Optalis Standard Privacy Statement

Optalis is committed to protecting and respecting your privacy.

Easy Read guide about how we use and store your information
Home Optalis Standard Privacy Statement

Whenever we collect personal data we need to tell people why we are collecting it and what we are going to do with it. The statement below is standard across all our documentation, where we collect personal information. The statements are backed up by a full privacy statement which is a longer document that goes into our processing and sharing arrangements in more detail.

You can click on the links below to read our:

During pandemic situations, Optalis may collect or share more information about you than usual in order to protect public health, our customers, our employees and others that may come into contact with us. Find out more in our Privacy notice – Addendum for COVID-19 document

In this section: 

 

Personal data means data which relate to a living person who can be identified from those data, or from those data and other information which is in (or is likely to come into) our possession. It includes any expression of opinion about the person and any indication about our intentions in respect of the individual (for example, our intention to stop services – even if this is not carried out).

Special Category personal data (also known as sensitive personal data) is more detailed information about a person that could potentially be used to unfairly target or discriminate against someone. See description of ‘sensitive personal data’

Special Category (Sensitive) personal data:

Some personal data are defined as special category data by the Data Protection Act and the GDPR. Special category data will contain one or more pieces of information about an individual's:

  • Racial or ethnic origin
  • Political opinions, religious or philosophical beliefs
  • Trade union membership
  • Genetic or biometric data
  • Health
  • Sex life or sexual orientation
  • Criminal convictions and offences – although not strictly classed as special category data under GDPR they should be treated as such.

Conditions for processing special category data

We are not permitted to process sensitive data about an individual unless we have a legal basis for doing so and we satisfy at least one of the following:

  1. We have the explicit, informed and freely given consent of the individual has been obtained. This means:
    - the consent must be in writing (including online electronic indications), and
    - the individual has been informed of what information is to be processed, and
    - no detriment will be suffered by the individual if they refuse to give consent
  2. Processing is necessary for the obligations and rights of Optalis or of the data subject in the field of employment and social security and social protection law
  3. Processing is necessary to protect the vital interests of the data subject or someone else where the data subject is physically or legally incapable of giving consent
  4. The information has been made public by the data subject
  5. Processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity
  6. Processing is necessary for reasons of substantial public interest
  7. Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and service
  8. Processing is necessary for reasons of public interest in the area of public health