Privacy Policy

Rules on the protection of natural persons with regard to the processing of personal data by Nestor.

1. Background and legal framework

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, known as the General Data Protection Regulation (GDPR), sets out the legal framework for the processing of personal data.

In this context, we present the provisions for complying with this regulation in accordance with the requirements thereof. Indeed, Nestor manages personal data within the scope of its activity, which is primarily to assist individuals or their families in finding tailored solutions for their specific needs.

2. Elements relating to our application of the regulations

The following elements relate to the management of personal data, in accordance with the regulation:

• The contact details of the Data Protection Officer: Nestor
  
  
• The purposes of data processing:
• To collate requests for assistance in finding appropriate solutions (e.g., services or accommodations) via our websites or third-party prescribers.
• To assist contacts in identifying tailored solutions that meet their requirements.
• To forward these requests to relevant providers best suited to meet their needs.
• To follow up on these requests with the relevant providers.
• To conduct satisfaction surveys based on the proposed solutions.

• Data source:
• Requests made by individuals via our website.
• Requests made by individuals or prescribers by phone.
• Written requests received from prescribers.
• Communications through phone, email, fax, or SMS.

• The typology of data processed:
• Identification data: Name, contact details (phone, email, address), and any necessary demographic details.
• Financial data: Budget and general financial considerations for delivering the service.
• Health data: General health considerations relevant to the service requested.

• The data recipients: Providers best suited to meet the needs of contacts.
• Personal data storage period: 5 years.
• Other human rights: Individuals are informed of their rights, which are explained in this document.

3. General principles for collecting and processing personal data

NextMoov adheres to legislation by ensuring compliance both internally and with external partners:

• IT and organizational security measures.
• Management of authorizations and communication of rights to individuals.

4. Rights of individuals

Clients and contacts have the right to request that NextMoov respects their rights regarding the processing of personal data, including:

• Consent/withdrawal of consent.
• Right of access.
• Right to modification.
• Right to erasure.
• Right to restrict processing.

Conditions:

• Requests must come directly from the individual and include a valid ID copy or be sent from the email address linked to their original request.
• Requests should be addressed in writing to:

Nestor
71-75, Shelton Street, Covent Garden, London, WC2H 9JQ, UK
Email: hello@nestor.org.uk

5. Subcontracting

Nestor may engage subcontractors to process data. In doing so, Nestor ensures:

• Subcontractor compliance with GDPR obligations.
• A written contract defining data protection requirements.
• The right to audit subcontractors.

6. Security

Nestor implements security measures to protect against data breaches, including:

• Information Systems Security Policy.
• Data access management.
• Safeguarding measures.
• Disaster recovery plans.
• Regular security audits.

7. Data breach

In the event of a breach:

If necessary, contacts will be informed and provided with recommendations.

8. Data Protection Officer

Nestor’s Data Protection Officer can be contacted at:

Nestor
71-75, Shelton Street, Covent Garden, London, WC2H 9JQ, UK
Email: hello@nestor.org.uk

9. Processing Register and Impact Assessment

Nestor maintains a register of all processing activities and assesses the risks to personal data.