Cardiff & Vale University Health Board is the data controller for any personal data that is submitted via this website.

•  Spindogs Ltd has been enlisted as a data processor to deliver and manage this website on behalf of the UHB.
• Any personal data submitted for the purpose of querying or suggesting website content will be processed under the Legitimate Interests lawful basis – UK GDPR, Article 6(1)(f). The Legitimate Interest identified is the provision of service information to citizens.
• Any personal data submitted for the purpose of providing healthcare (including data submitted for the purpose of requesting call-backs) will be processed under the Public Interest lawful basis – UK GDPR, Article 6(1)(e).
• Data will be retained in line with the Records Management Code of Practice 2016/2020.
• You have a Right of Access, a Right to Rectification and a Right to Object to the processing of personal data by the UHB.
• You have the right to lodge a complaint with the Information Commissioner’s Office if you are dissatisfied with how your personal data has been handled.
• For any complaints in relation to how your data has been handled, please contact Uhb.Dpo@wales.nhs.uk
• To see more information in relation to see how your information is processed, please see our privacy notice at https://cavuhb.nhs.wales/use-of-site/privacy-policy/