Coronavirus employees privacy notice
This privacy notice is designed to help you understand how and why Richmondshire District Council processes employee personal data in relation to Coronavirus (Covid-19). This notice should be read in conjunction with the council’s corporate privacy notice and other employee notices.
Who are we?
Richmondshire District Council is a ‘Data Controller’ as defined by Article 4(7) of the General Data Protection Regulation (GDPR). This privacy notice applies to employees of Richmondshire District Council. Richmondshire District Council will need to process your information in relation to Coronavirus (Covid-19) in order to provide a duty of care and to effectively function.
The council has appointed Veritau Ltd to be its data protection officer. Their contact details are:
Information Governance Office
Veritau Ltd
County Hall
Racecourse Lane
Northallerton
DL7 8AL
DPO@richmondshire.gov.uk
01609 532526
What personal information do we collect?
For these purposes the council may collect:
- Name and contact details
- Current job role and responsibilities
- Medical information, age or any other personal information which would mark a vulnerability to the virus
- Recent history of contacts with other individuals whilst at work or with service users; or any other personal information which could help prevent or trace transmission of the virus
- Any other personal information which the council is asked to be collected by the relevant health or government authorities to mitigate the risks associated with Coronavirus (Covid-19) this includes health risks, economic risks and social risks
Why do we collect your personal information?
The council will collect this information to:
- Provide a duty of care to its employees
- Enable the council to operate effectively
- Ensure the council can act effectively to protect the health and wellbeing of the local community
Who do we share this information with?
The council may need to share this information with organisations such as:
- Central Government
- Health authorities
- Relevant partner organisations
How long do we keep your information for?
Information will be kept for as long as necessary for the purposes for which it is processed. The council will destroy or archive information when the risks from Coronavirus (Covid-19) have been appropriately reduced.
What is our lawful basis for processing your information?
The legal basis the council relies on will be determined by the specific process. However it is likely that the council will process this personal data under the legal basis of:
- Article 6(1)(b) - Contract
- Article 6(1)(c) - Legal Obligation
- Article 6(1)(d) - Vital Interests
- Article 6(1)(e) - Public Task
Some of the personal data processed by the council will be information defined as Special Category Data. In order to lawfully process this type of information, the council will rely on the following Article 9 conditions:
- Article 9(2)(b) - Employment, social security and social protection
- Article 9(2)(c) - Vital interests
- Article 9(2)(g) - Reasons of substantial public interest (with a basis in law)
- Article 9(2)(h) - Health or social care (with a basis in law)
- Article 9(2)(i) - Public health (with a basis in law)
Changes to this privacy notice
This privacy notice will undergo regular review as the situation evolves. If any changes are made, we will publish the updated version on our website.
For more information about how the council uses your data, including your privacy rights and the complaints process, please see our corporate privacy notice.