HR privacy notice

The London Borough of Waltham Forest is a data controller under the General Data Protection Regulations (GDPR), 2018 as we collect and process personal information about you in order to provide HR support services.

This notice applies to current and former employees, workers and contractors. This notice does not form part of any contract of employment or other contracts to provide services. We may update this notice at any time.

You should read this notice, together with any other privacy notice we may provide in the future when we are collecting or processing personal information about you so that you are aware of how and why we are using your information. We reserve the right to update this privacy notice. We may also notify you in other ways from time to time about the processing of your personal information.

Data Controller: London Borough of Waltham Forest, Waltham Forest Town Hall,

Forest Road. London E17 4JF

We will comply with data protection law. This says that the personal information we hold about you will be:

• Used lawfully, fairly and in a transparent way
• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
• Relevant to the purposes we have told you about and limited only to those purposes
• Accurate and up to date
• Kept only as long as necessary for the purposes we have told you about
• Kept securely

HR collects and processes a range of information about you and from third parties.

The following information is collected from you for the performance of an employment contract:

• Your name, Date of birth, gender and contact details including; address, email address and phone number
• The terms and conditions of your employment
• Details of your education, qualifications, skills, experience and your employment history; including start and end dates with previous employers and with the council.
• Location of your employment
• Information about your remuneration such as your entitlement to pension benefits
• Details of your bank account and national insurance number
• Equal opportunities monitoring information including; information about your age, ethnicity, sexual orientation, marital status, disability status and religion to ensure meaningful monitoring and reporting.

The following information is collected from you to comply with our statutory obligations:

• Information about your nationality and entitlement to work in the UK
• Details of your criminal records, we will collect information about criminal convictions if it is appropriate given the nature of the role and where we are legally allowed to do so. We may be notified by you of criminal convictions during the course of your employment with the council. In additional circumstances, due regard will be given The Childcare (Disqualification) Regulations 2009.
• Details about your pay, tax and national insurance deductions, your P45, P60 and other third party deductions such as court orders.
• Details of your schedule (days of work and working hours) and attendance at work
• Details of periods of leave taken by you including holiday, sickness absence, family leave and sabbatical; and the reasons for the leave to ensure that employees are receiving the pay or other benefits to which they are entitled.
• Records of other types of leave (including maternity, paternity, adoption, parental and shared parental leave); to allow effective workforce management to ensure that the council complies with duties in relation to leave entitlement, and to ensure that employees are receiving the pay or other benefit to which they are entitled.
• Information about medical or health conditions through consulting with occupational health (OH). This includes disability status to enable the council to make reasonable adjustments and meet our obligations under health and safety in the workplace. The council needs to ensure that employees are receiving the pay or other benefits to which they are entitled.

Equal opportunities monitoring information including; information about your age, ethnicity, sexual orientation, marital status, disability status and religion to ensure meaningful monitoring and reporting.

The following information is collected and processed for the purpose of legitimate interests:

• Performance management and appraisal information and information to determine performance requirements and professional development.
• Training records to establish performance objectives and professional development
• Assessing your skills and experience for a particular job/task/promotion and/or as part of an organisational restructure in the council; to make decisions about your continued employment.
• CCTV footage and other information obtained through electronic means such as swipe card records and your photo for identification purposes.
• Information about your dependents and next of kin/emergency contact details
• Details of your trade union membership to pay union premiums, register the status of a protected employee and comply with employment law obligations.

The Council has a legitimate interest in processing personal data before, during and after the end of the employment contract. Processing employee data enables the council to:

