This privacy notice is designed to help you understand how and why the council’s insurance and risk management service processes your personal data. This notice should be read in conjunction with our corporate privacy notice.
Who are we?
North Yorkshire Council is a ‘data controller’ as defined by Article 4(7) of the UK General Data Protection Regulation (UK GDPR). The processing of insurance claims made by employees and members of the public against the council is administered by the insurance and risk management service.
The council has appointed Veritau Ltd to be its data protection officer. Their contact details are:
Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA
Email: infogov@northyorks.gov.uk
Tel: 01904 552848
What personal information do we collect?
We collect the information you and/or your legal representative provide to us when submitting your claim, this may include:
- name, address and other contact information (for example, phone or email)
- date of birth
- national insurance number
and dependent on the type and circumstances of the claim:
- employment information (for example, employee number, earnings details)
- medical information relating to injuries sustained and assistance sought
During the investigation of your claim we may also collect data such as:
- incident report / accident forms
- witness statements
- training records
Why do we collect your personal information?
We collect this information to allow us, our claims handlers, Insurers, and insurance brokers to deal with your claim effectively and where applicable in accordance with the civil procedure rules governing claims in England.
Who do we share this information with?
In order to deal with your insurance claim we may share information with our appointed claims handlers and our Insurers.
We may also share information with a number of national registers which have been established to combat fraudulent claims.
How long do we keep your information for?
|
Data Held |
Retention Period |
|---|---|
|
All personal data in relation to the processing of an insurance claim |
10 years after closure of the claim or longer where required by legislation |
What is our lawful basis for processing your information?
- article 6(1)(c) - Legal obligation - the processing is necessary for us to comply with the law relating to insurance claims – the civil procedure rules
- article 9(2)(f) - Legal claims - processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity
- article 9(2)(g) – Substantial Public interest supplemented by Schedule 1(20) of the Data Protection Act 2018 which relates to processing necessary for insurance purposes
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.