Diabetes email campaign - data protection information notice

The Health Service Executive (HSE) engages with people with Type 2 diabetes, through email, to support them in their diabetes journey. 

Data controller

The HSE is the data controller for the data we process to provide the diabetes support email campaign.

Data Protection Officer

You can contact the HSE’s Data Protection Officer for data protection information about the email campaign.

HSE Data Protection Officer

DPO@HSE.ie

Phone: 016350359

How the diabetes email campaign works

The diabetes email campaign is part of our overall strategy to improve people’s health by providing relevant information. You choose to subscribe to the diabetes campaign. The HSE will send email that delivers support in living with a chronic condition to self-manage and access support services in the community.

These emails may contain links to information about HSE services & other services that we hope are helpful to you. We can’t provide an email service without your email address, very similar information to that provided via Diabetes Campaign is available on the HSE website and through your medical team.

The data we collect and process

The HSE needs the following information to enrol you in our diabetes email campaign; 

  • your name, 
  • email address and 
  • how long since your diabetes diagnosis. 

We use this information to determine the emails that are sent to you are as relevant as possible. 

The HSE will also receive information about 

  • whether you opened the email, 
  • whether you clicked on any of the links in the email and 
  • similar email analytics such as the device and email software used. 

These analytics are produced by code written into the email. Once we get the analytical data then we will aggregate it so that we can analyse the effectiveness of our diabetes campaign. We don’t share email analytics information with anyone else.

The lawful basis for data processing

We are able to send emails to you as you have subscribed to the diabetes campaign. 

You can opt out of receiving the diabetes campaign emails at any time by clicking on the unsubscribe link at the bottom of any campaign email that we send to you. 

The HSE can process your personal data including your medical data as we have a mandate to provide healthcare services and information to the public.

Security measures

There are a range of security processes and technologies in place to prevent unauthorised access to the data while it is stored on our servers, including data encryption, modern firewalls and intrusion prevention.

Who processes your data

The HSE processes your personal data relating to this email campaign.

We use Adobe Campaign software provided by Adobe Systems Software Ireland Limited and supported by DEPT Digital Limited. 

We will store your data securely in our data centre which is located in the European Union. 

The diabetes campaign emails and the HSE diabetes websites may contain links to other websites. This information notice only applies to the diabetes email campaign, so if you click on a link to another website, you should read their information notice.

Sharing your data

The HSE won’t share that you are subscribed to the Diabetes email campaign with your medical team or other clinical support. Likewise, they won’t be sharing any of your medical information with us. 

We do not expect to share personal data with third parties, unless it is by law deemed necessary to do so.

How long we hold your personal data for

The HSE will keep your contact and email addresses for as long as you stay subscribed. If you unsubscribe then we will keep your information for 6 months. Information about which emails you have received and related email analytics will be retained for 6 months. Aggregated data will be retained for longer but we won’t be able to unpack your data from everyone else’s.

Data subject rights

You can unsubscribe from the diabetes email campaign at any time.

Read the HSE's Privacy Statement to learn about:

  • your data rights
  • how to contact us
  • how to complain to the Data Protection Commission
  • how to contact the HSE's Data Protection Officer

Changes to this Data Protection Notice

This Data Protection Information Notice may change from time to time and changes will be available here.

Version 1.0 Data protection information notice - originally published 27 June 2022.