This privacy notice specifically applies to individuals who donate blood to Gertrude’s Children’s Hospital.
Introduction
Gertrude’s Children’s Hospital (“Gertrude’s,” “we,” “us,” or “our”) is committed to protecting the privacy of blood donors and handling your personal data responsibly, in accordance with the Data Protection Act, 2019, and other applicable laws and regulations in Kenya. This privacy notice explains how we collect, use, store, and process your personal data when you donate blood.
The Kind of Personal Data We Collect
We collect the following types of personal data from blood donors:
- Personal details: Name, title, gender, nationality, date of birth, place of birth, age, national identification/passport number, addresses, telephone numbers, personal email addresses.
- Health data: Current and previous medical conditions, health reports, genetic information, and screening results.
- Donation details: Donation history, date and time of donation, and records related to the donation process.
- Contact and communication details: Information used to communicate with you about donations, appointments, and related matters.
Purposes of Processing
We process blood donor data for the following purposes:
- Recruiting, screening, and managing blood donors.
- Collecting, testing, and storing donated blood.
- Ensuring the safety and quality of blood products.
- Managing blood inventory and distribution.
- Communicating with donors.
- Complying with legal and regulatory obligations.
Lawful Basis for Processing
We process blood donor data based on one or more of the following lawful bases:
- Consent: You have given consent for us to process your data for the specific purpose of blood donation.
- Legal obligation: Processing is necessary for us to comply with legal and regulatory requirements related to blood donation and transfusion.
- Vital interests: Processing is necessary to protect your life or the life of a patient receiving the blood.
- Public interest: Processing is necessary for a task carried out in the public interest, such as ensuring the availability of safe blood supplies.
- Medical purposes: Processing is necessary for medical purposes and carried out by healthcare professionals.
Disclosure of Your Personal Data
We may disclose your personal data to the following categories of recipients:
- Hospital staff: Healthcare professionals and staff involved in the blood donation and transfusion process.
- Testing laboratories: Laboratories that perform tests on donated blood.
- Other healthcare facilities: When blood is transferred to other facilities for patient care.
- Regulatory authorities: As required by law.
- Blood Transfusion Centers in Kenya
- Kenya Tissue and Transplant Authority
Data Security
We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized access, use, disclosure, alteration, or destruction.
Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.
Your Data Protection Rights
You have rights under the Data Protection Act, 2019, including the right to access, rectify, erase, restrict processing, object to processing, and data portability. To exercise your rights, please contact our Data Protection Committee.
Contact Us
If you have any questions or concerns about this privacy notice or our data processing practices, please contact our Data Protection Committee. dpc@gerties.org
