What gives us the right to use your personal information?
Without using your personal information, we would not be able to provide services to you.
The following sections explain how we will use your personal data, each lawful basis of the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 (DPA 2018) we rely on, other relevant legislation, and how we meet the requirements of data protection legislation.
Recruitment & Employment
What we use your data for
- running recruitment and promotion proceses
- managing recruitment and employment processes, including job alerts and follow up emails
- providing employment contract and administer benefits/pension
- paying you in accordance with your contract
Lawful basis for processing personal data (Article 6 UK GDPR)
- Art. 6(1)(b) – Contract performance
- Art. 6(1)(c) – Legal obligation
- Art. 6(1)(f) – Legitimate interests
Lawful basis for processing special category data (Article 9 UK GDPR)
- Art. 9(2)(b) – Employment & social security law
Conditions for processing criminal conviction data (Schedule 1, DPA 2018)
- Part 1, paragraph 1(1)(a) – Obligations in connection with employment (for roles requiring checks)
Conditions for processing special category data (Schedule 1, DPA 2018)
- Part 1, paragraph 1(1)(a) – Employment obligations
Relevant employment law and other regulations
- Employment Rights Act 1996
Employment Records & Administration
What we use your data for
- maintaining accurate employment records and contact details
- ensuring effective Human Resources and business administration
- providing references for current or former employees
Lawful basis for processing personal data (Article 6 UK GDPR)
- Art. 6(1)(b) – Contract performance
- Art. 6(1)(c) – Legal obligation
- Art. 6(1)(f) – Legitimate interests
Lawful basis for processing special category data (Article 9 UK GDPR)
- Art. 9(2)(b) – Employment & social security law
Conditions for processing criminal conviction data (Schedule 1, DPA 2018)
- Part 1, paragraph 1(1)(a) – Obligations in connection with employment
Conditions for processing special category data (Schedule 1, DPA 2018)
- Part 1, paragraph 1(1)(a) – Employment obligations
Relevant employment law and other regulations
- Employment Rights Act 1996
Workforce Management & Development
What we use your data for
- performance management, career development and succession planning
- absence and leave management (including maternity, paternity, adoption and parental leave)
- training attendance records
Lawful basis for processing personal data (Article 6 UK GDPR)
- Art. 6(1)(b) – Contract performance
- Art. 6(1)(c) – Legal obligation
- Art. 6(1)(f) – Legitimate interests
Lawful basis for processing special category data (Article 9 UK GDPR)
- Art. 9(2)(b) – Employment & social security law
Conditions for processing criminal conviction data (Schedule 1, DPA 2018)
- Not applicable
Conditions for processing special category data (Schedule 1, DPA 2018)
- Part 1, paragraph 1(1)(a) – Employment obligations
Relevant employment law and other regulations
- Employment Rights Act 1996
Health, Safety & Wellbeing
What we use your data for
- obtaining occupational health advice
- complying with health and safety duties
- ensuring workplace wellbeing
- recording and investigating incidents, accidents and near misses.
Lawful basis for processing personal data (Article 6 UK GDPR)
- Art. 6(1)(b) – Contract performance
- Art. 6(1)(c) – Legal obligation
Lawful basis for processing special category data (Article 9 UK GDPR)
- Art. 9(2)(b) – Employment & social security law
Conditions for processing criminal conviction data (Schedule 1, DPA 2018)
- Not applicable
Conditions for processing special category data (Schedule 1, DPA 2018)
- Part 1, paragraph 1(1)(a) – Employment obligations
Relevant employment law and other regulations
- Health and Safety at Work etc. Act 1974
Equality & Diversity
What we use your data for
- monitoring and promoting equality and diversity
- equal opportunities monitoring
Lawful basis for processing personal data (Article 6 UK GDPR)
- Art. 6(1)(c) – Legal obligation
- Art. 6(1)(f) – Legitimate interests
Lawful basis for processing special category data (Article 9 UK GDPR)
- Art. 9(2)(g) – Substantial public interest
Conditions for processing criminal conviction data (Schedule 1, DPA 2018)
- Not applicable
Conditions for processing special category data (Schedule 1, DPA 2018)
- Part 2, paragraph 8(1)(b) – Equality of opportunity
Relevant employment law and other regulations
- Equality Act 2010
Security & Access
What we use your data for
- providing access to systems and maintain security
- using staff photographs for identification and collaboration
Lawful basis for processing personal data (Article 6 UK GDPR)
- Art. 6(1)(b) – Contract performance
- Art. 6(1)(f) – Legitimate interests
- Art. 6(1)(e) – Public task (elected members)
Lawful basis for processing special category data (Article 9 UK GDPR)
- Art. 9(2)(b) – Employment & social security law
Conditions for processing criminal conviction data (Schedule 1, DPA 2018)
- Not applicable
Conditions for processing special category data (Schedule 1, DPA 2018)
- Part 1, paragraph 1(1)(a) – Employment obligations
Relevant employment law and other regulations
- Employment Rights Act 1996
Human Resources Processes & Compliance
What we use your data for
- disciplinary and grievance processes
- reporting to statutory authorities
- responding to and defending legal claims.
Lawful basis for processing personal data (Article 6 UK GDPR)
- Art. 6(1)(b) – Contract performance
- Art. 6(1)(c) – Legal obligation
Lawful basis for processing special category data (Article 9 UK GDPR)
- Art. 9(2)(b) – Employment & social security law
Conditions for processing criminal conviction data (Schedule 1, DPA 2018)
- Part 1, paragraph 1(1)(a) – Obligations in connection with employment
Conditions for processing special category data (Schedule 1, DPA 2018)
- Part 1, paragraph 1(1)(a) – Employment obligations
Relevant employment law and other regulations
- Employment Rights Act 1996
Additional Purposes
What we use your data for
- Access to Work scheme
- business continuity management
- payroll, pensions, tax, allowances and expenses
- calculating carbon emissions linked to employment activities
Lawful basis for processing personal data (Article 6 UK GDPR)
- Art. 6(1)(b) – Contract performance
- Art. 6(1)(c) – Legal obligation
- Art. 6(1)(e) – Public task (elected members)
Lawful basis for processing special category data (Article 9 UK GDPR)
- Art. 9(2)(b) – Employment & social security law
Conditions for processing criminal conviction data (Schedule 1, DPA 2018)
- Not applicable
Conditions for processing special category data (Schedule 1, DPA 2018)
- Part 1, paragraph 1(1)(a) – Employment obligations
Relevant employment law and other regulations
- National Insurance Contributions Act 2014
- HM Revenue and Customs (HMRC) pension legislation
Last reviewed: