Privacy Policy
Who we are
Our website address is: https://harrogateintegratedfacilities.co.uk
We collect and store your information in order for us to communicate Harrogate Integrated Facilities news and events.
Data Controller
The data controller responsible for keeping your information is Harrogate Integrated Facilities. We are registered with the Information Commissioner’s Office (ICO). The ICO is the UK’s independent body set up to uphold information rights. Our registration number is: ZA311163.
Data Protection Officer
It is a requirement that organisations appoint a Data Protection Officer. The Data Protection Officer is responsible for:
-
informing and advising us and its employees about their obligations to comply with data protection laws
-
monitoring compliance with data protection laws
-
being the point of contact regarding data protection
Our Data Protection Officer is:
Sam Layfield, Head of Performance & Planning
Harrogate and District NHS Foundation Trust
Harrogate District Hospital
Lancaster Park Road
Harrogate
North Yorkshire
HG2 7SX
01423 885959
hdft.dataprotectionofficer@nhs.net
Why we collect your information
The organisation has several legal bases that it uses to process your personal data, and these include consent, legitimate interest, public task, vital interest, contractual and legal obligation.
We only collect and use your information for the lawful purposes of administering the business of the organisation. These purposes include:
-
To improve the management of the organisation workforce data
-
To enable a comprehensive picture of the workforce and how it is deployed to be built up
-
To inform the development of recruitment and retention policies
-
To allow better financial modelling and planning
-
To enable monitoring of ethnicity, sexual orientation, disability and other protected characteristics
-
To keep images to identify you either as part of the various security access systems, including CCTV, or as part of an overall briefing system for senior managers
-
To keep images that appear in organisation or other publications or websites to market and promote the Trust
-
To allow the organisation policies to be implemented and acted upon when appropriate
-
To enable the organisation to conduct administration related to your employment, including ensuring that staff are paid
-
To gather evidence for disciplinary and other staff processes
What information we collect
-
Personal details such as name, address, telephone number(s), date of birth
-
Personal demographics including gender, race, ethnic origin, sexual orientation, religious or other beliefs, and whether you have a disability or require any additional support or adjustments for your employment.
-
Biometric data
-
Medical information
-
Emergency contact(s)
-
Education and training
-
Employment details
-
Membership of professional bodies and/or trade union(s)
-
Bank details
-
Pension details
-
Offences (including alleged offences), criminal proceedings, outcomes and sentences
-
Employment tribunal applications, complaints, accidents and incident details
-
Visual images, e.g. photographs on staff notice boards or CCTV monitoring
-
Supervision and appraisal documentation
-
Sickness absence and annual leave details
Covid-19 and Flu Vaccinations
- Vaccination Track
The organisation records employee uptake of Flu and COVID-19 vaccinations. This information is reported at a national level to NHS England. To meet these requirements the organisation utilises a system called Vaccination Track to record COVID-19 and flu vaccination status.
This system will hold personal-identifiable data which is required to process vaccination uptake relating to COVID-19 and Flu, including the booster vaccination programme. This processing includes:
-
-
Name
-
Date of Birth
-
Postcode
-
Gender
-
Ethnicity
-
Employee number
-
NHS Number (if provided by the employee)
-
Work email
-
Mobile number
-
Work telephone number
-
Staff group
-
Job role
-
Assignment status
-
Health information, specific to purpose and provided during the clinical vaccination process
-
The organisation has administration access to review the data for attendees at the vaccination clinics; this information is needed for reporting purposes. Internal role-based access controls are in place to ensure access is restricted to those who require this as part of their role and responsibility. This information is then used to update the National Immunisation Vaccination System (NIVS) for healthcare workers.
- National Immunisation Vaccination Service (NIVS)
NHS England has commissioned and implemented a National Immunisation Vaccination Service (NIVS). This is provided by NHS England and NHS Improvement and will be used to record the vaccination details of healthcare workers. This delivers a centralised data capture tool for clinical teams delivering the seasonal flu and COVID-19 immunisations. The vaccination event data will feed back to GP systems and the National Immunisations Management System (NIMS).
Information will be recorded within NIVS using minimal information. This processing includes:
-
-
Name
-
Postcode
-
NHS Number
-
Gender
-
Date of Birth
-
Records are limited to employees who have identified as working for our organisation. Data will be disseminated to NHS Digital as Data Processors on behalf of NHS England.
