Website privacy policy

The Royal College of Radiologists is a charity that works with our Fellows and members to improve the standard of medical practice across the fields of clinical radiology and clinical oncology. The Royal College of Radiologists is a registered charity (no.211540). The registered address is 63 Lincoln’s Inn Fields, London, WC2A 3JW.

Our nominated representative for the purpose of applicable data protection Legislation is the College Data Protection Officer who can be contacted at data_protectionofficer@rcr.ac.uk

We may collect and process the following personal data about you:

• Information that you provide by filling in forms on our site www.rcr.ac.uk (‘our site’). This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services. We may also ask you for information when you report a problem with our site
• If you contact us, we may keep a record of that correspondence
• Information you provide in response to surveys that we use for research purposes, although you do not have to respond to them
• Details of transactions you carry out through our site (including payment details) and of the fulfilment of your orders; and/or
• Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for billing purposes or otherwise and the resources that you access;

IP addresses

We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.

Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our cookie policy.

Where we store your personal data

The data that we collect from you may be transferred to, and stored at, a destination outside the United Kingdom or the European Economic Area (‘EEA’). It may also be processed by staff operating outside the United Kingdom or the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details, the provision of support services or activities such as delivering conferences outside the UK or the EEA. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology.  Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

We may use information held about you in the following ways:

• To ensure that content from our site is presented in the most effective manner for you and for your computer (lawful basis: Legitimate Interests)
• To better understand your interests and preferences. We may use this analysis to create more tailored website experience for you. (lawful basis: Consent)
• To provide you with membership services and enhanced member benefits (for example to provide you with copies of and electronic access to our journal and other relevant publications) (lawful basis: Contract)
• To provide you with: information; details of events; details of learning and development opportunities; and, services that you request from us or which we feel may interest you or where you have consented to be contacted for such purposes (lawful basis: Consent, legitimate interest)
• To carry out our obligations arising from any contracts entered into between you and us (lawful basis: Contract)
• To allow you to participate in interactive features of our service, when you choose to do so (lawful basis: Contract, Legitimate Interests)
• Where you have applied to a third party for a member benefit (such as, by way of example, an app or membership of the European Society of Radiology) to confirm to such third party that you are a member or fellow of the RCR and therefore entitled to such member benefit; (lawful basis: Contract)
• To notify you about changes to our service (lawful basis: Contract, Legitimate Interests).

We may also use your data, or permit selected third parties to use your data, to provide you with information about goods and services which may be of interest to you, and we or they may contact you about these by post, email or telephone where we have obtained your consent to do so.

We may provide anonymised and/or aggregated data (including, but not limited to, diversity data) to third parties.

We will not sell your data to any third parties.  We do not carry out automated decision making.  If this changes, we will update this notice and take such other steps as required to comply with applicable law.

Your personal information will be processed by employees of the Royal College of Radiologists and we may also disclose your personal information to third parties:

• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation;
• To enforce or apply our terms of use or terms and conditions of supply  and other agreements;
• To protect the rights, property, or safety of RCR or others;
• To allow you to receive any membership services or member benefit which is provided by a third party (for example, providers of digital systems, marketing and advertising companies);
• To provide any services that you ask us to carry out either through the website or otherwise (including, for example, for equivalence purposes);
• With whom we collaborate to provide events or services (for example, conferences);
• Who provide services to us, where it is necessary for us to provide them with your personal data in order for those services to be provided; and/or
• In order to conduct research or surveys (for example, through the use of a third-party survey website, such as Survey Money).

Your personal data may be transferred to third parties outside of the UK and the European Economic Area.  We will ensure that your personal data receives an adequate level of protection by putting in place appropriate measures.

Disclosure may include exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Where we need your consent to hold your information we will ask you to confirm your consent in writing and we will inform you why we are collecting the information, how we will use it, how long we keep it for, who else will have access to it and what your rights are. Where we do rely on consent you have the right to change your mind and withdraw that consent at any time by writing to us. If you withdraw your consent we will cease using any personal information obtained and processed under that consent unless we have some other legal obligation to continue to use it. Please note that withdrawing consent will not affect the lawfulness of our processing prior to consent being withdrawn. To withdraw consent, please contact us at data_protectionofficer@rcr.ac.uk.

You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at data_protectionofficer@rcr.ac.uk

You have the right to ask us to provide you with rectification or erasure of your personal data. Upon receiving a request for erasure we will confirm whether your personal data has been deleted or a reason why it cannot be deleted (for example because we have a legal obligation to keep the information).   Providing you this information is free of charge, but charges may apply for excessive requests.  To do this please email data_protectionofficer@rcr.ac.uk or write to us (FAO: Data Protection Officer, The Royal College of Radiologists, 63 Lincoln’s Inn Fields, London WC2A 3JW).

You have the right to object to processing of your data. You may request that we stop processing information about you. Upon receiving your request we will contact you and let you know if we are able to comply or if we have legitimate grounds to continue to process your data. Even after you exercise your right to object, we may continue to hold your data to comply with your other rights or bring or defend legal claims.

You have the right to request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

You have the right to ask us to provide you with the personal data you have provided to us in an electronic format or to ask us to provide it to a third party.

You have the right to correct and update the information we hold about you. If the data we hold about you is out of date, incomplete or incorrect you can inform us and your data will be updated.

Our site may, from time to time, contain links to and from websites operated by third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with applicable data protection legislation. Access requests are free of charge but charges may apply for excessive requests.

Any complaints regarding the method in which we handle your data may be logged by sending an e-mail to data_protectionofficer@rcr.ac.uk.

You have the right to lodge a complaint with the Information Commissioner’s Office via its website www.ico.org.uk/concerns or you can call them on 0303 123 1113, or write to them at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

We keep your personal data for at least as long as you have a relationship with us or as otherwise necessary to provide you the services.  We are legally required to hold some types of information to fulfil our statutory obligations.  You have the right to request the deletion of your personal data, to exercise this right please contact data_protectionofficer@rcr.ac.uk.

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email.

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to data_protectionofficer@rcr.ac.uk.