have the right to request the erasure of the personal data. However, we may still need to retain personal data to comply with our legal obligations. In the event of a request we will provide you with full details of the personal data that we are required to retain.
- Right to Restriction - You have the right to request a restriction in the processing of your personal data.
- Right to Objection - You have the right to object to the processing of your personal data.
We will aim to respond to any requests relating to your rights without undue delay and in any case within 1 calendar month of receipt of your request. If we are unable to comply with a request for any reason, then we will provide you with a full justification in writing within 30 calendar days of receipt of your request. We may ask you to confirm your identity so that we can validate a request. If you would like to make a request, please email or write to us using the contact details provided below.
We will also notify your insurer/solicitor if we receive a request from you. As we are processing your data on the instruction of your insurer/solicitor, we act as a data processor. Should your insurer/solicitor, as the data controller, object to us complying with your request, we will notify you accordingly.
If you are unhappy about any aspect of our process and you would like to file a complaint, please contact us using the details below.
Alternatively, if you would like to make a complaint or report a concern about the way in which we have processed your personal data then please contact the Information Commissioner’s Office who will be able to provide further assistance.
If you have any further questions or would like to raise any concerns about the way in which your personal data has been processed, please feel free to contact our Data Protection Officer using the information provided below:
Email: email@example.com. – Please indicate in the header of the email that the email is intended for the Data Protection Officer.
Write to us:
Data Protection Officer
Legal and Compliance Dept
Futura Park Middlebrook