- National Immunisations Management System (NIMS)
The National Immunisations Management System (NIMS) is provided by the NHS South, Central and West Commissioning Support Unit (SCW). SCW are contracted by NHS England to run NIMS for Flu and COVID-19. NIMS is the National Immunisation System of Record and provides data for Public Health England, NHS England and at ministerial level. Vaccinations administered at any site are stored on NIMS.
- Clocking in and out data
Clocking in and out data is processed by OnTime (RLDatix) to record an employee’s personal clocking in/out times in Optima (Health Roster). The fingerprint (biometric) is converted into an algorithm which aligns to the individual’s pay record within the existing Health Roster/Optima environment and interfaces with ESR. Data is retained only as long as necessary for business or other compelling purposes, once these purposes have been satisfied personal data will be securely deleted. Please note, alternative methods of clocking in and out are available for staff who prefer not to use biometrics.
- CCTV
We have CCTV systems and body worn cameras in some of our premises used by staff and members of the public, for the purposes of public and staff safety and crime prevention and detection. CCTV is also installed on the outside of some of our buildings for the purposes of monitoring building security and crime prevention and detection.
Images captured by CCTV will not be kept for longer than necessary. However, on occasions there may be a need to keep images for longer, for example where a crime is being investigated. We operate CCTV and disclose in accordance with the codes of practice issued by the Information Commissioner.
Who we may share your information with
We will not routinely disclose any information about you to anyone outside the organisation without your consent. However, there are circumstances where we must or can share information about you owing to a legal/statutory obligation. We may obtain and share personal information with a wide variety of other bodies, which may include, but is not limited to:
-
Her Majesty’s Revenue and Customs (HMRC)
-
Department for Work and Pensions (DWP)
-
Disclosure and Barring Service (DBS)
-
Home Office
-
Child Support Agency
-
Regulatory bodies, e.g. NMC, GMC
-
Law enforcement agencies including the Police and the Serious Organised Crime Agency
-
Office of National Statistics
NHS Streamlining Process: Immunisations and Vaccinations
As part of the NHS streamlining process, the aim of which is to improve efficiency when employees transfer from one provider of NHS services to another provider of NHS services, information about immunisations and vaccinations of all staff may be stored on the Occupational Health Module of the Electronic Staff Record (ESR). This information may then potentially be accessed by a prospective employer via an Inter Authority Transfer.
How we maintain the confidentiality of your information
We are committed to protecting your privacy and will only use information collected lawfully in accordance with:
-
Common Law Duty of Confidentiality
-
Records Management Code of Practice for Health and Social Care 2016
-
Every member of staff who works for an NHS organisation has a legal obligation to keep information about you confidential. Staff also undertake annual data security training.
How long we keep your information for
We store information for the time stipulated in Records Management Code of Practice for Health and Social Care.
Your rights
Data protection laws give individuals rights in respect of the personal information that we hold about you. These are:
-
To be informed why, where and how we use your information.
-
To request access to your information.
-
To request information to be corrected if inaccurate or incomplete.
-
To request for your information to be deleted or removed where there is no need for us to continue processing it.
-
To request us to restrict the use of your information.
-
To request us to copy or transfer your information from one IT system to another in a safe and secure way, without impacting the quality of the information.
-
To object to how your information is used.
-
To challenge any decisions made without human intervention (automated decision making).
Accessing your information
Data protection laws give you the right to request access to your information. Please contact the Human Resources Team:
Human Resources Team
Harrogate and District NHS Foundation Trust
Harrogate District Hospital
Lancaster Park Road
Harrogate
North Yorkshire
HG2 7SX
01423 554494
Requesting information to be corrected
If you believe your information is inaccurate or incomplete please contact your line manager.
Concerns
Should you wish to raise a concern about the use of your information, please contact a member of the Human Resources Team:
Human Resources Team
Harrogate and District NHS Foundation Trust
Harrogate District Hospital
Lancaster Park Road
Harrogate
North Yorkshire
HG2 7SX
01423 554494
If you remain unhappy with the outcome of your enquiry you can contact the Information Commissioner:
The Information Commissioner
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
0303 123 1113