GDPR Policy

The General Data Protection Regulations (GDPR) came into force on 25th May 2018.

GDPR gives individuals the right to access/correct their personal data and to prevent it being used for marketing purposes.

The Civil Aviation Authority has declared that it is the data controller, AMEs are data processors and the individual (Pilot/ATCO/Cabin Crew/Parachutist etc) is the data subject. AMEs have a signed agreement with the CAA on this matter.

AMEs have a duty to adhere to the guidance issued by the General Medical Council. Its publication “Good Medical Practice” stipulates that doctors must maintain accurate and contemporaneous client/patient notes. All client data is treated as confidential. Client records are kept securely until the retirement of the AME - they are then sent to the CAA for amalgamation with the client’s electronic records. European Aviation Safety Agency rules regarding confidentiality are recorded in AMC1 MED.A.015 Medical confidentiality and ATCO.MED.A.015./p>

Personal medical data is passed onto the data controller (the CAA in this case) and stored on its electronic patient records system. As well as acting as a data processor, I also store client information as described below….

1. I scan all client records/results/reports/identity information into an encrypted pdf format which is backed-up to an off-site secure storage system. Any paper records are shredded and disposed of securely. Signed consent is sought before any data is retained or sent.

2. Through my website I maintain a list of past and current clients with details of contact numbers/email addresses and bookings. The website system sends out periodic reminders when medicals are due. This information is also password-protected and encrypted.

Cheshire-Aeromedical Ltd. is registered with the Information Commissioners Offce and they have produced the guidance shown below regarding an individuals data protection rights:

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectifcation - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal data in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at Cheshire-Aeromedical Ltd. 9 Hadrian Way, Sandiway, Northwich CW8 2JR if you wish to make a request.

How to complain

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Helpline number: 0303 123 1113

Rest assured that data privacy is very important to me. As well as following all the regulations contained in GDPR and the guidance issued by the ICO, I will never retain or share your data without your consent. I do not use your data for marketing purposes or allow anyone else to use it. I will notify you (and the ICO/CAA) if your data is compromised. I assess the impact of technology implementation as it occurs e.g. using 3rd-party internet access.

Dr Mark McKenzie AME 504333F