1. Home
  2. Strategies and policies
  3. Data protection
  4. Privacy notice: Human Resources

Privacy notice: Human Resources

Who are we

Royal Borough of Windsor and Maidenhead (RBWM) Council 
Human Resources (HR)
Town Hall, 
St Ives Road,
Maidenhead, 
SL6 1RF
Email: hr.operations@rbwm.gov.uk

The lawful basis for processing the information

In accordance with the GDPR 2018 Article 6 our legal basis for processing personal information is:

  • Article 6 1(b) Processing is necessary for performance of a contract.
  • Article 6 1(c) Processing is necessary for compliance with a legal obligation.
  • Article 6 1(f) Processing is necessary for the purposes of legitimate interests.
  • Article 6(1) (e) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Our legal basis for processing Article 9 GDPR 2018 special category information is:

  • Article 9 2(b) Processing is necessary in the field of employment and social security and social protection law
  • Article 9 2(g) Processing is necessary for reasons of substantial public interest.
  • Schedule 1 part 1 or 2 of the Data Protection Act (DPA) 2018 to process special category data as it is necessary for:
    -    Obligations in connection with your employment
    -    Purpose of equal opportunities.

Criminal conviction information is processed in accordance with Schedule 1 of the DPA 2018.

How do we collect information from you

  • HR forms (online and paper copies)
  • By email, letter, interview/meeting notes 
  • Job application forms submitted online, by email, post.
  • Agency pro-formas 
  • DBS application
  • Occupational health referrals
  • Third parties electronically and/or hard copy such as pension providers, AVC provider, HMRC, HM Courts and Tribunal Service, Contributions Agency, the council’s employee benefits providers including Sodexo and NHS Fleet Solutions, trade unions - GMB and Unison.
  • iTrent HR system for recording pay details, absences, overtime and expenses/mileage, claims.
  • Incident report forms
  • Forms sent from schools and internal council services
  • iHasco and Skillsoft, our learning and development software system.

What type of information is collected from you

Human Resources

  • Personal details including name, addresses, email address, date of birth, contact number
  • Emergency contact(s)
  • Information processed under the Equality Act 2010; including, age, sex, race, disability, gender reassignment, marriage/civil partnership, religion/belief and sexual orientation
  • Criminal convictions and cautions
  • Employment history
  • Qualifications
  • Membership of professional organisations
  • Health and absence information.

Payroll

  • Date of marriage
  • National Insurance number
  • Personal bank account number
  • Tax code
  • AVC payment value
  • Salary sacrifice benefit value, value of official deductions including union subscriptions, court order payments, jury service payments etc.
  • Monthly variable data including overtime hours, standby claims, mileage and other expenses.
  • Absence information.

Health and Safety

  • Name
  • Personal address
  • Contact number
  • Date of birth
  • Details of incident including injuries and first aid treatment given.

Learning and Development

  • Name
  • Email address

How we use the information you have provided

We process your personal information to:

Human Resources

  • Process HR enquiries and deliver our services to you.
  • Assess applicants for shortlisting and appointment, to determine your suitability for employment.
  • Communicate and contact employees.
  • Enable processing of salary and other payments.
  • Enrol you to a pension scheme.
  • Manage employees through the employee lifecycle such as; joining, probation, job transfers, assessing capability, managing disciplinary, absences, restructuring, salary changes, retirement, termination, transfer to other organisations etc.
  • Equality information in line with statutory requirements 
  • Assess an application for specific benefits e.g. LGPS AVC.
  • Confirm your identity.
  • Monitor our workforce and produce internal anonymised statistical analysis
  • Manage your performance.
  • Enable us to comply with the Local Government Transparency Code 2015 which requires publication of information on the Council’s website.

Payroll

  • Process payments including salaries
  • Assess pension scheme contribution and administer your entitlement.
  • Manage and process statutory and voluntary deductions from employee pay.

Health and Safety

  • Log accident reports and carry out accident investigations.

Who has access to the information about you

RBWM Council employees including Human Resources, Learning and Development, Payroll and Health and Safety Officers. 

Who we may share your information with

How long we store your information

Human Resources

  • Unsuccessful job applicants – six months.
  • Employment records – seven years after termination of employment (six tax years plus current tax year) in electronic document management system, plus word, and PDF documents on secure network and, 25 years for those working with children. 
  • Employee pay and benefits records – seven years after termination of employment in word, excel and PDF documents on secure network and, 25 years for those working with children.

Payroll

  • All payroll related records – seven years after termination of employment. Electronically within Payroll system, excel/word documents on secure network and, 25 years for those working with children.
  • Associated pension records - 10 years after a change has been applied. This applies to all electronically stored personal information stored on our secure network.
  • Overtime and other monthly claims from schools - seven years after termination of employment.

Health and Safety

Accident records including RIDDOR– three years or where a child, until age 21. COSHH – 40 years and, 25 years for those working with children. 

Learning and Development

Record of learning seven years after course completion or when you leave RBWM personal information on the management of learning records software system is deleted. Personal information is stored for up to 25 years however, for those working with children

iTrent Systems

Emails to help desk and until a Call has been resolved -12 months for monitoring of issues. 

Calls to help desk - 12 months for monitoring of issues.

Does your service utilise automate decision making? – No.  

Further information

If you would like to know more about how we use your information or like to inform us of a change to your contact details, please contact us using the details above.