Corporate Health and Safety Privacy Notice
As an employer, Ceredigion County Council is obliged under the Health and Safety at Work Act 1974 and associated legislation to safeguard the health and safety of its employees, and any individuals who may be affected by the work the Council undertakes. To do this, we must process personal data as set out in the notice below.
The information we collect about you will be used for the purpose(s) of: (…)
· Reporting and investigating incidents
· Processing related to Occupational Health referrals
· To identify and mitigate risks posed through work activities
· Protecting the health and safety of our vulnerable workers
· Completing suitable and sufficient risk assessments
· To protect the Health, Safety and Wellbeing of our staff and anyone who comes into contact with the Councils’ work activities.
The lawful basis for the processing of your information is:
UKGDPR Article 6 (b) Processing is necessary for the performance of a contract to which the data subject is party
UKGDPR Article 6 (c) processing is necessary to comply with a legal obligation to which the controller is subject
UKGDPR Article 6 (e) processing is necessary to carry out a task in the public interest.
The legislation relied upon includes:
· Health & Safety at Work Act 1974
· Management of Health and Safety at Work Regulations 1998
· Control of Asbestos Regulations 2012
· Control of Substances hazardous to health Regulations 2002
· Safeguarding Vulnerable Groups Act 2006
· Equality Act 2010
· Reporting of Injuries, Diseases and Dangerous Occurrences 2013
Where special category data is processed, the following lawful bases apply:
UKGDPR Article 9 (2)
b) Processing is necessary to carry out the obligations of the controller in the field of employment
g) Processing is necessary for reasons of substantial public interest (with a basis in law) (legislation as above). The substantial public interest processing conditions relied upon are 6) statutory and government purposes and, where relevant,11) protecting the public.
h) processing is necessary in the field of occupational medicine or to assess the working capacity of the employee
Where criminal convictions data is processed, the processing meets a relevant substantial public interest processing condition at Schedule 1 Part 2 DPA 2018, and is processed in accordance with an Appropriate Policy Document. The processing conditions relied upon are (6) statutory and government purposes (legislation as above) and (18) (safeguarding of children and individuals at risk).
If you do not give us the information we need when we ask for it, this may result in:
If we are unable to request personal data, we would not be able to provide you with the service you request or comply with legal obligations.
We collect the following types of personal data about you to deliver this service… Name;
Address;
Date of birth;
Gender;
Unique reference number;
Telephone number;
Email address;
Health information;
Employment and education details;
Images/photographs;
Vehicle registration number;
Information about your health;
Your racial or ethnic origin;
Criminal convictions and offences; etc
To provide this service, we collect information directly from you but also receive information from the following sources:
Human Resources
CCC’s Occupational Health provider
Dyfed Powys Police
The following types of personal data may be obtained, depending on your circumstances: Name;
Address;
Date of birth;
Gender;
Unique reference number;
Telephone number;
Email address;
Physical and mental health information;
Employment and education details;
Images/photographs;
Vehicle registration number;
Information about your health;
Your racial or ethnic origin;
Criminal convictions and offences; etc.
Your information will not be transferred outside the United Kingdom.
We may share your information with the following recipients depending on your circumstances:
Internally:
Human Resources
Legal Services
Safeguarding team
Externally:
Dyfed Powys Police,
Mid and West Wales
Fire Service
There are also other specific situations where we may be required to disclose information about you, such as:
• Where the Council is required to provide the information by law
• Where disclosing the information is required to prevent or detect a crime
• Where disclosure is in the vital interests of the person concerned