This privacy notice provides details on how we, Norfolk County Council, use your personal information for the purposes of supporting you to access social care and health training and skills development.
By ‘use’ we mean the various ways your personal information may be processed including storing and sharing the information.
We also provide the following details in our general privacy notice:
- Who we are
- How long we use your information for
- Your rights under the UK General Data Protection Regulation (the GDPR) and
- How to exercise them
You can also ask us for a copy of this information.
What we use your information for
We may use the information about you to:
- Offer support to access training and skills development opportunities
- Matching to a mentor
- Supporting care providers to access training and skills development for their workforce
We also use this information to assess the quality of our services and evaluate and improve our policies and procedures.
We may also use information in other ways compatible with the above.
What personal data we collect and use about you
We will collect and use:
- Date of birth
- Phone number
- Email address
- Employer and role
- Current highest level of education
- Length of time working in adult social care or health – if applicable
- Current role – if applicable
- Current employer – if applicable
- Current employer status/type e.g. residential, domiciliary care
- Preferred first name
- Preferred format
- Immigration status if an international recruit
We may also collect and use information about:
- Racial or ethnic origin
- Health and social care
This information is classed as “special category data” under the GDPR. We may only collect these data when it is relevant and for the purposes described above.
The GDPR includes safeguards to protect the use of your special category data. Further details can be found in our special category data and criminal offences data policy. This sets out our procedures for compliance with the principles of the GDPR and the retention and erasure of this information.
Who provides this information
We receive most of this information from you, but we may also obtain some of this data from:
- Your employer (if you are a member of the health and social care workforce)
Who we share your information with
We will share your information with:
Any information which is shared will only be shared on a need to know basis, with appropriate individuals. Only the minimum information for the purpose will be shared.
How the law protects you and the legal basis for processing your information
We have legal grounds under the GDPR to process this information because it is necessary:
- For the performance of a task carried out in the public interest and the task or function has a clear basis in law
These statutory powers and duties are:
- The Care Act 2014 – section 5
- We also use consent as the lawful basis for processing personal data for people who have given their consent to receive our newsletter. You have the right to withdraw any consent you have given for the processing of personal data at any time. For details on how to exercise this right and your other rights, please see our general privacy notice.
We have legal grounds to process (including share) special category data because it is necessary:
- For reasons in the substantial public interest and in the exercise of a statutory function. (The statutory functions are the same as the statutory powers and duties referred to above.)
How long will we keep your personal information for
When the information is no longer needed for the above purposes, it will be securely deleted.
If we need to use your information for research or reports, your information will be anonymised and any information taken from notes (handwritten or typed) during any consultation sessions will be securely destroyed. The information will continue to be used in a summarised and anonymised form in any research reports or papers that are published.
How we keep your information
The information is stored electronically, on the County Council’s network including records management systems.
We do not process your information outside of the UK and European Economic Area.
We do not make automated decisions about you.
Changes to this notice
We may amend this privacy notice at any time so please review it frequently. The date below will be amended each time this notice is updated.
This notice was created on 4 October 2023.