Ģ����Ƶ

Our contact details

Please contact RCPCH if you wish to make a request or if you have a general enquiry.

Name: Royal College of Paediatrics and Child Health (RCPCH)
Address: 5-11 Theobalds Road, London, WC1X 8SH
Phone: number +44 (0)20 7092 6000
Email: Data Protection Officer (for privacy/data protection enquiries only): information.governance@rcpch.ac.uk

General enquiries and enquiries relating to CCTV can be sent via Contact us.

EEA and Swiss Representative

For EEA residents and Swiss Residents, DataRep, is our designated point of contact for individuals and supervisory authorities in the EEA and Switzerland. For information on the DataRep for your country is on this page.

What information do we collect about you?

If you make a room booking with us, we use your personal data to administer that room booking, which includes support with audiovisual equipment and catering where applicable. If you enter our building, we will use your personal data where necessary to control access to the building and to meet our health and safety obligations to ensure a safe and secure environment within our building (in the legitimate interest of the college and public interest to keep everyone safe).

CCTV

Closed-circuit television (CCTV) is in use within the College building for crime prevention and staff safety purposes. The system does not use facial recognition and no audio is recorded, only moving images during office opening hours. Occasionally the audio may be temporarily turned on if necessary to deal with an incident, but it will not be recorded. 

The recordings capture video footage of individuals inside the building which is defined as personal data (any information about a living individual which allows them to be identified) under UK data protection legislation. 

Why do we collect this information?

• "Contract" (where necessary to perform a contract with you, or with the view to entering into a contract with you)
• "Legal obligation" and "Legal claims or judicial acts" (to comply with the Health & Safety at Work Act 1974)
• "Public Interest" - where necessary to protect our visitors and staff
• "Vital interest"- where necessary to protect someone's life

If you make a room booking with us, we will use your personal data where necessary to provide services to you, including any catering, audio visual and additional requests (as part of our contract with you).

If you enter our building, we will use your personal data where necessary to ensure the security and safety of individuals within the building (where necessary to meet our legal obligations, in the vital interest of someone, or it is necessary in the public interest). This may include emergency situations, such as to check who is in the building in the case of fire, evacuation or criminal activity, or dealing with a health and safety incident. 

We may also use your personal and special category data, where you have provided this to us, to support accessibility (to comply with the Equality Act 2010).

If you are involved in an accident or incident onsite that is reported, we may also process your personal and special category data to support us in dealing with the incident - to ensure everyone is safe (public interest or vital interest), as well as so that we can meet our legal obligations under the Health and Safety at Work Act 1974 and respond to any future legal claims. 

CCTV

Data protection law requires that we have one or more of the following lawful bases to process your information:

• “Vital Interest” – where the processing is necessary to protect someone’s life.
• “Legitimate Interest” – where we have assessed that the benefits of us processing your data are legitimate and not outweighed by your interests or legal rights. 

We collect and process your personal data for the following purposes: 

• To ensure the RCPCH meets the requirement of addressing staff safety and crime prevention in the legitimate interest of the College (UK GDPR Article 6(f))
• In some circumstances, the processing is necessary in the vital interest of an individual (UK GDPR Article 6(d)). 

Where special category data is processed, such as indication of physical and/or mental health conditions and ethnicity captured on the image, we process as necessary for the substantial public interest for the prevention or detection of an unlawful act where there is a substantial public interest (to prevent further criminal acts) under Article 9(2)(g) of the UK GDPR and Schedule 1, Part 2 (10) of the Data Protection Act 2018. 

We do not use your personal data to make automated decisions or undertake profiling about you.

Transferring Information outside of the UK

To provide some products and services we, or our data processors, may transfer and process information in countries outside of the UK. Some of these countries, such as those in the EEA, will have an officially recognised equivalent level of protection to the UK (adequacy decision). A list of these countries can be found via the ICO website. Where there is no adequacy decision, we will take all reasonable steps necessary to ensure that your information is protected by having in place a recognised safeguard with our partners and suppliers, such as regulatory approved UK International Transfer Agreements, Binding Corporate Rules or Codes of Conduct. Otherwise we will ask for your explicit consent. 

To find out more about any specific uses of information in countries outside of the UK, or for further information about the safeguards that we have put in place, please contact the RCPCH Data Protection Officer: information.governance@rcpch.ac.uk.

Who might we share your information with?

CCTV

We put security measures in place to ensure that your information is securely stored. CCTV is used in line with the College’s Physical Security Policy, current UK data protection legislation and the ICO’s guidance for surveillance cameras and personal information. 

Access to the data is restricted to authorised members of RCPCH staff, although footage may be shared when required by other bodies, such as the police or emergency services, in line with our third party disclosure procedure to other bodies. Any footage extracted from the system will be restricted as appropriate, shortened to only the relevant section and either exported as footage or printed as specific stills.

CCTV footage will only be shared where there is a recognised legitimate interest, vital interest or public interest or substantial public interest where there is special category data (for example suspicion of criminal activity or a safeguarding concern). 

How long do we hold your information for?

We keep access control records for 30 days. We keep records relating to room bookings for 7 years. Records relating to health and safety incidents are retained for either 7 years or 40 years, dependent on the nature of the incident. 

CCTV

We will retain CCTV recordings for up to 60 days before it is automatically overwritten in line with our retention schedule, unless we need to retain them for law enforcement purposes or another legal obligation. The retention will depend on the purpose for which it is being retained and will be extracted and stored separately in a restricted area, and deleted when no longer required.

Understanding your data rights

To help you understand more about the information in this and all our privacy notices, see our page, Understanding GDPR and your data rights. This explains common words and phrases used in our privacy notices, describes our use of artificial intelligence (AI) and details the rights you have in relation to the processing of your personal data under UK General Data Protection Regulation (UK GDPR) and how to make a request.

How to make a complaint

If you are unhappy with how we are using your personal data or how we have dealt with a rights request, you should contact us in the first instance so that we can understand and try to resolve your concern. If you would like to make a complaint, please follow our data protection complaints process. If you remain dissatisfied, you can complain to the

Changes to this privacy notice

We keep our privacy policy under review, and we will place any updates on this web page. This privacy policy was last updated on 19 May 2026.