Draft Privacy Policy
This Privacy Policy describes our policies and procedures on the collection, storage and processing of personal information.
Authorised Users
Access to this site is restricted to specific users. These users are limited to medical and support staff of the Division of Nephrology at Stellenbosch University and Tygerberg Hospital, and staff in affiliated divisions and departments at the university and hospital who regularly require access to the data on this site to provide medical care to patients.
If you believe you are inappropriately able to access the data on this site, or have inappropriate permissions to access data, you are required to inform the site administrator as soon as is reasonably practicable.
Terms of Use
By logging in to this site, you agree to the following terms of use:
- This site contains confidential medical information and is subject to South African legislation, the POPI Act (No. 4 of 2013) and hospital policy.
- You will take reasonable steps to prevent unauthorised access to this site in general and your account specifically.
- You will not share your login details with any other person.
- You will not store your login details on a public device.
- You will not leave your account logged in on an unattended device.
- You will change your password regularly.
- You will only collect and store data that is necessary for the care of patients and the functioning of the division on this site.
- You will take reasonable steps to ensure the accuracy of data collected and stored on this site, and that data is not damaged or destroyed.
- If you suspect that your account or the site has been compromised, you will report to the site administrator as soon as is reasonably practicable.
Data Collected
Personal data about users is limited to name, surname and email address as required for the essential functions of this site. Usage data is collected automatically when using this site. This data may include your device’s IP address, browser type and version, data sent by your browser, the pages that you access and data that you add or edit. This data is collected to ensure the security of the data on the site.
This site also collects, stores and processes information about patients under the care of the division. Such data includes but is not limited to essential personal and medical data. Data may be collected from third parties (eg. a referring doctor), when seeing a doctor or undergoing an investigation or procedure at the division, or at multidisciplinary discussions.
This site also stores cookies according to the Cookie Policy.
Data Storage
This site takes reasonable steps to ensure that stored data is treated securely.
Data will only be stored for as long as is necessary and to comply with legal obligations.
Data Usage
This site uses user data to:
- Provide and maintain the service, including monitoring usage of the site and protecting data stored on the site.
- Give you access to different functionalities of the site that are available to you as a registered user according to your permission level.
- To contact you by email as required to manage your requests and account.
Your data will not be shared with third parties except as required by law.
Patient data is used as required by the division to provide medical care to patients. This may include discussion at multidisciplinary forums.
Deidentified patient data may be shared with third parties for research purposes. Such data will only be shared with the approval of senior members of the division and where appropriate approval has been granted by a recognised human research ethics committee. Such data may be shared without consent if a waiver of informed consent is approved by said ethics committee.
Patient data may also be shared with third parties as required by law.
Consent for Data Collection, Storage and Usage
In some instances, the division is not capable of being provided with direct consent by patients. This typically occurs when patients are referred by other doctors, divisions or hospitals.
Access to Stored Data
Users may view their stored data by visiting their profile on the site.
Patient may request to view their records by contacting Tygerberg Hospital. This may involve a reasonable fee.
Changes and Deletion of Data
You may request changes, corrections and deletion of your data by contacting the site administrator.
Information Officer
The Information Officer for Tygerberg Hospital, as defined by the POPI Act (No. 4 of 2013) is Kurt Maart. Contact 021 938 4141 or email Kurt.Maart@westerncape.gov.za.
Changes to the Privacy Policy
This policy may be updated from time to time. You are advised to review this policy periodically for changes.