GDPR & Data Protection
Gaoth Dobhair Medical Centre is the data controller for the personal information we hold about our patients. This notice explains what we collect, why we collect it, how long we keep it and what your rights are under the General Data Protection Regulation (GDPR).
What information we hold
- Your name, address, date of birth, contact details and PPS number
- Medical card or GP visit card details
- Your medical history, consultations, prescriptions and test results
- Letters and reports from hospitals and other healthcare providers
- Details of next of kin and, where relevant, your carer
Why we hold it
- To provide you with medical care and continuity of treatment
- To refer you to hospitals, consultants and other services
- To meet our legal and regulatory obligations, including HSE scheme claims
- To invite you to screening, vaccination and chronic illness clinics
Who we share it with
We share information only where necessary for your care or where we are legally required to: hospitals and consultants involved in your treatment, laboratories, community services such as public health nursing, the HSE for scheme administration, and your nominated pharmacy. We never sell your data or use it for marketing.
Ní roinnimid eolas ach nuair is gá é do do chúram nó nuair a bhíonn dualgas dlíthiúil orainn. Ní dhíolaimid do shonraí riamh agus ní úsáidimid iad ar mhaithe le margaíocht.
How long we keep it
Adult medical records are retained for at least eight years after the last entry. Records for children are kept until the child reaches the age of 25 (or 26 if the last entry was made at 17), in line with HSE retention guidance.
Coinnítear taifid leighis daoine fásta ar feadh ocht mbliana ar a laghad tar éis an iontrála deireanaigh. Coinnítear taifid leanaí go dtí go slánaíonn an leanbh 25 bliain d'aois, de réir treoir choinneála an FSS.
Your rights / Do chearta
You have the right to access a copy of your records, to have inaccurate information corrected, to restrict or object to certain processing, and to data portability. You also have the right to withdraw consent — for example, for text message reminders — at any time.
To make a request, write to the practice or speak to reception. We will respond within one month. Requests for access to records are free of charge in most cases.
If you are unhappy with how we have handled your information you may complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2 (www.dataprotection.ie).
Data protection contact
An Bun Beag, Gaoth Dobhair, Co. Donegal, F92 VXY4