Privacy

This is our privacy statement. It outlines your rights regarding the personal details we store about you.

HES Catering Services is part of London Borough of Havering (‘the Council’ or ‘we’ or ‘us’ or ‘our’) gather and process your personal information in accordance with this privacy notice and in compliance with the relevant data protection law. This notice provides you with the necessary information regarding your rights and obligations, and explains how, why and when we collect and process your personal data.

London Borough of Havering’s registered office is at Havering Town Hall, Main Road, Romford, RM1 3BD, and acts as the Data Controller.

Our designated Data Protection Officer for the organisation is Ian Gibbs, at oneSource, who can be contacted at:

Access to Information Team
London Borough of Havering
Havering Town Hall
Main Road
Romford
RM1 3BD

Or via email:

gdpr-dataprotection@onesource.co.uk

Why we collect personal information

We may collect and process personal data about you in order to comply with any legal or statutory obligations, or in order to enforce or apply our contracts with you or where you have consented to the processing. This includes, but is not limited to, information you or your legal representative provide when:

you/they contact us in person, on our website, over the telephone, by e-mail or by post
you apply for a job vacancy with us
you receive a service from us

How we use your personal data

The Council takes your privacy very seriously and will never disclose, share your personal data without your knowledge, unless required to do so by law.

We only retain your data for as long as is necessary and for the purposes specified in this notice. Where you have consented to us processing your personal data, you are free to withdraw consent at any time.

The purposes and reasons for processing your personal data are to:

ensure that content from our website is presented in the most effective manner for you and for your computer/device
verify your identity
ensure the data we hold about you is accurate and up to date
process job applications;
deliver services and support to you
manage those services we provide to you
investigate and respond to complaints
train and manage the employment of our workers who deliver those services
help investigate any worries or complaints you have about your services
keep track of spending on services
check the quality of services
help with research and planning of new services
notify suppliers and local authorities about your new property and about any property we have purchased from you in part exchange
provide you with information, products or services that you request from us
notify you about changes to our services
support and maintain our network, systems and applications
manage and support the Councillors enquiries
comply with legal obligations to process and share data with government agencies, statutory bodies, police and health
comply with contractual arrangements to provide services for the Council
comply with security requirements

There are a number of legal reasons why we need to collect and use your personal information.

Generally we collect and use personal information where:

you, or your legal representative, have given consent
you have entered into a contract with us
it is necessary to perform our statutory duties
it is necessary to protect someone in an emergency
it is required by law
it is necessary for employment purposes
it is necessary to deliver health or social care services
you have made your information publicly available
it is necessary for legal cases
it is to the benefit of society as a whole
it is necessary to protect public health
it is necessary for archiving, research, or statistical purposes

If we have consent to use your personal information, you have the right to remove it at any time. If you want to remove your consent, please contact the
accessinfo@havering.gov.uk and tell us which service you’re using so we can deal with your request.

We only use what we need

Where we can, we’ll only collect and use personal information if we need it to deliver a service or meet a requirement.

If we don’t need personal information we’ll either keep you anonymous if we already have it for something else or we won’t ask you for it. For example in a survey we may not need your contact details we’ll only collect your survey responses.

If we use your personal information for research and analysis, we’ll always keep you anonymous or use a different name, unless you’ve agreed that your personal information can be used for that research.

Sharing and disclosing your personal information

We do not share or disclosure any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement. The Council uses third-parties to provide the below services and business functions, however all processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures.

We may disclose your information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our contracts with you; or to protect our rights, or our safety and/or the safety of our service users, or others.

We may also disclose your information to our suppliers and contractors to provide information to you on our behalf and/or in order to fulfil our legal and statutory obligations.

We will share your personal information with suppliers of services in respect of any service you receive from us.

We will share your information with relevant government agencies where it is necessary, or we have a legal obligation to do so.

We do not sell your information to anyone else.

Your personal data is not transferred outside the EEA unless it is necessary and in compliance with the requirements of data protection law.

