Skip to main content

Why are we able to process your information?

We are legally able to process your personal information under Article 6 of the General Data Protection Regulation (GDPR) as the processing is necessary for us to perform our official functions as an NHS body. There will be occasions when we will rely on other lawful bases such as when the processing is required for us to comply with the law.

We are legally able to process special category information under Article 9 of the GDPR as the processing is necessary for the purposes of the management of health or social care systems and services.

Rydym yn croesawu gohebiaeth a galwadau ffôn yn y Gymraeg neu'r Saesneg. Atebir gohebiaeth Gymraeg yn y Gymraeg, ac ni fydd hyn yn arwain at oedi. Mae’r dudalen hon ar gael yn Gymraeg drwy bwyso’r botwm ar y dde ar frig y dudalen.

We welcome correspondence and telephone calls in Welsh or English. Welsh language correspondence will be replied to in Welsh, and this will not lead to a delay. This page is available in Welsh by clicking ‘Cymraeg’ at the top right of this page.