Covid Screening Policy

COVID-19 is an infectious disease affecting the whole of the country. The virus that causes COVID-19 is a coronavirus. Infectious diseases present a serious and ongoing threat to public health. If not controlled, they can infect large numbers of people and, depending on the disease and other factors, can result in ill-effects ranging from relatively minor symptoms to early death.

Contact tracing is an important way of controlling the spread of infectious diseases. It involves identifying and tracing all the people who have been in contact with a person who has been infected. Depending on the nature and duration of the contact, these contacts may require advice or treatment to prevent the disease from spreading further.

The development of the NHS Track and Trace and NHS Scotland Trace and Protect schemes are an important part of the government plan to manage Coronavirus.

We may use your personal information for the following purposes:

• Making a risk-based decision on whether you may be safely admitted to one of our venues.
• Monitoring the efficacy of our infection control procedures.
• Reporting to NHS Test and Trace and the BHA when required.
• identifying and implementing lessons from the management of any infections or related incidents at one of our venues.

Any party processing personal data must have a lawful basis for doing so. The data collected through this questionnaire will be processed under the following lawful bases:

Compliance with legal obligations

As an entity established under the laws of England and Wales, The Jockey Club is obliged to comply with UK laws and guidance provided by UK regulatory bodies. In particular, we will need to process your personal information to understand the risk of you being infected with COVID-19 and to trace anyone who may have been in close contact with a person who is subsequently diagnosed with COVID-19.

The Jockey Club is also obliged by law to collect your data and share it with public health officers, where necessary, under Section 251 of the National Health Service Act 2006 and the associated Health Service (Control of Patient Information) Regulations 2002, and The Health Protection (Coronavirus) (Restrictions) (Scotland) Amendment (No. 11) Regulations 2020.

Public Interest

Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Due to the nature of the data being processed; in this instance containing special category data (data concerning health), a separate condition for processing is required. The following conditions may be used to process the data collected through this form:

• Reasons of substantial public interest
• Public health

We may share your personal information with other organisations to support national and local action to control and prevent the spread of coronavirus.

If we do share your personal information, we only do so where the law allows and we only share the minimum necessary amount of information.

With NHS Digital

NHS Digital provides information and technology services to the health and care system. It has been directed by the Secretary of State for Health and Social Care and NHS England to collect and analyse data relating to COVID-19 and develop and operate IT systems to deliver services to respond to COVID-19. We share the personal information we collect on coronavirus test results and hospital admissions for COVID-19 with NHS Digital. We also receive back from NHS Digital any information we need that is missing from these results, such as your ethnic group or telephone number.

You can find privacy information on the data NHS Digital collects and uses to support the government’s response to coronavirus.

With NHS Test and Trace

NHS Test and Trace forms a central part of the government’s coronavirus (COVID-19) recovery strategy. It aims to ensure that anyone who develops symptoms of coronavirus can be tested quickly, and helps trace the close recent contacts of anyone who tests positive to notify them that they must self-isolate to help stop the spread of the virus.

The Department of Health and Social Care has published an overview of how NHS Test and Trace works.

The NHS Test and Trace Privacy Notice can be found here: https://contact-tracing.phe.gov.uk/help/privacy-notice

With our data processors

We may share your personal information with organisations we have contracted to help us respond to coronavirus, including IT Service providers such as Microsoft.

These organisations are known as data processors and are acting on our instructions. They are not allowed to use your personal information for any purposes other than those specified by us, they are not allowed to keep your information once their work for us has ended, and they must comply with strict data security and protection requirements when processing your information on our behalf.

With the police and the Home Office

We may share your personal information with the police to help them investigate reports of people who may be breaking the self-isolation requirement. The police may in turn share this information with the Crown Prosecution Service to decide if enforcement action is appropriate.

Other sharing of your information

We may share your information in other ways to help control and prevent the spread of coronavirus. This will only occur where there is a lawful basis for doing so.

Your personal data will be retained by us for at least 3 weeks (21 days) following the event. All personal data will be held and disposed of in a safe and secure manner.

As defined in the data protection law, GDPR Article(s) 12-23, you have the following rights:

• The right to be informed about the collection and use of your personal data. This is outlined above.
• The right to access the information we hold about you; also known as a Subject Access Request (SAR).
• The right to request rectification of any inaccurate personal data we hold about you. In certain circumstances exemptions to these rights may apply. Further information is available on the Information Commissioner’s Office website.

If you consider that your personal data has been misused or mishandled by us, please contact our Data Protection Officer by email at dpo.@thejockeyclub.co.uk. they will investigate the matter and respond to you.

If you remain dissatisfied you can make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted as follows:

Information Commissioner’s Office Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113 

Email:casework@ico.org.uk

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Contains public sector information licensed under the Open Government Licence v3.0.