- • task: the processing is necessary for you to perform a task in the public • task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

#### Your Individual rights as an employee

You have certain rights with respect to the data held about you by the Practice.

These are:

- • be informed why, where and how we use your information • be informed why, where and how we use your information
- • ask for access to your information • ask for access to your information
- • ask for your information to be corrected if it is inaccurate or incomplete • ask for your information to be corrected if it is inaccurate or incomplete
- • ask for your information to be deleted or removed where there is no need for us to • ask for your information to be deleted or removed where there is no need for us to continue processing it
- • ask us to restrict the use of your information • ask us to restrict the use of your information
- • ask us to copy or transfer your information from one IT system to another in a • ask us to copy or transfer your information from one IT system to another in a safe and secure way, without impacting the quality of the information
- • object to how your information is used • object to how your information is used
- • challenge any decisions made without human intervention (automated decision • challenge any decisions made without human intervention (automated decision making)

#### How we use the personal data about you

The Practice uses staff data for all purposes associated with the administration of the employer/employee relationship and to meet our legal obligations. The purposes for which we may use staff data (including sensitive personal information) include:

- • your recruitment application and correspond with you in relation to Practice • your recruitment application and correspond with you in relation to Practice vacancies
- • staff records • staff records
- • and selection • and selection
- • Human Resource employment matters (e.g. promotion, training and • Human Resource employment matters (e.g. promotion, training and development, conduct, attendance, appraisals, management progress, grievances, misconduct investigations, disciplinary actions and complaints)
- • finance (e.g. salary, pension and staff benefits) • finance (e.g. salary, pension and staff benefits)
- • with visa requirements • with visa requirements
- • facilities such as IT/system access, library services and car parking • facilities such as IT/system access, library services and car parking
- • equal opportunities • equal opportunities
- • and detecting crime, such as using CCTV and using photo’s on ID • and detecting crime, such as using CCTV and using photo’s on ID badges
- • communication about the Practice, news and events • communication about the Practice, news and events
- • contact with past employees • contact with past employees
- • of wellbeing and support services • of wellbeing and support services
- • with legal obligations such as making external/statutory returns to NHS • with legal obligations such as making external/statutory returns to NHS England, sharing information with HMRC
- • out research, surveys and statistical analysis (including using third party • out research, surveys and statistical analysis (including using third party data processors to carry out the national staff survey)
- • out audits • out audits

The Practice processes sensitive personal data for a number of administrative purposes:

- • opportunities monitoring • opportunities monitoring