COVID-19 Data Processing Privacy Notice for Staff
Glasgow Clyde College takes its data protection responsibilities seriously. The purpose of this Privacy Notice is to inform you how we will process your personal information, setting out our responsibilities and obligations as a Data Controller.
The Data Controller for your information is Glasgow Clyde College, 690 Mosspark Road, Cardonald, Glasgow, G52 3AY, registered with the ICO, registration number Z7497735.
All your personal information will be treated in accordance with data protection law including the Data Protection Act 2018 and the General Data Protection Regulation (GDPR).
For any queries or concerns about how your personal data is being processed you can contact the Data Protection Officer at firstname.lastname@example.org
The College will use your personal data for the following purpose(s):
The College must ascertain the COVID-related health status of all employees during the current pandemic, in particular to assess health risks to support employees to return to work after lockdown, and for the foreseeable future.
The purpose of the processing is to ensure the health and safety of all College staff, and consider this in relation to reopening College campuses. The data processed will contain a status return (yes/no) for various conditions that will be used as part of a risk assessment to ensure that working conditions can be adapted to create the safest conditions possible for employees and other college visitors.
For Scottish Government guidance on specific medical conditions, visit:
The College will not process medical details related to the declared status.
Where special category data is processed by the College to support staff and to make reasonable adjustments, this will be done as outlined in the main Staff Privacy Notice, available here: https://www.glasgowclyde.ac.uk/staff-privacy-notice
The College will also share anonymised statistical data with the Scottish Funding Council, other governmental bodies and the Health and Safety Executive for public health-related purposes.
Sources of information:
The data being processed is provided by the data subject (member of staff), theCollege’s occupational health provider or suitably medically qualified professionals.
Our lawful basis for using the data is:
- necessary for the College to comply with law, specifically:
- Health and Safety at Work etc Act 1974,including general duties of employers to their employees, and general duties of employers and self-employed to persons other than their employees.
The data being used does not includes special category (sensitive) data.
Your data will, or may, be shared with the following recipients or categories of recipient:
Anonymised statistical data (for example, number of staff within specific categories, with personal data, including name removed) will be shared with the Scottish Funding Council, other government agencies and the Health and Safety Executive. Anonymised data may also be shared with Trade Unions.
This process does not involve your data being sent outside of the European Union.
The processing of your data does not involve automated decision-making.
Your data will be retained for the following length of time:
Your personal data will be stored until the powers enacted in the Coronavirus Act 2020 are repealed, likely to be 18 -24 months.
Under data protection law, you have legal rights in relation to your information, including:
- your right to be informed of how your data is being processed, (as in this privacy notice);
- your right to access and obtain a copy of your data on request, often referred to as a subject accessrequest;
- your right to ask an organisation to change incorrect or incompletedata;
- your right to ask an organisation to delete or stop processing your data under certaincircumstances;
- your right to object to the processing of your data under certaincircumstances;
- your right to data portability and in relation to automated decision making and profiling.
Please note that the above rights are not absolute, and we may be entitled to refuse requests where exceptions apply. Further details about your privacy rights can be found on the Information Commissioner’s Office website www.ico.org.uk
If you would like further information about how your personal data is processed by the College or you have any concerns, please contact our Data Protection Officer (DPO) in the first instance at email@example.com.
If you are dissatisfied with the response, you have the right to lodge a complaint with the Information Commissioner’s Office using their website https://ico.org.uk/make-a-complaint/ by email: firstname.lastname@example.org or by phone on 0303 123 1113. Alternatively, you can write to:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
We review our privacy notices regularly.
Last reviewed September 2020.