How long we keep your data

The Council only ever retains personal information for as long as is necessary and we have retention policies in place to meet these obligations. We are required under some laws or regulations to retain your personal data for a set period of time for example. Where there is nothing laid down by law we will make a business decision, taking into account the necessity of the processing in order to define the retention period.

Where you have consented to us using your details, we will keep such data until you notify us otherwise and/or withdraw your consent.

Your rights

The right of access to your information

You have the right to access any personal information that the Council processes about you and to request information about:

what personal data we hold about you
the purposes of the processing
the categories of personal data concerned
the recipients to whom the personal data has/will be disclosed
how long we intend to store your personal data for
if we did not collect the data directly from you, information about the source

To access your information contact accessinfo@havering.gov.uk

The right to have inaccurate data corrected

If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to update/correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.

You should let us know if you disagree with something written on your file.

We may not always be able to change or remove that information but we will correct factual inaccuracies and may include your comments in the record to show that you disagree with it.

The right to erasure (or be forgotten)

In some circumstances you can ask for your personal information to be deleted, for example where:

your personal information is no longer needed for the reason why it was collected in the first place
you have removed your consent for us to use your information (where there is no other legal reason us to use it)
there is no legal reason for the use of your information
deleting the information is a legal requirement

Where your personal information has been shared with others, we will do what we can to make sure those using your personal information comply with your request for erasure.

Please note that we can’t delete your information where:

we’re required to have it by law
it is used for freedom of expression
it is for public health purposes
it is for, scientific or historical research, or statistical purposes
where it would make information unusable
it is necessary for legal claims

The right to limit what we use your personal data for

You have the right to ask us to restrict what we use your personal information for, where:

you have identified inaccurate information, and have told us of it
where we have no legal reason to use that information, but you want us to restrict what we use it for rather than erase the information altogether.

When information is restricted it can’t be used other than to securely store the data and with your consent to handle legal claims and protect others, or where it’s for important public interests of the UK.

Where restriction of use has been granted, we’ll inform you before we carry on using your personal information.

You have the right to ask us to stop using your personal information for any Council service. However, if this request is approved this may cause delays or prevent us delivering that service.

Where possible we’ll seek to comply with your request, but we may need to hold or use information because we are required to by law.

The right to move your personal data to another provider (data portability)

You have the right to ask for your personal information to be given back to you or another service provider of your choice in a commonly used format. This is called data portability.

However, this only applies if we’re using your personal information with consent (not if we’re required to by law), and if decisions were made by a computer and not a human being.

It’s likely that data portability won’t apply to most of the services you receive from the Council.

You can ask to have any computer made decisions explained to you, and details of how we may have ‘risk profiled’ you.

You have the right to question decisions made about you by a computer, unless it’s required for any contract you have entered into, required by law, or you’ve consented to it.

You also have the right to object if you are being ‘profiled’; where your personal information is used to make more informed decisions about things that affect you.

If and when the Council uses your personal information to profile you, in order to deliver the most appropriate service to you, you will be informed.

If you have concerns regarding automated decision making, or profiling, please contact the Data Protection Officer who will be able to advise you about how we use your information.

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the relevant request; this is to ensure that your data is protected and kept secure.

Where you have consented to us using your details, you can withdraw that consent at any time by contacting us directly by telephone, email or letter using the contact details below.

Our communications with you

We try to ensure that our communications are as effective as possible so that we make the best use of the money we spend on them. This means communicating with people in different ways, appropriate to them.

On occasion, we will use information you have given us directly, to tailor our communications with you about future activities. We will also use information about how you use our website or interact with our emails so we can make them more effective.

Safeguarding measures

The Council takes your privacy seriously and we take every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction, and have several layers of security measures in place both technically and by means of training and policies. The Council also has annual independent technical health checks and system audits.

Links to other websites

Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access those using links from our website.

In addition, if you linked to our website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.

Transferring your information outside of Europe

On exceptional occasions we transfer data outside of the UK and Europe. The information which you provide to us may be transferred to countries outside the European Union (“EU”). By way of example, application support, the use of a hosted solution or a social care matter. If data is hosted or transferred we ensure that the Council is compliant with the data protection laws and that there is adequate and appropriate protection of the data.