Agency Workers Privacy Notice

This privacy notice explains how the personal data of agency workers is processed.

Info This page was last reviewed and updated 17 April 2023.

 

The type of personal information we collect

How we get the personal information and why we have it

Link needs to process data to enter into a contract of engagement with your employing organisation for your services. For example, Link needs to process your data to be accurately invoiced by your employers for your services and to ensure that you paid correctly.

In some cases, Link needs to process data to ensure that it is complying with its legal obligations. For example, it is required to check an individual’s entitlement to work in the UK, to comply with health and safety laws, regulation and to enable individual’s to take periods of leave to which they are entitled. For certain positions, it is necessary to carry out criminal records checks to ensure that individuals are permitted to undertake the role in question. 

In other cases, Link has a legitimate interest in processing personal data before, during and after the end of your work with Link. You have the right to object to our processing of your personal data. However, if Link can demonstrate that there is a compelling reason to process such personal data then we may refuse to stop processing your personal data.   

Processing agency workers’ data allows Link to: 

  • facilitate selection processes;
  • maintain accurate and up-to-date records and contact details (including details of who to contact in the event of an emergency), and records of contractual and statutory rights;
  • operate and keep a record of disciplinary, grievance and dignity at work processes, to ensure acceptable conduct within the workplace;
  • operate and keep a record of performance and related processes;
  • operate and keep a record of absence and absence management procedures, to allow effective workforce management and ensure that employees are receiving the pay or other benefits to which they are entitled;
  • obtain occupational health advice, to ensure that it complies with duties in relation to individuals with disabilities, meet its obligations under health and safety law, and ensure that individuals are receiving the pay or other benefits to which they are entitled;
  • operate and keep a record of other types of leave (including but not limited to maternity, paternity, adoption, parental and shared parental leave), to allow effective workforce management, to ensure that the organisation complies with duties in relation to leave entitlement, and to ensure that individuals are receiving the pay or other benefits to which they are entitled; 
  • ensure effective general HR and business administration;
  • respond to and defend against legal claims; and
  • maintain and promote equality in the workplace.

The majority of information that we store and process about you is provided directly by yourself, typically through the following methods:

  • Application forms and CV’s
  • Identity documents (such as passports, driving license, work visa)
  • Forms completed you at the start or during your work with Link
  • Information submitted by you, your line manager, or Human Resources into our HR systems (such our HR and Payroll System, our appraisal process, our lone worker system)
  • Interviews, meeting notes and other assessments
  • Occupational Health Referrals

If required for your role, we may also receive information about you via, or provide information to, third parties for the following reasons:

  • Link provides remuneration, benefits and expense reimbursement services to you and is legally required to provide records to regulatory bodies as required;
  • Based on the requirements of the post you may require a driving licence and if necessary have access to a roadworthy vehicle with the required insurance to drive for business purposes. If this is the case then your details will be provided to a third party to undertake these checks on our behalf; 
  • Based on the requirements of the post, Link may need to validate that you have the required qualifications and/or professional memberships from the issuing body in circumstances e.g. Scottish Social Services Council;  
  • Link may pass on your personal details and details of any reasonable adjustments or dietary requirements to third party training providers or online training systems providers ensuring that you receive the required training to undertake your post safely, legally and competently; 
  • Link may provide your work details to third parties to facilitate the assessment or reaccreditation process of professional corporate and employer accreditations, certifications and memberships. 
  • Link may be required to provide your assignment data to third parties under TUPE legislation; 
  • Link may seek legal advice regarding an agency worker, or may be required to contact the appropriate authorities on any other related matter as appropriate, including but not limited to; recovery of monies, company property, disputes and employment related correspondence. This may be applied to both current or former agency workers.
  • For certain roles, Link is legally required to make employer disclosures/referrals to the following third party organisations, such as:
  • Scottish Social Services Council (SSSC): agency workers have responsibilities which are set out in the SSSC Code of Practice for Employers of Social Service Workers and the Regulation of Care (Scotland) Act 2001. This includes but is not limited to: 
  • Referral to the SSSC fitness to practice service in relation to your conduct or professional practice where it is believed to be or may be impaired;
  • Ending the engagement with the agency social service worker on grounds of misconduct, or on the social worker resigning or abandoning the worker’s position in circumstances where, but for the resignation or abandonment by the worker i) would have been dismissed on the grounds of misconduct, or ii) dismissal on such grounds would have been considered by the employer; and/or 
  • Providing the SSSC with information on the social services worker as the SSSC may require when exercising its functions.
  • Disclosure Scotland: as a provider of “regulated work”, as defined by Schedules 2 and 3 of the Protection of Vulnerable Groups (Scotland) Act 2007, Link are legally obliged in certain circumstances (known as referral grounds) to submit referrals on individuals to Disclosure Scotland. The legal requirement to refer is contained with section 9 of the Protection of Vulnerable Groups (Scotland) Act 2007;  
  • Link may disclose certain data to internal or external auditors as it relates to the scope of the audit;
  • If you work or visit one of Link’s premises then you may be recorded on our CCTV recordings;
  • If you are employed within a role as a lone worker then Link uses technology to monitor your location whilst at work to provide adequate support and supervision to manage any risk to your health and safety; 
  • For certain roles, Link is obligated to provide additional information to prospective employers under legislative requirements when it relates to a person’s suitability to work in social services as determined by professional bodies including the Care Inspectorate, Scottish Social Services Council, etc. Link is legally obligated to provide accurate and appropriate references to share information relating to a person’s suitability to work in social services, which may include issues of safety (previous disciplinary issues, dismissals, demotions) and any competencies which may be difficult to address though a selection process (e.g. team working; tenacity; adherence to regulatory codes of practice);
  • Link may be required in extenuating circumstances to provide the minimum information on staff to regulators, Government bodies and agencies and contracting agents in reports, notifiable events or incident reporting/investigations as required by legislation and/or the contracts for service. In considering these requests the release of the information will be carefully considered.   
  • Link will not transfer your data outside the European Economic Area.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