• Undertake recruitment and promotion processes to attract the most suitably qualified staff.
• Maintain accurate and up to date employment records for efficiency in the employment relationship.
• Making decisions about pay reviews, honorariums and market supplements to administer the working relationship.
• Operate and keep a record of discipline, capability and grievance processes and correspondence, under the implied duty of good faith and to ensure acceptable conduct within the workplace.
• Operate and keep a record of employee performance and related processes for professional development; for succession planning and to meet council objectives.
• Operate and keep a record of absence and absence management procedures for effective workforce management purposes.
• To monitor your use of our information and communication systems to ensure compliance with our IT policies (e.g. outlook, Lync, internet, work phones and laptops).
• To ensure network and information security is maintained at all times. Such includes preventing unauthorised access to council systems and portals including electronic communication systems, and to take steps to prevent the distribution of malicious software.
• Run reports for the management of employee processes such as starters, leavers, establishment data, payroll, performance appraisals, Disclosure and Barring Service, fixed-term contracts, visa expiry, absence reports, maternity/paternity, continuous service, age, working hours, contract type, ethnicity, gender and demographics.
• To respond to and defend legal claims
• To prevent fraud
• Ensure effective general HR and business administration

Some of the above grounds for processing will overlap and there may be several grounds that justify our use of your personal information.

Generally, the information we hold will have been provided by you (on an application or other forms at the start of or during your employment or when we communicate with you (e.g. right to work documents, pension benefit forms). We may also hold information provided by third parties where this is relevant i.e. funding organisations such as the Local Government Association (LGA), The Department for Work and Pensions (DWP), Her Majesty Revenue and Customs (HMRC), Local Government Pension Scheme (LGPS), Teachers Pension Scheme (TPS), Disclosure and Barring Service (DBS), Occupational Health (OH) and references supplied by former employers.

Data will be stored in a range of different places, including your HR file, HR systems and other IT systems such as email and the HR shared drive.

We will only ask for personal information that is appropriate to enable us to deliver our services. In some cases, you can refuse to provide your details if you deem a request to be inappropriate. However, you should note that this may impact our ability to provide some services to you.

• Consent
• Contract
• Public task

Your information may be shared internally, including HR and payroll, your service manager where you work and IT staff where access to the data is necessary for carrying out their work. We will share your personal information confidentially with your service area, as part of our regular reporting activities on council performance and/or in the context of a restructuring exercise.

We may share information you have provided, and obtain information about you from other Waltham Forest Council departments such as Housing where held and only as appropriate.

We may share your information with third parties such as employers to obtain pre-employment references training providers, apprenticeship providers and funding agencies; The Department for Work and Pensions (DWP), The Greater London Authority (GLA), The Local Government Pension Scheme (LGPS), The Teachers’ Pension Scheme (TPS), Occupational Health (OH) and auditors. Where you are auto-enrolled into the Local Government Pension Scheme, your details will also be held by Wandsworth Council. Wandsworth are our Pensions administrators. The council may share your data in the context of; a sale of some or all of its business/Transfer of Undertakings and Protection of Employment (TUPE). In these circumstances, the council may need to share your information with a regulatory body such as the Redundancy Payments Service (RPS). We may share your information with the Local Government Ombudsman in the event of complaints.

The Council will not transfer your data outside the European Economic Area (EEA).

Information provided to us to deliver HR services are kept for the duration of your employment and we will keep your data after the end of your employment for a minimum of 7 years or 25 years if you work within Children services after which time it will be securely destroyed.

In some circumstances, we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. Further details about retention periods for different aspects of your personal information can be found in the council’s retention policy.

You have obligations under your employment contract to provide the council with information about capability/disciplinary or other matters under the implied duty of good faith.

If you do not provide personal information this will hinder the council’s ability to administer the rights and obligations arising as a result of the employment relationship.

You will need to provide the council with data in order to exercise your statutory rights such as your right to work in the UK. Failure to provide this necessary personal data may mean that you are unable to exercise your statutory rights, which would result in you not being able to work with us.

Certain information, such as contact details, and bank details, qualification and employment history have to be provided to allow the council to enter a contract of employment with you.

We will only use your personal information for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Our Data Protection Officer is Mark Hynes. You can contact him at Data.Protection@walthamforest.gov.uk.

Please see the relevant section of the Corporate Privacy Notice.

Please see the relevant section of the Corporate Privacy Notice.

Please see the relevant section of the Corporate Privacy Notice.

If we’re unable to resolve your complaint to your satisfaction, you can make a complaint to the Information Commissioner's Office (ICO).