Privacy Promise
Data Protection and Confidentiality:
The Data Protection Act 1998 requires every Data Controller who is processing personal data to notify the Information Commissioner unless they are exempt. Failure to notify is a criminal offence.
Organisations and people about which we hold information are referred to in this policy as service users and volunteers. Aynsley Rastofsky the Practice Manager has been designated as the Data Protection Compliance Officer, the Data Controller for the organisation.
Information we hold:
• We hold three types of information which are covered by this policy
• organisational information – publicly available information about organisations and some confidential information
• personal employee information – information about individuals such as names, addresses, job titles and
Recording of personal information and storing of information on the people we support.
This information relates to how Serveco handle data on the people we support.
Serveco are a provider of staff to other agencies, social housing providers, Charities and Local Authority, commissioned services and as such do not hold personal data about the people we support on behalf of the commissioning service.
As and when Serveco are commissioned to provide staff and or services to a company, Charity or Local Authority, Serveco will record and process data, on behalf and in line with the commissioning services policies and procedures and in accordance with the Data Protection Act 2018. This information is held securely by the commissioning service.
Serveco are required to sign a confidentiality agreement with all commissioning services and as such are bound by law to ensure that personal data is shared in accordance with the Data Protection Act: http://www.legislation.gov.uk/ukpga/2018/12/contents/enacted
This means that whilst Serveco may record your personal data on behalf of a commissioned service, it is the responsibility of the commissioning service to store this data securely, handle this data responsibly and to respond to any subject access request, in line with the Data Protection Act 2018.
Information on how to make a subject access request can be found here: http://www.legislation.gov.uk/ukpga/2018/12/section/45/enacted
Serveco’s consent to share form will always give clear guidance as to who we are providing a service for, how and why this information is being recorded, how long this information will be kept and how to ask for a record of the personal information that is being recorded.
Information on how to make a subject access request can be found here: http://www.legislation.gov.uk/ukpga/2018/12/section/45/enacted
If Serveco are contacted directly for a subject access request, in relation to a service that we provide for a commissioning service, Serveco will ensure that the commissioning service is notified immediately, in order to allow the commissioning service to comply with the request in a timely fashion and within the guidelines, set out under the Data Protection Act 2018.
For further details please contact: complimentsorcomplaints@serveco.co.uk