The CASE Privacy Policy is set out below, please read it carefully.

On occasion we include links to third parties on this website. Where we provide a link it does not mean that we endorse or approve that site’s policy towards visitor privacy. You should review their privacy policy before sending them any personal data.

1    Overview

The Consortium for the Accreditation of Sonographic Education (CASE) is committed to protecting your privacy. This privacy notice explains how CASE will use any personal information we collect from you and what rights you have.

2    Data Controller

The Data Controller is the Consortium for the Accreditation of Sonographic Education. You can contact the data controller by emailing case@ipem.ac.uk, writing to us at our registered address or by telephoning us on 01904 610821.

3    What Information we collect about you

This section shows groups of people whom we collect information about. It details (for each group) how we collect your data, what we use your personal information for, the legal basis for processing, how long we keep it, categories of personal data and who we share your data with.

3.1    CASE Accreditors

3.1.1    How we collect your data
We collect data about you directly from an application form and supporting documents (usually a CV). We also update this data through your subsequent contact with us.

3.1.2    Purposes of the processing
Personal information which you supply to us may be used in a number of ways
•    To administer your application for the role of accreditor
•    If successful in application, to publish a limited amount of information about you on the website and in the newsletter
•    To provide contact details to programme teams for designated assignments
•    To send you newsletters and updates

3.1.3    Legal basis for processing
We process your personal data under the legitimate interest basis for processing.

3.1.4    Legitimate Interest
Accreditors expect this processing to take place so that they can be approved as, and fulfil their role as an Accreditor.

3.1.5    Data retention period
We will keep hard or scanned copies of your application form, while you remain a CASE Accreditor plus 3 years; or if you are not successful your data will be deleted within 3 months.

3.1.6    Categories of personal data
We will keep the following categories of personal data:

Personal Details

•    Name
•    Post Nominals
•    Home Address (if provided)
•    Work Address
•    Home Email Address (if provided)
•    Work Email Address
•    Home Telephone Number (if provided)
•    Work Telephone Number
•    Mobile Telephone Number (if provided)
•    Job Title
•    Employer name and address
•    Photograph (if provided)

Application Information

•    Accreditor Application Form & Supporting Documents (usually a CV)

3.1.7    Who we share your data with
We share your personal data with the CASE Committee members for approval of applications and to allow assignment to be made and a limited amount of your data with universities to which you are assigned for accreditation purposes.
A limited amount of data is used on the CASE website and in the Newsletter and is therefore available publicly; this is usually restricted to a photograph (newsletter only) and employment information.

3.2    Education Providers

3.2.1    How we collect your data
We collect data about you directly from an application form for CASE Accreditation and supporting documents. We also update this data through your subsequent contact with us including the annual programme monitoring review (APMR) questionnaire and the Course Directory template.

3.2.2    Purposes of the processing
Personal information which you supply to us may be used in a number of ways
•    To administer your application
•    To administer your accreditation process
•    To administer the APMR
•    To add you to the Course Directory
•    To send you newsletters and updates
•    To contact you about and administer complaints

3.2.3    Legal basis for processing
We process personal information, with the exception of financial information under the legitimate interest basis for processing.

Financial information is processed under the legal basis for processing.

3.2.4    Legitimate Interest
Education providers expect this processing to take place so that they can receive the benefits of accreditation. Individuals are provided with the option to opt out of marketing materials.

3.2.5    Data retention period
We will keep hard or scanned copies of your application form and supporting documents, your annual APMR returns and staff CV’s while you continue to deliver a CASE accredited programme plus 5 years.

We will keep a record of your financial transactions on our finance system for a period of 6 years to meet our legal obligations.

3.2.6    Categories of personal data
We will keep the following categories of personal data:

Personal Details of Contacts

•    Name
•    Post Nominals
•    Work Address
•    Work Email Address
•    Work Telephone Number
•    Mobile Telephone Number (if provided)
•    Job Title

Other Information

•    Staff CV’s
•    Name of External Examiners

3.2.7    Who we share your data with
We share your personal data with the CASE Committee members for approval of applications, with Accreditors for the accreditation process and with the APMR team for the annual review.  

The information you provide on the Course Directory template is available publicly via the CASE Website.

3.3    CASE Committee Members

3.3.1    How we collect your data
We collect data about you at the point of approach, usually by you Member Organisation, and then we will collect the data from you directly. We also update this data through your subsequent contact with us.

