Part A — Practice Privacy Statement

This part explains how we handle the personal and health information of our patients. We are committed to safeguarding your information in line with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, and the Irish Medical Council's Guide to Professional Conduct and Ethics for Registered Medical Practitioners.

1. Who We Are — Data Controllers

The data controller for your patient information is Dr. Hossein Tabesh of Aungier Street Medical Clinic, 1st Floor, 16 Redmond's Hill, Aungier Street, Dublin 2, D02 YK19.

Our Lead for Data Protection is the Practice Manager. You can contact us about anything in this statement at info@aungierclinic.ie or on 01 400 5708.

2. The Data We Collect

To provide safe, continuous care, we collect and hold:

Identity and contact details — your name, date of birth, address, phone number and email;
Next of kin / emergency contact — so we can reach someone on your behalf if we need to;
Health data (special category data) — your medical history, consultation notes, test results, prescriptions, referral letters and correspondence about your care;
Administrative details — private health insurance details where you ask us to deal with your insurer, and payment records for our services;
PPS number — collected where you hold a medical card, for medical card (GMS) administration and to confirm your identity;

We only collect what is needed to provide your care and run the practice.

3. Legal Basis for Processing

We process your personal data under the following legal bases:

GDPR Article 6(1)(b) — processing necessary for the provision of our services to you as our patient;
GDPR Article 6(1)(d) — protection of your vital interests, for example in a medical emergency;
GDPR Article 6(1)(e) — tasks carried out in the public interest, such as participation in national screening programmes;
GDPR Article 9(2)(h) — for your health data (special category data): processing necessary for medical diagnosis and the provision of health care, carried out by professionals bound by a duty of confidentiality.

Where none of the above applies, we will ask for your consent. Our handling of your records also follows the Medical Council's Guide to Professional Conduct and Ethics.

4. How We Use Your Data

Your information is used to provide your medical care, manage appointments and prescriptions, contact you about results and follow-up, and meet regulatory obligations — for example, our participation in national programmes such as CervicalCheck.

We share information only with those directly involved in your care: hospital consultants and other health professionals we refer you to, our out-of-hours partner GP24 (who send us a summary of any consultation), national screening programmes such as CervicalCheck, laboratories processing your tests, and insurers where you ask us to. We never sell your data.

Where we have a duty to others — for example in child protection cases — we may share relevant information as required by law. Anonymised patient information (which cannot identify you) may also be used at local and national level to help the HSE plan services, such as for diabetes and other chronic disease care. If you'd prefer your anonymised information not to be used in this way, please let us know.

6. Transferring Your Records to Another Practice

If you move to another GP practice, we will — at your request and with your consent — transfer a copy of your medical records to your new GP, so that your care continues without interruption. Likewise, when you register with us, we can request your records from your previous practice.

7. How Long We Keep It

Medical records are retained in line with Irish healthcare record-retention guidance — as a general rule, adult records are kept for a minimum of 8 years after the last treatment, and children's records until the patient's 25th birthday (or longer where care continued past age 17), with longer periods for certain record types (for example, obstetric records are kept for 25 years).

8. Your Rights & Access Requests (SAR)

Under GDPR you have the right to access the information we hold about you, to have inaccuracies corrected, to restrict certain processing, and to data portability. Note that the right to erasure is limited for medical records, which we are legally and professionally required to retain.

To see your records, you can make a Subject Access Request (SAR): contact us in writing at info@aungierclinic.ie or by post. We will respond within one month, as required by the GDPR; if a request is complex we may extend this and will tell you why. See Data Protection & Your Rights for the plain-language version of this process.

9. How to Complain

If you have concerns about how we handle your data, please contact us first — we take this seriously. You also have the right to lodge a complaint with the Data Protection Commission (DPC), Ireland's supervisory authority: 21 Fitzwilliam Square South, Dublin 2, D02 RD28.

Part B — Website Privacy Notice

This part covers information collected through this website only — it is separate from your patient record.

10. Website Data & Processors

If you contact us by email or through details published on this site, we use the information you provide only to respond to your enquiry — it is not added to a marketing list, and we don't use it for any other purpose. Please avoid sending detailed medical information by email; clinical matters are best discussed at a consultation.

This website is hosted by LetsHost, acting as a data processor on our behalf. We do not use any third-party analytics service on this site.

11. Cookies

This website sets no tracking or advertising cookies. To remember your cookie choice, we store a single preference in your browser's local storage — it stays on your device and is never sent to a server.

Our Home and Contact pages can display an interactive Google Map showing our location. If you choose to load it — by accepting the "Maps & Embedded Content" category, or by clicking "Load map" — Google may set cookies to run the map and for security. The map does not load, and no Google cookies are set, unless you allow it. You can change or withdraw your choice at any time using the "Cookie Settings" link in the footer.

We do not currently use analytics or advertising cookies. If that changes, we will update this section and ask for your consent first, as required by the ePrivacy Regulations.

Last reviewed: 30 July 2026

Privacy Statement