Privacy notice - Health and safety
Introduction
This privacy notice explains how we collect, use, and protect your personal information in connection with the Council's Corporate Health and Safety Service. Wiltshire Council is committed to being transparent about how it collects and uses the data to manage and fulfil our health and safety responsibilities with the current Data Protection legislation.
Purpose of the privacy notice
This notice aims to inform you about:
- the types of personal data we collect
- how we use your data
- your rights regarding your personal information
Information we collect
We may collect the following categories of personal information:
- identification information: name, date of birth, address, phone number, email address
- health and safety information: health-related data as necessary for assessments and compliance
- employment information: job title, department, and work location
- incident details: information about health and safety incidents, accidents or near misses in relation to employee safety
Legal basis for processing
We process your personal data based on the following legal grounds:
- Public Task: to protect the health and safety of individuals and the community
- Consent: where you provide explicit consent for specific data processing activities, particularly related to health information
- Legal obligation: as governed by health and safety regulations such as the Health and Safety at Work etc Act 1974, the Management of Health and Safety at Work Regulations 1999 and Control of Substances Hazardous to Health Regulations 2002
How we use your information
Your personal data may be used for:
- conducting risk assessments and audits
- managing health and safety incidents
- providing training and support
- ensuring compliance with health and safety legislation
- to protect employees of Wiltshire Council (this includes personal safety and lone working devices)
Data sharing
We may share your personal information with:
- regulatory bodies and health agencies, as required by law
- emergency services, in the event of an incident
- third-party contractors and service providers involved in health and safety management
We ensure that any data sharing is conducted in accordance with UK GDPR.
Data retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy notice and in compliance with legal requirements. Specific retention periods may vary depending on the type of data collected.
Your rights
Under the UK GDPR, you have the following rights concerning your personal data:
- Right to Access: request a copy of your personal information
- Right to Rectification: request correction of inaccurate or incomplete data
- Right to Erasure: request deletion of your data under certain conditions
- Right to Restrict Processing: request restriction of processing in certain circumstances
- Right to Object: object to the processing of your data based on legitimate interests
To exercise any of these rights, please contact our Information Governance team at InformationGovernance@wiltshire.gov.uk (opens new window).
Security of your information
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These measures include encryption, access controls, and regular training for staff on data protection principles.
Changes to this privacy notice
We may update this privacy notice from time to time to reflect changes in our practices or legal requirements.
Contact information
If you have any questions, concerns, or requests regarding this privacy notice, or your personal data, please contact:
Health and Safety Service: healthandsafety@wiltshire.gov.uk (opens new window)
Information Governance: InformationGovernance@wiltshire.gov.uk (opens new window)
Address:
Wiltshire Council
County Hall
Bythesea Road
Trowbridge
Wiltshire
BA14 8JN