Direct Payments Employee Privacy Notice
As part of your employment by a recipient of Direct Payments, the recipient (hereafter called the Service User) must process personal data about you. This notice sets out how your data will be processed by the Service User.
The purposes for which your personal data is used
Your information will be used for the administration of your employment (for example to facilitate payment, monitor performance and for the administration of annual leave, sickness absence and any disciplinary matters).
The lawful basis for the processing of your information is performance of a contract with the data subject.
Where special category data is processed, the lawful basis shall be UKGDPR Article 9 2 (b) Employment, Social Security and Social Protection.
What if you do not provide personal data?
If you do not provide the information when asked for it, this may result in the Service User being unable to administer your employment.
What type of information is used?
Where required, I must collect the following types of personal data about you to administer your employment
- Name, residential address and contact details including telephone numbers and email address
- Date of birth
- Financial details, such as your National Insurance Number, bank account, payroll records, tax status, pensions, benefits and Court orders relevant to employment
- Details about your health and sickness/absence records
- Right to work information
- References obtained from your referees
- A copy of your driving license
- Information about your private vehicle where it is used for work purposes, including; registration number, make, model, tax, insurance, MOT and safety checks
- Work history and location of employment past and present
- Emergency contact details
- Training records, performance information, qualifications, disciplinary and grievance-related information
Do we use information received from other sources?
To provide this service, the service user will collect information directly from you but may also receive information from the following sources:
- Ceredigion County Council
The following types of personal data may be obtained, depending on your circumstances:
- Name
- Address
- Date of birth
- Gender
- Unique reference number
- Telephone number
- Email address
- Bank/payment details
- Your family composition
- Your social circumstances
- Employment and education details
- Information about your health
- Your racial or ethnic origin
- Religious or philosophical beliefs
- Information about your sex life or sexual orientation
- Criminal convictions and offences etc.
Transferring your information abroad
Your information will not be transferred outside the United Kingdom.
Who your information may be shared with (internally and externally)?
Depending on the circumstances, the Service User may need to share your data with the following recipients:
- The Local Authority or NHS Clinical Commissioning Group which is responsible for funding the care required
- Support organisations authorised by the employer and/or funding authority to support me in payroll and employee management activities
- Accountants and Payroll organisations
- Independent living organisations or disability advocates
- Insurance companies and legal advisors including helpline providers and solicitors
- Other employers strictly for the purpose and operation of TUPE transfers
- Their nominated representative where their physical or mental health prevents adequate performance of their duties and responsibilities
- Ceredigion County Council
- HMRC
- Carmarthenshire County Council
- Pembrokeshire County Council
There are also other specific situations where it may be necessary to disclose information about you, such as:
- Where I am required to provide the information by law
- Where disclosing the information is required to prevent or detect a crime
- Where disclosure is in the vital interests of the person concerned