Notice about how we use your personal information
We are the data controller of personal information about you. We are Hartlepool College of Further Education. Our address is: Stockton Street, Hartlepool TS24 7NT.
Our Data Protection Officer is Katie Handshaw. If you have any questions about this policy or the ways in which we use your personal information, please contact our Data Protection Officer at kh@dpocentre.com
This notice sets out how we use your personal information as your employer or when you apply for a job with us and in particular:
the information that you give us;
the uses made of your personal information;
the legal basis on which we collect and use your personal information;
how long we keep your personal information:
how we share your personal information;
how we transfer your personal information outside of Europe; and
your rights over your personal information.
THE INFORMATION THAT YOU GIVE US
Prospective employees:
We will collect personal information from you when you apply for a job with us and/or are subject to the pre-employment checking process. This will include your: name; address; phone number; email; date of birth; DfE number (if applicable); NI number; current employment details including job title, start and end dates, current salary, notice period, reason for leaving; all past employment details; education details; interests; whether you are related to any personnel of the College or Governing Body; references; special arrangement details for interview; criminal record details; Disclosure Barring Service check, including European Economic Area (EEA) check if applicable; Overseas check where required; Prohibition from Management check if applicable; Prohibition from Teaching check if applicable; Check of Barred List/List 99; Pre-employment Health Questionnaire/Medical Report.
Employees:
We will collect personal information from you when you are a new starter and become an employee of the College. This will be your: name; marital status; previous surname(s); address; date of birth; occupation/department; type of employment; phone numbers; email addresses; NI number; start date; next of kin and contact details; bank details; pension details; statement about employment; student loan details; offer letters; employment terms and conditions; changes to your terms and conditions; certifications/qualifications, disciplinary, grievance, capability, job descriptions, sickness absences, maternity/paternity/adoption information; accidents and injuries at work; working time information; annual leave records; recruitment information; photo; payroll details; gender; flexible working; exit interviews; return to work notifications; parental leave requests; appraisal/performance; bank account number; sort code; disqualification information; sickness absences; medical information; CCTV footage and other information obtained through electronic means; information about your use of our information and communication systems.
Where your information will be kept:
The information we collect will be securely stored at the College or in cloud servers. Storage security measures all comply with GDPR requirements.
THE USES MADE OF YOUR PERSONAL INFORMATION
We will use your personal information set out above as follows:
for the recruitment process and for carrying out pre-employment checks;
for safeguarding students;
for checking your identity and right to work in UK;
for checking your qualifications;
to evidence/verify your suitability to carry out your role;
to keep an audit trail of the checks we have made and our relationship with you in case of employment claims;
to set up payroll and pension and to reimburse expenses;
for dealing with HMRC;
for communicating with you;
for carrying out our role as your employer or potential employer.
We treat your personal information with confidentiality and we do not use it for any other purposes.
THE LEGAL BASIS ON WHICH WE COLLECT AND USE YOUR PERSONAL INFORMATION
We collect and use your personal information on the basis that it is necessary for performing our employment contract with you, or it is necessary to take steps before entering into the contract with you. We also collect and use your personal information on the basis that we need to do so in order to comply with our legal obligations.
Where we collect your special category personal information, we do this on the basis that it is necessary for the purposes of carrying out our obligations in the field of employment law. Special categories of personal data are personal data that reveal a person’s racial or ethnic origin, political opinions, religions or philosophical beliefs, trade union membership, genetic data (i.e. information about their inherited or acquired genetic characteristics, information about their physical, physiological or behavioural characteristics (such as facial images and fingerprints), physical or mental health, sexual life or sexual orientation and criminal records).
HOW LONG WE KEEP YOUR PERSONAL INFORMATION
We will not keep your personal information for longer than we need it for the purposes we have explained above.
When you apply for a job with us, but your application is unsuccessful, we will keep your personal information for 1 year.
When you are an employee, we will keep your personal information for as long as you work with us and then after you leave, we will keep your personal information for up to 40 years depending on the type of information (see QAPP 4.2.4 Retention and Destruction of Information and Records).
HOW WE SHARE YOUR PERSONAL INFORMATION
We may share your personal information with third parties where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so.
We may share the personal information that you give us with the following organisations (or types of organisation).
Organisation / type of organisation:
Pension Scheme Provider (e.g. Kier, Teachers’ Pension Scheme)
Government Organisation (e.g. Child Maintenance Service, Department for Work and Pensions; HMRC)
Hosted HR and Payroll System (e.g. MHR – iTrent)
Employee Benefits Scheme (e.g. Perkz)
Criminal Record and Barred List Checking (e.g. UKCRB, Disclosure and Barring Service)
Occupational Health and Counselling Services (e.g. NHS, Alliance Psychological Services)
Legal Advice
Awarding Bodies where appropriate
HOW WE TRANSFER YOUR PERSONAL INFORMATION OUTSIDE OF EUROPE
We would only transfer your information outside of Europe to seek pre-employment checks (references and overseas checks) if you have lived or worked outside of Europe. In this case, your explicit consent will be sought and the relevant encryptions and confidentiality would apply to all correspondence.
YOUR RIGHTS OVER YOUR PERSONAL INFORMATION
You have a number of rights over your personal information, which are:
the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);
the right to ask us what personal information about you we are holding and to have access to a copy of your personal information;
the right to ask us to correct any errors in your personal information;
the right, in certain circumstances such as where our use of your personal information is based on your consent and we have no other legal basis to use your personal information, to ask us to delete your personal information;
the right, in certain circumstances such as where we no longer need your personal information, to request that we restrict the use that we are making of your personal information;
the right, in certain circumstances, to ask us to review and explain our legitimate interests to you; and
the right, where our use of your personal information is carried out for the purposes of an agreement with us and is carried out by automated means, to ask us to provide you with a copy of your personal information in a structured, commonlyused, machine-readable format.
If you wish to exercise any of your rights under GDPR please contact the College's Data Protection Officer by email kh@dpocentre.com or telephone +44 (0) 7732 900 693 or ask in person at the College's Reception.
CHANGES TO OUR PRIVACY POLICY
We keep our privacy policy under regular review. Any changes we make to our privacy policy in the future will be notified to you by email and/or the College intranet.
This privacy notice has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the UK Data Protection Act 2018.