Personal data

  • Your consent.
  • We have a contractual obligation.
  • We have a legal obligation.
  • We have a vital interest.
  • We need it to perform a public task.
  • We have a legitimate interest.

 Special category data

  • Explicit consent
  • Employment, social security and social protection (if authorised by law)
  • Vital interests
  • Not-for-profit bodies
  • Made public by the data subject
  • Legal claims or judicial acts
  • Reasons of substantial public interest (with a basis in law)
  • Health or social care (with a basis in law)
  • Public health (with a basis in law)
  • Archiving, research and statistics (with a basis in law)

How we store your personal information

Data will be stored in a range of different places, including on your online careers portal account, application record, in HR management systems and on other IT systems (including email and SharePoint), occupational health provider’s portal and in secured locked cabinets within the HR Department.

How long we keep your personal information

We review our data retention periods regularly and will only hold your personal data for as long as is necessary for the relevant activity, or as required by law (we may be legally required to hold some types of information), or as set out in any relevant contract we have with your employer.  We will generally keep your information for the following minimum periods after which this will be destroyed if it is no longer required for the reasons it was obtained. 

Data Retention

Data/Document Type 

Condition of Processing 

Retention Period 

Unregulated references provided to third parties 

Consent  

HR will retain a copy of the reference and written record of any subsequent enquiry securely within the HR department for seven months from the last date of issue, unless there is a legal basis for retaining for a longer period. 

Regulated references provided to third parties 

Legal Obligation and Public Interest  

HR will retain a copy of the reference and written record of any subsequent enquiry securely within the HR department for seven months from the last date of issue, unless there is a legal basis for retaining for a longer period. 

Referrals and disclosures to regulatory bodies  

Legal Obligation and Public Interest  

Link will retain the data during your work with Link and 6 years after the end of the financial year in which your work ended unless there is a legal basis for retaining for a longer period.   

Electronic Employment Records with HR & Payroll System  

Legal obligation and Legitimate Interests   

Link will retain the data during your work with Link 6 years after the end of the financial year in which your work p ended unless there is a legal basis for retaining for a longer period.  After this period the personal data will be removed the corporate record anonymised.  

Other Employment Records (unless otherwise outlined in this retention schedule)   

Legal obligation and Legitimate Interests   

Link will retain the data during your work with Link 6 years after the end of the financial year in which your work ended unless there is a legal basis for retaining for a longer period.   

Health & Safety Records – Accidents at Work & Work Related Accidents  

Legal obligation and Legitimate Interests   

Link will retain the records for 5 years unless there is a legal basis for retaining for a longer period.  

Health & Safety Records - Injuries, Fatalities, Diseases and Dangerous Occurrences 

Legal obligation and Legitimate Interests   

Link will retain the records for 5 years unless there is a legal basis for retaining for a longer period. 

Health & Safety – Risk Assessments  

Legal obligation and Legitimate Interests   

Link will retain the records for 5 years unless there is a legal basis for retaining for a longer period. 

Health & Safety – Exposure to Asbestos Records  

Legal obligation and Legitimate Interests   

Link will retain the records for 40 years unless there is a legal basis for retaining for a longer period. 

Health & Safety – Exposure to Specified Hazardous Substances 

Legal obligation and Legitimate Interests   

Link will retain the records for 40 years unless there is a legal basis for retaining for a longer period. 

Your rights

Your right of access

You have the right to ask us for copies of your personal information. 

Your right to rectification

You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Your right to erasure

You have the right to ask us to erase your personal information in certain circumstances. 

Your right to rectification

You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Your right to object to processing

You have the right to object to the processing of your personal information in certain circumstances .

Your right to data portability

You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. 

Please contact us at datamanagement@linkhaltd.co.uk if you wish to make a request. 

How to complain 

If you have any concerns about our use of your personal information, you can make a complaint to us at Link House, 2c New Mart Road, Edinburgh EH14 1RL or by email at datamanagement@linkhaltd.co.uk  

You can also complain to the ICO if you are unhappy with how we have used your data. 

The ICO’s address:             

Information Commissioner’s Office 

Wycliffe House 

Water Lane 

Wilmslow 

Cheshire 

SK9 5AF 

Helpline number: 0303 123 1113 

ICO website: https://www.ico.org.uk 

Stay Connected