This privacy notice is designed to help you understand how and why North Yorkshire Council processes your personal data. This notice should be read in conjunction with our corporate privacy notice.
Who are we?
North Yorkshire Council is a ‘data controller’ as defined by article 4(7) of the UK General Data Protection Regulation (UK GDPR). The council has appointed Veritau to be its data protection officer. Their contact details are:
Information Governance Office
Veritau
West Offices
Station Rise
York
North Yorkshire
YO1 6GA
Email: infogov@northyorks.gov.uk
Tel: 01904 552848
What personal information do we collect?
In most instances when a grievance is raised then your line manager, or another appropriate manager, will attempt to resolve issues informally.
If a grievance needs to be progressed formally then the council will appoint an investigatory officer who will conduct a fact-finding exercise and present their findings to the involved parties. This information could be comprised of, but not limited to:
- witness statements
- relevant correspondence (emails to/from your NYC account)
- social media accounts
- CCTV
- IT audit trails
- investigatory Interview notes
Why do we collect your personal information?
The council collects this data in order to resolve issues in the workplace.
Who do we share this information with?
As well as the investigatory officers, parties to the investigation, and (if appropriate) an appeals panel, the council may share this information with individuals within the HR team, unison reps, and any individual that you choose to accompany you.
How long do we keep your information for?
|
Data held |
Retention period |
|---|---|
|
Evidence and investigation outcome |
Six years upon closure; |
What is our lawful basis for processing your information?
- GDPR Article 6(1)(b)The processing of your personal information is necessary for the performance of a contract to which you are party (employment contract)
- GDPR Article 9(2)(b) The processing of your special category data is necessary for the carrying out of obligations and exercising specific rights of the controller or of the data subject in the field of employment
For more information about how we use your data, including your privacy rights and the complaints process, please see our corporate privacy notice.