Privacy Notice - HR Staffing and Recruitment

 

BACK TO PRIVACY NOTICES

 

This Practice collects and stores information pertaining to staff for the purposes of HR, employment, recruitment and training. 

Information is collected and stored about prospective, current and past employees, including self-employed and temporary staff. 

Data is collected for purposes including recruitment, occupational health, vetting checks, staff training and payroll.  

We share information with the following organisations with your explicit consent or when the law allows: future employers reference request and HM Revenue & Customs.

1) Controller contact details

Lee Road Surgery

20 Lee Road

London

SE3 9RT
2) Data Protection Officer contact details

John Eni-Uwubame

South East London Integrated Care System
160 Tooley Street
London
SE1 2TZ
Email: gpdpo@selondonics.nhs.uk
Telephone: 02081761198
3) Purpose of the processing Legal Obligation
4) Lawful basis for processing

The lawful basis for processing, storing and sharing this data under UK Data Protection Legislation are -    
 
Article 6(1)(c) “the processing is necessary for compliance with any legal obligation to which the controller is subject”. 

And in addition, an Article 9 condition for processing must also be adhered to: -

Article 9(2)(b) – ‘processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment”.
5) Recipient or categories of recipients of the shared data The data will be shared with HM Revenue & Customs and future employers where a reference is requested.
6) Rights to object 

You have the right under Article 21 of the UK GDPR to object to your personal information being processed. Please contact the Practice if you wish to object to the processing of your data. You should be aware that this is a right to raise an objection which is not the same as having an absolute right to have your wishes granted in every circumstance.

GP Practices process personal data under Article 6(1)(c) on a lawful and legitimate basis where the organisation is obliged under law to comply with.
By complying with these laws, the Practice has compelling legitimate grounds for the processing which override the interests, rights and freedoms in the right to object.
7) Right to access and correct

You have the right to access any identifiable personal data that is being processed or shared and to have any inaccuracies corrected.
8) Retention period  The data will be retained for the period as specified in the national records retention schedule.
 
9)  Right to Complain. 

You have the right to complain to the Information Commissioner’s Office, you can use this link https://ico.org.uk/make-a-complaint/data-protection-complaints/

or calling their helpline Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate) 
There are National Offices for Scotland, Northern Ireland and Wales, (see ICO website).