GLOSSARY OF TERMS IN THIS NOTICE FROM THE GDPR CONSENT IN CERTAIN CIRCUMSTANCES, WE ARE REQUIRED TO OBTAIN YOUR CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA IN RELATION TO CERTAIN ACTIVITIES.

ARTICLE 4 OF THE GDPR STATES THAT (OPT-IN) CONSENT IS “ANY FREELY GIVEN, SPECIFIC, INFORMED AND UNAMBIGUOUS INDICATION OF THE DATA SUBJECT’S
WISHES BY WHICH HE OR SHE, BY A STATEMENT OR BY A CLEAR AFFIRMATIVE
ACTION, SIGNIFIES AGREEMENT TO THE PROCESSING OF PERSONAL DATA RELATING
TO HIM OR HER.” IN PLAIN LANGUAGE, THIS MEANS THAT:
YOU HAVE TO GIVE US YOUR CONSENT FREELY;
YOU HAVE TO KNOW WHAT YOU ARE CONSENTING TO;

YOU SHOULD HAVE CHOICE OVER WHICH PROCESSING ACTIVITIES YOU CONSENT TO
AND WHICH YOU DON’T; AND
YOU NEED TO TAKE POSITIVE AND AFFIRMATIVE ACTION IN GIVING US YOUR
CONSENT

WE WILL KEEP RECORDS OF THE CONSENTS THAT WE HAVE RECEIVED FROM YOU.

YOU HAVE THE RIGHT TO WITHDRAW YOUR CONSENT TO THESE ACTIVITIES. YOU
CAN DO SO AT ANY TIME, AND DETAILS OF HOW TO DO SO CAN BE FOUND ABOVE.
CONTRACTUAL NECESSITY
ARTICLE 6 OF THE GDPR STATES THAT WE CAN PROCESS YOUR DATA ON THE BASIS
THAT SUCH PROCESSING IS NECESSARY IN ORDER TO ENTER INTO OR PERFORM A
CONTRACT WITH YOU.

THE “CONTRACTUAL PERFORMANCE” LAWFUL BASIS PERMITS THE PROCESSING OF
PERSONAL DATA IN TWO DIFFERENT SCENARIOS:

SITUATIONS IN WHICH PROCESSING IS NECESSARY FOR THE PERFORMANCE OF A
CONTRACT TO WHICH YOU, THE DATA SUBJECT, IS A PARTY. THIS MAY INCLUDE, FOR
EXAMPLE, PROCESSING YOUR HEALTH DETAILS FOR THE PROVISION OF
RESIDENTIAL CARE.

SITUATIONS THAT TAKE PLACE PRIOR TO ENTERING INTO A CONTRACT SUCH AS
PRE-CONTRACTUAL RELATIONS. FOR EXAMPLE, A FORMAL REVIEW OF THE HEALTH
CONFIRMATION COLLECTED DURING THE CARE PACKAGE ASSESSMENT TO
DETERMINE THE LEVEL OF CARE REQUIRED AND THE ASSOCIATED RESIDENTIAL
COSTS.

FROM THE POINT AT WHICH CONTRACT NEGOTIATIONS COMMENCE AND
THROUGHOUT YOUR STAY WITH US WE WILL RELY ON CONTRACTUAL NECESSITY AS
THE LAWFUL BASIS FOR THE MAJORITY OF PERSONAL DATA PROCESSING
ACTIVITIES.
COMPLIANCE WITH LEGAL OBLIGATIONS
ARTICLE 6 OF THE GDPR STATES THAT WE CAN PROCESS YOUR DATA ON THE BASIS
THAT WE HAVE A LEGAL OBLIGATION TO PERFORM SUCH PROCESSING. PROCESSING
IS PERMITTED IF IT IS NECESSARY FOR COMPLIANCE WITH A LEGAL OBLIGATION.
LEGITIMATE INTERESTS
ARTICLE 6 OF THE GDPR STATES THAT WE CAN PROCESS YOUR DATA WHERE IT IS
NECESSARY FOR THE PURPOSES OF THE LEGITIMATE INTERESTS PURSUED BY US

OR BY A THIRD PARTY, EXCEPT WHERE SUCH INTERESTS ARE OVERRIDDEN BY THE
INTERESTS OR FUNDAMENTAL RIGHTS OR FREEDOMS OF YOU WHICH REQUIRE
PROTECTION OF PERSONAL DATA.