Privacy Notice: Staff
During the course of our employment activities, the Trust collects, stores and processes personal information about our current and former staff. It does this only when the requirements for fair and lawful processing are met. This privacy notice provides a summary of how we uphold this by describing:
- the categories of personal data we collect
- the purposes for which it is processed
- the persons and organisations it might be shared with.
It is important that the information we hold about you is accurate and up-to-date. If your personal details change or if they are currently inaccurate then it is important that you let us know by updating your own details via ESR Self-Service or by contacting your manager and the HR Team.
In order to carry out our activities and obligations as an employer, we process the following personal information:
- date of birth
- National Insurance number
- contact details, including email address, home address and telephone numbers
- education and training
- employment records (including professional membership, references and proof of eligibility to work in the UK)
- personal demographics (including gender, race, ethnicity, sexual orientation, religion, disability and marital status)
- information relating to health and safety
- sickness records
- details relating to occupational health (see Ascenti and Optima privacy notices)
- training records
- disciplinary records
- bank account details
- pension details
- driving licence details, including endorsements and accident history
- personal vehicle details (for volunteer car drivers)
- criminal records (including alleged offences), criminal proceedings, outcomes and sentences
- Trade Union membership
- emergency contact details.
The majority of this personal data will be collected directly from you. In limited circumstances, your personal data may be provided by third parties such as former employers, social workers, the police, medical professionals and official bodies (such as regulators or disclosure and barring bureaus).
Information is processed in a variety of paper and electronic formats and is used to:
- Create and maintain your staff record (processing is necessary under the contract you have with us or because we have asked you to take specific steps before entering into a contract).
- Communicate with you throughout your employment with YAS (processing is necessary under the contract you have with us or because we have asked you to take specific steps before entering into a contract).
- Monitor equal opportunity statistics and help us understand staff demographics (we request your explicit consent to process this data).
- Check criminal records every five years to help make safer working environments (we request your explicit consent to process this data. Processing shall be carried out only under the control of official authority or when the processing is authorised by Union or Member State Law providing for appropriate safeguards for the rights and freedoms of data subjects).
- Maintain sickness records (where necessary for the assessment of the working capacity of the employee).
The Trust does not carry out automated decision-making using employee data.
We will not routinely disclose any information about you without your permission. However, there are circumstances where the law says we must or can share information about you. Any disclosures of personal data are always made using the minimum personal data necessary for the specific purpose and with the appropriate security controls in place.
There are a number of reasons why we may need to share your information. It can be because of:
- our duty to comply with legislation
- a requirement to comply with a court order.
It may also be in order to fulfil our obligations as an employer, for example:
- meeting health and safety obligations
- security checks
- the provision of employee services, such as occupational health, pensions administration and staff training.
We may obtain and share personal data with a wide variety of bodies, including:
- Her Majesty's Revenue and Customs (HMRC)
- Disclosure and Barring Service
- Home Office
- Child Support Agency
- central government, government agencies and departments
- local authorities and other public bodies
- Ombudsman and other regulatory authorities
- courts and prisons
- financial institutes such as banks and building societies for approved mortgage references
- credit reference agencies
- utility providers
- educational training and academic bodies
- law enforcement agencies
- emergency services
- Department for Work and Pensions (DWP)
- The Assets Recovery Agency
- relatives or guardians of an employee where there is a legal duty to do so.
Records are maintained in line with the Trust’s Records Management Policy and retention periods are based on guidance provided in the Records Management Code of Practice for Health and Social Care (NHS Digital). We will store your information as part of your employee file for the duration of your employment plus six years after you have left the Trust.
Visit the GOV.uk website for the COVID-19 testing privacy information.