Privacy Notice (How we use employee information):
The Northern School of Art: those employed to work, or otherwise engaged to work GDPR: How we use The Northern School of Art’s workforce information We process personal data relating to those we employ to work as, or are otherwise engaged to work as part of The Northern School of Art. We do this for contractual employment purposes, to assist in the running of the School and to enable individuals to be paid. The collection of this information will also:
· improve the management of workforce data across the sector
· enable development of a comprehensive picture of the workforce and how it is deployed
· inform the development of recruitment and retention policies
· allow better financial modelling and planning
· enable monitoring of selected protected characteristics
· safeguarding of staff health and wellbeing
The personal data includes identifiers such as Name, Date of Birth, NI number, qualifications special category data such as gender and ethnic group, criminal records and absence information. We will keep this information for 6 years after an employee leaves for HR purposes and 12 years for payroll purposes in secure conditions (both physical and electronic). The personal data we collect is stored electronically on our server in the United Kingdom. Information held on paper will be kept in a secure location. We will ensure that your personal data is treated securely and in accordance with the General Data Protection Regulation (2018). We will not share information about you with third parties without your consent unless the law allows or requires us to. We are required to share some of your personal data with:
· the Local Government Pension Scheme
· the Teachers’ Pension Scheme
· the School’s payroll provider (Moorepay)
· the HMRC Under data protection regulations, staff have the right to request access to information about them that we hold.
To make a request for your personal information, contact [email protected]. You also have the right to:
· object to processing of personal data that is likely to cause, or is causing, damage or distress
· prevent processing for the purpose of direct marketing · in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed
· claim compensation for damages caused by a breach of the General Data Protection Regulation 2018
If you require more information about how we use your personal data, please email
[email protected]. If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with HR in the first instance. Alternatively, you can contact the Information Commissioner’s Office at https://ico.org.uk/concerns/
