Our privacy statement outlined below provides information about how your personal data is collected, stored, and transmitted.
1. Information About Us:
Katerina Anesti Plastic Surgeon
Data Protection Officer: Katerina Anesti
Katerina Anesti Plastic Surgeonis regulated by The General Medical Council.
Katerina Anesti Plastic Surgeonis a member of British Association of Aesthetic Plastic Surgeons (BAAPS) and British Association of Plastic, Reconstructive and Aesthetic Surgeons(BAPRAS)
2. What Does This Notice Cover?
This Privacy Information explains how we use your personal data: how it is collected, how it is held, and how it is processed. It also explains your rights under the law relating to your personal data.
3. What is Personal Data?
Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.
Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers. The personal data that we use is set out below.
4. The type of personal information we collect
Miss Anesti’s admin team will collect information from you or a second party involved in your medical care. The personal details we will require from you are your full name, date of birth, correspondence address, email and telephone contact details, as well as any GP or referring clinician details and your payment particulars. If you are insured, we will require your insurance details including your membership and authorisation number for your appointment or procedure.
We may also collect medical notes, prosthesis information, correspondence from second parties involved in your care including insurers, guarantors, clinicians, GPs etc. Following payments, invoices will be kept on file along with any receipts for accounts and auditing purposes. These are confidentiality destroyed at the end of their retention period and in line with current legislation.
Miss Anesti may also collect surgical photographs during your consultation. You will be asked as part of your patient consents whether you permit us to use or share this information.
5. How we get personal information and why we have it
Most of the personal information we process is provided to us directly by you in order to ensure good and safe medical practice and collect this in line with the current Data Protection Act. Miss Anesti has a legal obligation to collect your personal data and this is in line with the legitimate and vital interests of your medical care and Miss Anesti’s legal obligation as a medical professional. We collect and process this information using your consent. We also process your medical information, otherwise known as special category data under Article 9 of the Data Protection Act. We collect this data using your explicit consent to do so and in line with our legal duties to process and retain information in the event of exercising or defending a legal claim.
6. We may share this information with
Any of the below second and third parties directly involved in your care and in line with our business requirements:
- General Practitioners
- Any hospital where your procedure, test or consultation is taking place
- Your insurer or guarantor
- A third party of your choosing (If you wish correspondence to be sent onto your next of kin or a particular consultant)
- Our accountant and HMRC
- Surgical and prosthetic companies
- The NHS Implant Registry
- Transcription services
Should you wish for us to not correspond with any of the above parties please ensure you inform us in advance or at the time of your initial consultation. We will only share your information with second and third parties who will look after your information in the same meticulous way that we do. These parties are also regulated by the Information Commissioners Office and must comply with current legalisation.
7. How we store your personal information
Your personal and medical information is kept securely on our electronic systems. Any paper copies of medical notes are securely stored to ensure adequate patient confidentiality. This information is securely destroyed after suitable medical data retention periods.
8. Keeping in contact
We will need to contact you to send you vital information concerning your medical care. We may contact you via email or post to send letters and correspond with you regarding procedures, appointments and general medical queries.
We may also contact you by telephone and in the event that we cannot reach you we will leave a voicemail. We will not identify the reason for our call but will state that we are calling from Miss Anesti’s office and ask that you call us back. We will also contact you by text message to confirm appointments. You should inform us if you do not wish us to communicate with you via any of these methods.
9. Disclosure of your personal information outside of the European Union
We do not send your personal information outside of the European Union unless you have an international Insurer in which case this information will be sent to them via encrypted email.
10. Updating your information
We ask that you keep us updated with any changes in your personal details. Please see our Right to Rectification procedures for further information.
11. Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us directly if you wish to make a request.
12. How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us directly.
You can also complain to the ICO if you are unhappy with how we have used your data.The ICO’s address:
Information Commissioner’s Office