3.3.2    Purposes of the processing
Personal information which you supply to us may be used in a number of ways
•    To administer the CASE Committee
•    To send you newsletters and updates
•    To list you on the website
•    To pay expenses (usually Chair only)

3.3.3    Legal basis for processing
We process personal information, with the exception of financial information under the legitimate interest basis for processing.

Financial information is processed under the legal basis for processing.

3.3.4    The Legitimate Interest
Committee Members expect this processing to take place so that they can maintain their position on the Committee.

3.3.5    Data retention period.
We will keep a soft record of your data while you remain a Committee member of CASE plus 3 years.

We will keep a record of your financial transactions on our finance system for a period of 6 years to meet our legal obligations.

3.3.6    Categories of personal data

•    Name
•    Post Nominals
•    Home Address (if provided)
•    Work Address
•    Home Email Address (if provided)
•    Work Email Address
•    Home Telephone Number (if provided)
•    Work Telephone Number
•    Mobile Telephone Number (if provided)
•    Job Title
•    Employer name & address
•    Member Organisation
•    Photograph (if provided)
•    Short biography (if provided)
•    Bank account name, sort code & account number (if applicable)

3.3.7    Who we share your data with
We share some of your data within the Committee and a limited amount is used on the CASE website and in the Newsletter and is therefore available publicly; this is restricted to a photograph, work email, short biography and employment information.

3.4    Website Visitors

3.4.1    How we collect your data
Personal data is only collected by CASE if a visitor to the website completes and sends the ‘Contact Us’ form.  

Anonymous, statistical data is collected by our website providers 1&1; please refer to their privacy policy for further details.

3.4.2    Purposes of the processing
Personal information which you supply to us may be used in a number of ways
•    To provide a response to your email
•    To keep a log of enquiries

3.4.3    Legal basis for processing
We process personal information under the legitimate interest basis for processing.

3.4.4    The Legitimate Interest
Visitors who contact CASE via the website expect this processing to take place so that they can receive a tailored response to their question or feedback.

3.4.5    Data retention period.
We will keep a soft record of your data on the enquiries log for the duration of the document’s life.

3.4.6    Categories of personal data

•    Name
•    Email Address
•    Country of Residence

3.4.7    Who we share your data with
Your data will only be shared within CASE.

4    How we will keep your data safe

We take appropriate security measures, including  restricted access to electronic files and locked storage to ensure that we keep your information secure, accurate and up to date, and that we only keep it for as long as is reasonable and necessary.

5    Your Rights

You have rights under data protection law that you can exercise against CASE but these do not apply in all circumstances. You can exercise those rights free of charge except in very limited circumstances, which will be explained to you if relevant.

For more information about all these rights, and how to exercise them against CASE, please contact the CASE Coordinator.

Here is a short description of your rights:

5.1    Right to Lodge a complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, the Information Commissioner (ico.org.uk) who can be contacted on 0303 123 113

.

5.2    Right of Access (Article 15)

You have the right of access to your personal data, to obtain confirmation that it is being processed, and to obtain certain prescribed information about how it is processed.

5.3    Right to rectification (Article 16)

You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of processing, you shall have the right to have incomplete data completed. This can usually be done by emailing case@ipem.ac.uk.

5.4    Right to erasure “the right to be forgotten” (Article 17)

In certain circumstances, you have the right to have your personal data erased. It is unlikely to be possible to do this if, for example, CASE has a legal duty to retain or process your information.

5.5    Right of restriction of processing (Article 18)

In certain circumstances, you have the right to obtain from CASE a restriction of processing

5.6    Notification obligation regarding rectification or erasure or restriction of processing (Article 19)

We will communicate any rectification or erasure of personal data concerning you to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

5.7    Right to data portability (Article 20)

In certain circumstances you will have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used machine readable format and you will have the right to transmit this data to another organisation.

5.8    Right to object (Article 21)

You have the right to object, on grounds relating to your situation, at any time to processing of your personal data, which is based on the legitimate interest basis for processing. We will no longer process the personal data unless we can demonstrate a compelling legitimate ground for the processing which overrides your interests, rights and freedoms.

5.9    Right not to be subject of automated decision-making (Article 22)

You have the right not to be a subject to a decision based solely on automated processing including profiling, subject to certain exclusions. CASE does not make any automated decisions.

6    Changes to this privacy notice

This notice was last updated on the 25th May 2018. CASE may amend this privacy notice from time to time to keep it up-to-date or to comply with legal requirements. If you have access to the internet, you should regularly check this privacy notice. If necessary, you may be notified of changes. Your contact details (as previously described) would be used for this purpose, based on the legal basis of compliance with legal obligations or legitimate interests (or both as relevant).