- Purpose
- Accident and incident information
- Description
-
We process personal information to enable us to carry out our statutory duties to health and safety (Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013). This includes recording and investigation of accidents or incidents and near misses on order to report to HSE and identify actions to prevent recurrence. Information relating to the injured person (staff, contractor, pupil, member of the public) may be recorded. The information is held in the Evotix Assure System in line with ICT Cloud Principles.
We process information relevant to the above reasons and purposes which may include:
- Personal information
- Medical information
- Physical or mental health
- Details of accidents, incidents
- Visual images
- Conditions for processing personal information
-
Article 6(1)(c) of UK GDPR - (Legal Obligation), processing is necessary for compliance with a legal obligation to which the controller is subject. The relevant legislation is:
- The Management of Health and Safety at Work Regulations 1999
- The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 2013
Article 9(2)(b) of UK GDPR (Special Category), processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment.
- Your rights
-
- Access to personal data
- Rectification of personal data
- Erasure of personal data
- Restrict processing of personal data
- Who we share your information with
-
- Occupational Health Provider
- Health and Safety Executive
- Trade Unions
- Council Insurance Team
- How long we hold your information
-
Health and safety documents are retained in accordance with the agreed retention schedule.
- Accidents, incidents, near misses (except for pupils) and witness reports (3 years)
- Pupils – until reached age of 25
- Automated processing
-
Your personal information is not subject to automated decision making or profiling
- Data Protection Officer
-
Data Protection Officer
Highland Council Headquarters
Glenurquhart Road
Inverness
IV3 5NX
01463 702029 - Supervisory authority
-
If you are unhappy with the way we have processed your personal information you can contact the Information Commissioner:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
