The council processes personal data relating to its current, prospective and former employees, workers and contractors.
The council collects personal data in a variety of ways but typically directly from the individual concerned e.g. data is collected through application forms and CVs, from copies of passports, driving licences and other identity documents provided, from other forms completed at the start of and during the course of employment, from correspondence, and through interviews, meetings and other assessments.
In some cases, the council collects personal data from third parties e.g. references supplied by former employers, information from employment background check providers, employment agencies, credit reference agencies and criminal records checks permitted by law.
The council needs to process personal data to enter into employment contracts and to meet its obligations under employment contracts e.g. it needs to process personal data to provide employment contracts, to pay staff in accordance with their employment contracts and to administer benefits, pensions and insurance entitlements.
In some cases, the council needs to process personal data to ensure that it is complying with its legal obligations e.g. it is required to check an employee's entitlement to work in the UK, to deduct tax, to comply with health and safety laws and to enable employees to take periods of leave to which they are entitled. For certain positions, it is necessary to carry out criminal records checks to ensure that individuals are permitted to undertake the role in question.
In other cases, the council has a legitimate interest in processing personal data before, during and after the end of an employment relationship.
The council may also use personal data in circumstances (which are likely to be rare) where necessary to protect an employee's interests or somebody else's interests or where it is necessary in the public interest or for official purposes.
The council will process personal data for the following purposes:
Some special categories of personal data, such as information about health or medical conditions e.g. sickness absence, etc., is processed to carry out employment law obligations (such as those in relation to employees with disabilities and for health and safety purposes).
The council will use information about physical or mental health, or disability status, for preventative and occupational health purposes, to ensure health and safety in the workplace and to assess fitness to work, to provide appropriate workplace adjustments, to monitor and manage sickness absence and to administer benefits.
Information about trade union membership is processed to allow the council to operate check-off for union subscriptions.
The council will only collect information about criminal convictions if it is appropriate given the nature of the role and where it is legally able to do so. Where appropriate, the council will collect information about criminal convictions as part of the recruitment process or may be notified of such information directly by the individuals concerned during the course of employment.
Where the council processes other special categories of personal data, such as information about ethnic origin, sexual orientation, health or religion or belief, this is done for the purposes of equal opportunities monitoring and reporting.
The council will share personal data with third parties where required by law, where it is necessary to administer the working relationship with an individual or where it has another legitimate interest in doing so.
Information will be shared internally, including with members of the HR teams, line managers, other managers and IT staff. The council's payroll function is currently outsourced to Warwickshire County Council who process data on its behalf.
The council shares data with third parties in order to obtain pre-employment references from other employers, obtain employment background checks from third-party providers and obtain necessary criminal records checks from the Disclosure and Barring Service. The council may also share data with third parties in the context of TUPE. In such circumstances the data will be subject to confidentiality arrangements.
The council also shares data with third parties that process data on its behalf, in connection with the provision of benefits (including pensions, healthcare, car leasing, salary sacrifice schemes, cycle to work, etc.) and the provision of occupational health services. In addition data may also be provided to the DWP, HMRC, Standard Life and UNISON, where appropriate.
Staff have some obligations under their employment contracts to provide the council with data. In particular, there are requirements to report absences from work and to provide information about disciplinary or other matters under the implied duty of good faith. Staff may also have to provide the council with data in order to exercise their statutory rights, such as in relation to statutory leave entitlements. Failing to provide the data may mean that staff are unable to exercise their statutory rights.
Certain information, such as contact details, right to work in the UK and payment details, have to be provided by staff to enable the council to enter a contract of employment with them. If they do not provide other information, this hinders the council's ability to administer their rights and obligations arising as a result of the employment relationship efficiently.