Privacy Notice
At Abbott, we are committed to complying with our obligations under the UK Data Protection Act 2018 as amended from time to time (the "DPA"), both UK and EU General Data Protection Regulation (GDPR) and other global privacy laws, collectively referred to as 'Data Protection laws'. Therefore, we would like to inform you about the purposes for using the Chemist on Call Portal and to inform you how we use your personal data.
The Chemist on Call service is a medication checking service. Certain medicines can cause side effects which can be extremely dangerous and hazardous and may increase the risk of accidents within the workplace, particularly within safety critical environments. Chemist on Call is operated by a team of industry specialist pharmacists, providing appropriate advice on the risk of side effects along with clear instructions on work restrictions if necessary.
ABBOTT AS DATA PROCESSORS
Abbott will process the personal data recorded according to the instructions of the organisation(s) requesting the medication check under UK GDPR and DPA 2018, where we are acting as the Data Processor on behalf of your/the employer (the Data Controller).
WHAT INFORMATION DO WE NEED TO COLLECT:
We need some or all of the following information to provide the service requested by the Data Controller: your name, phone number, email, date of birth, job title, information about your/ the employees role (e.g. safety critical, lone working, referred to occupational health), all medications taken including strength, frequency, last dose and side effects.
HOW WE OBTAIN THE INFORMATION:
All the information we process is provided directly to us by yourself or the authorised person making the check on your behalf.
LAWFUL BASIS:
Under GDPR, the lawful basis we rely on for processing this information is:
A) Abbott have a contractual obligation with your employer or organisation
B) Your employer/ organisation have a legal obligation
C) We have a legitimate interest
WHAT DO WE DO WITH THE INFORMATION WE PROCESS ON BEHALF OF THE DATA CONTROLLER?
We use the information provided as part of the medication check to provide appropriate advice on the risk of side effects along with clear instructions on work restrictions if necessary. If you are making the check or are the employee for whom the check was completed for, you will receive the full outcome report with the medication details included. If the line manager is not making the medication check they will receive a different version of the outcome report with medication details removed. Depending on medication entered, we may also provide access to the collected data to our approved pharmacists to conduct the review and provide outcome/s.
HOW WE STORE THE INFORMATION:
Data obtained is encrypted both in transit and at rest. Data is stored electronically within the UK at our ISO 27001 accredited Data Centre. Data is retained for a period of 3 years.
ACCEPTANCE
By accessing the portal we have your acceptance to the information provided in this privacy policy.