Artificial Intelligence (AI) Privacy Notice

Marie Curie is committed to being transparent about how it collects and uses that data to meet its data protection obligations. Personal information will be held in compliance with the UK General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018.

Marie Curie is a data controller under the Data Protection Legislation (UK General Data Protection Regulation and the Data Protection Act 2018) and collects and processes personal information about you in order to provide services and meet their statutory and regulatory obligations.

This Privacy Notice describes how we use your personal data alongside AI Tools. It also explains how your data is protected when these tools are used. This notice is in addition to our main Privacy Notice.

Personal data may be contained within documents uploaded to our AI Tools. We are the data controller of your personal data when it is used, and the AI supplier/contractor is a data processor. We have a signed agreement in place with each supplier/contractor to ensure that your personal data is protected. Users of our AI Tools know to process personal data in accordance with the UK GDPR and our various data protection policies.

None of your personal data is used solely by the AI technology provider to improve their AI products.

In most cases, we process your personal data using the AI Tools to improve the efficiency, quality, and speed of our business processes. A lot of these processes are already happening manually. Using AI to automate these processes allows Marie Curie resources to be used where they are needed most.

Any supplier who has access to your data is assessed for compliance with Data Protection legislation before any information is processed by them.

We have a statutory function to carry out the above duties under various legislation including UK GDPR Article 6.

Marie Curie will collect your personal data directly from you, including:

We do not solely use AI to make automated decisions. There is always a human intervention to review and approve any outputs from the AI tools. Decisions aren’t made solely by automated means. For more information on your Individual Rights, contact the Supporter Relations team at supporter.relations@mariecurie.org.uk or Marie Curie’s Data Protection Officer at DPO@mariecurie.org.uk.

The information you provide as part of your request will be retained in accordance with Retention Policy schedules. We have retention schedules in place to ensure that information is only held for as long as it is needed. We will not keep your information for longer than is required to by law. Your information will be disposed of in a controlled and secure manner in accordance with Marie Curie’s Destruction Policy.

Your personal information may be converted ('anonymised') into statistical or aggregated data in such a way that ensures that you cannot be identified from it. Anonymised data cannot, by definition, be linked back to you as an individual and may be used to conduct research and analysis, including the preparation of statistics for use in our reports.

The information you provide as part of your request will be retained in accordance with Retention Policy schedules. We have retention schedules in place to ensure that information is only held for as long as it is needed. We will not keep your information for longer than is required to by law. Your information will be disposed of in a controlled and secure manner in accordance with Marie Curie’s destruction Policy.

All the information that Marie Curie collects is stored securely on our IT system and manual filing systems. We have strict procedures for the way this is done. All information about you is treated as confidential and with respect. There are also clear rules and guidance about storing, recording and sharing information which staff receive training on.

Marie Curie has implemented generally accepted standards of technology and operational security in order to protect personal data from loss, misuse, or unauthorised alteration or destruction.  

Please note however that where you are transmitting information to us over the internet this can never be guaranteed to be 100% secure.  

We will notify you promptly in the event of any breach of your personal data which might expose you to serious risk.

You have rights under the Data Protection Legislations:

We want to make sure that your personal information is accurate and up to date. Please inform the Marie Curie’s Support Line if any of your contact details change.

If you have questions about this Privacy Notice, or if you’d like to exercise any of your privacy rights, please contact the Information Governance team infogov@mariecurie.org.uk.

If you are dissatisfied with our response, or if you have any further queries regarding how your personal data is processed, you should contact Marie Curie’s Data Protection Officer at DPO@mariecurie.org.uk.

If you are still unhappy with the outcome of your enquiry, you have the right to object to data processing in certain circumstances, which you can do by contacting the Information Commissioner’s Office.

The Information Commissioner
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF

We reserve the right to update this Privacy Notice at any time, and we will provide you with a new Privacy Notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.