Human Resources privacy notice

Data we collect

The council processes personal data relating to its current, prospective and former employees, workers and contractors.

Personal data

• Names, addresses and contact details, including email addresses and telephone numbers, dates of birth and genders
• The terms and conditions of employments including locations of workplaces
• Details of qualifications, skills experience and employment histories, including CV’s, application forms, cover letters, references, job titles, working hours, training records, professional memberships, start and end dates, with previous employers and with the council
• Information about remuneration and compensation history, including salaries and entitlements, benefits such as pensions and annual leave
• Details of bank accounts, payroll records, tax status and national insurance numbers
• Information about marital status, next of kin, dependants and emergency contacts
• Information about nationality and entitlement to work in the UK
• Details of working patterns and attendance at work

Special personal data

• Information about medical or health conditions, including health and sickness records and whether or not an individual has a disability for which the council needs to make reasonable adjustments
• Information about criminal convictions and offences
• Details of trade union membership
• Equal opportunities monitoring information, including information about race or ethnic origin, sexual orientation and religion or belief

The reasons we use your data

• To employ staff
• Statutory requirements e.g. reporting to Government
• Service delivery
• Service improvement and planning
• Regulatory, licensing and enforcement functions
• Prevention and detection of crime
• Financial transactions
• Research
• Traded services
• Promote access to work
• Monitor equalities issues

Why we are allowed to use your data

The council needs to process personal data to enter into employment contracts and to meet its obligations under employment contracts e.g. it needs to process personal data to provide employment contracts, to pay staff in accordance with their employment contracts and to administer benefits, pensions and insurance entitlements.

In some cases, the council needs to process personal data to ensure that it is complying with its legal obligations e.g. it is required to check an employee's entitlement to work in the UK, to deduct tax, to comply with health and safety laws and to enable employees to take periods of leave to which they are entitled. For certain positions, it is necessary to carry out criminal records checks to ensure that individuals are permitted to undertake the role in question.

In other cases, the council has a legitimate interest in processing personal data before, during and after the end of an employment relationship.

The council may also use personal data in circumstances (which are likely to be rare) where necessary to protect an employee's interests or somebody else's interests or where it is necessary in the public interest or for official purposes.

The council will process personal data for the following purposes:

• run recruitment, appointment and promotion processes (including checking that staff are legally entitled to work in the UK and determining employment terms)
• paying staff, and making deductions in respect of tax, pension, National Insurance contributions, trade union membership fees and student loan repayments, etc.
• liaising with pension providers
• maintaining accurate and up-to-date employment records and contact details (including details of who to contact in the event of an emergency), and records of employee contractual and statutory rights operating and recording disciplinary and grievance processes (including gathering evidence), to ensure acceptable conduct within the workplace
• operating and keeping records of employee performance and related processes, planning for career development, salary reviews and for succession planning and workforce management purposes (including assessing the qualifications required for a role)
• managing education, training and development requirements
• operating and keeping records of absence and absence management procedures, to allow effective workforce management (including managing sickness absence) and ensuring that employees are receiving the pay or other benefits to which they are entitled
• obtaining occupational health advice, to ensure that it complies with duties in relation to individuals with disabilities, meets its obligations under health and safety law, ensures that staff are fit to work and ensures that employees are receiving the pay or other benefits to which they are entitled
• operating and keeping a record of other types of leave (including maternity, paternity, adoption, parental and shared parental leave), to allow effective workforce management, to ensure that the Council complies with duties in relation to leave entitlement, and to ensure that employees are receiving the pay or other benefits to which they are entitled
• ensuring network and information security, and monitoring use of information and communication systems to ensure compliance with policies
• ensuring effective general HR and business administration, and providing benefits
• managing the end of working relationships (e.g. retirement, resignation, dismissal, etc.)
• providing references on request for current or former employees
• responding to and defending against legal claims (including accidents at work)
• maintaining and promoting equality in the workplace
• maintaining registers of interests

Some special categories of personal data, such as information about health or medical conditions e.g. sickness absence, etc., is processed to carry out employment law obligations (such as those in relation to employees with disabilities and for health and safety purposes).

The council will use information about physical or mental health, or disability status, for preventative and occupational health purposes, to ensure health and safety in the workplace and to assess fitness to work, to provide appropriate workplace adjustments, to monitor and manage sickness absence and to administer benefits.

Information about trade union membership is processed to allow the council to operate check-off for union subscriptions.

The council will only collect information about criminal convictions if it is appropriate given the nature of the role and where it is legally able to do so. Where appropriate, the council will collect information about criminal convictions as part of the recruitment process or may be notified of such information directly by the individuals concerned during the course of employment.

Where the council processes other special categories of personal data, such as information about ethnic origin, sexual orientation, health or religion or belief, this is done for the purposes of equal opportunities monitoring and reporting.

Legal obligation or public task under various UK laws including but not limited
to:

• The Employment Rights Act 1996
• The Sex Discrimination Act, 1970
• The Equal Pay Act of 1970
• The Race Relations Act, 1976
• The Disability Discrimination Act, 1995
• The National Minimum Wage Act, 1998
• The Working Time Directive, 1999
• The Employment Relations Act, 1999
• Health and Safety at Work, etc. Act 1974
• The Equality Act 2010
• The Public Sector Equality Duty - Equality Act 2010
• The Localism Act 2011
• Contract (traded services)
• TUPE

Who we can share your data with

The council will share personal data with third parties where required by law, where it is necessary to administer the working relationship with an individual or where it has another legitimate interest in doing so.

Information will be shared internally, including with members of the HR teams, line managers, other managers and IT staff. Information may also be shared with Audit and Legal services. The council's payroll function is currently outsourced to Redditch Borough Council who process data on our behalf.

The council shares data with third parties in order to obtain pre-employment references from other employers, obtain employment background checks from third-party providers and obtain necessary criminal records checks from the Disclosure and Barring Service. The council may also share data with third parties in the context of TUPE. In such circumstances the data will be subject to confidentiality arrangements.

The council also shares data with third parties that process data on its behalf, in connection with the provision of benefits (including pensions, health cash plan etc.) and the provision of occupational health services. In addition, data may also be provided to the DWP, HMRC, and UNISON, where appropriate.

• Judicial Agencies e.g. Courts
• Police
• Childrens Social Care
• Adults Social Care
• Probation
• Health agencies inc. occupational health providers
• Education Providers
• Government departments e.g. DWP, HRMC, Education, S4c
• Immigration services
• Disclosure and Barring Service
• Regulatory bodies
• Pension providers
• Trade Unions
• Elected Members and MPs (as your representative)
• Commissioned partners e.g. staff benefit scheme
• Other businesses / organisation (references, market pay organisations)
• Employment agencies
• Contractors providing IT services

When computers make any decisions about you

Not applicable

When your data gets sent to other countries

Not applicable

Further information

For enquiries, questions, comments, requests regarding this privacy notice and for deletion of data held under consent are welcomed and should be addressed to Human Resources