Dorset General Practice Alliance Privacy Policy
15.11.2022
Our contact details
Name: Dorset General Practice Alliance
Address: C/O Castleman Healthcare, 18 Kirkway, BH18 8EE
Phone Number: 01202 772541
Email: dorsetgpalliance@dorsetgp.nhs.uk
The type of personal information we collect
We currently collect and process the following information:
Personal identifiers, including name and unique identification number
Contact information, including email, phone numbers, address
Bank, pension and tax information
Sick leave records, including reasons for leave
Annual leave records
Appraisal and performance information
Qualifications and training
Employment history
Ethnicity
Any disability information
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
Job application and interview
Employment records
Processing salary, tax and pensions
Communication
Uphold statutory obligations
We also receive personal information indirectly, from the following sources in the following scenarios:
Previous employers
HMRC
Occupational health providers
We use the information that you have given us to provide employment.
We may share this information with HMRC, NHS Pensions scheme, and processing with other organisations to verify clinician and other credentials
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
Article 6(2)(b) We have a contractual obligation.
Article 6(2)(c) We have a legal obligation.
How we store your personal information
Your information is securely stored.
All information is kept in accordance with the NHS Records Management Code of Practice. We keep employment records for 6 years post-employment, reduced summary files are then created and retained until the data subject’s 75th birthday, or an additional 6 years, whichever is longest. Unsuccessful application records are retained for 6 months after recruitment. We will then dispose your information securely.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Some of these rights must be balanced with other legislation, for example retention of employment information, but we will do our best to uphold your rights and explain any reasons why we may not be able to.
Please contact us at Dorset General Practice Alliance, 9 Mitchell Road, Dorset, BH17 8UE if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at Dorset General Practice Alliance, C/O Castleman Healthcare, 18 Kirkway, BH18 8EE.
You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk