Social care and health training and skills opportunities privacy notice

This privacy notice provides details on how we, Norfolk County Council, use your personal information for the purposes of supporting you to access social care and health training and skills development.

By 'use' we mean the various ways your personal information may be processed including storing and sharing the information.

Further details

We also provide the following details in our general privacy notice:

• Who we are
• How long we use your information for
• Your rights under the UK General Data Protection Regulation (the GDPR) and
• How to exercise them

You can also ask us for a copy of this information.

What we use your information for

We may use the information about you to:

• Offer support to access training and skills development opportunities
• Matching to a mentor
• Supporting care providers to access training and skills development for their workforce

We also use this information to assess the quality of our services and evaluate and improve our policies and procedures.

We may also use information in other ways compatible with the above.

What personal data we collect and use about you

We will collect and use:

• Name
• Date of birth
• Gender
• Address
• Phone number
• Email address
• Employer and role
• Current highest level of education
• Length of time working in adult social care or health - if applicable
• Current role - if applicable
• Current employer - if applicable
• Current employer status/type e.g. residential, domiciliary care
• Preferred first name
• Preferred format
• Immigration status if an international recruit

We may also collect and use information about:

• Racial or ethnic origin
• Health and social care

This information is classed as "special category data" under the GDPR. We may only collect these data when it is relevant and for the purposes described above.

The GDPR includes safeguards to protect the use of your special category data. Further details can be found in our special category data and criminal offences data policy. This sets out our procedures for compliance with the principles of the GDPR and the retention and erasure of this information.

Who provides this information

We receive most of this information from you, but we may also obtain some of this data from:

• Your employer (if you are a member of the health and social care workforce)

Who we share your information with

We will share your information with:

• Suffolk County Council

Any information which is shared will only be shared on a need to know basis, with appropriate individuals. Only the minimum information for the purpose will be shared.

How the law protects you and the legal basis for processing your information

We have legal grounds under the GDPR to process this information because it is necessary:

• For the performance of a task carried out in the public interest and the task or function has a clear basis in law

These statutory powers and duties are:

• The Care Act 2014 - section 5

• We also use consent as the lawful basis for processing personal data for people who have given their consent to receive our newsletter. You have the right to withdraw any consent you have given for the processing of personal data at any time. For details on how to exercise this right and your other rights, please see our general privacy notice.

We have legal grounds to process (including share) special category data because it is necessary:

• For reasons in the substantial public interest and in the exercise of a statutory function. (The statutory functions are the same as the statutory powers and duties referred to above.)

How long will we keep your personal information for

When the information is no longer needed for the above purposes, it will be securely deleted.

If we need to use your information for research or reports, your information will be anonymised and any information taken from notes (handwritten or typed) during any consultation sessions will be securely destroyed. The information will continue to be used in a summarised and anonymised form in any research reports or papers that are published.

How we keep your information

The information is stored electronically, on the County Council's network including records management systems.

We do not process your information outside of the UK and European Economic Area.

Automated decision-making

We do not make automated decisions about you.

Changes to this notice

We may amend this privacy notice at any time so please review it frequently. The date below will be amended each time this notice is updated.

This notice was created on 4 October 2023.