Academic Handbook Data Protection
Supplemental Privacy Notice for Northeastern University – London Employees, Job Applicants, Contractors and Others Working With the University
Introduction
- As a supplement to the Northeastern University Policy Governing the Personal Information of Employees, Job Applicants, Contractors and Others Working with the University (‘Employee Privacy Policy’), this Northeastern University – London Supplemental Privacy Notice provides additional details related to the third parties from which and with which Northeastern University – London may use, collect and share your personal information.
Use
- Personal and Sensitive personal information may be held by Northeastern University – London or Northeastern University on our HR system, known as ‘Workday’, which is administered by Northeastern University and may be used in a number of ways across Northeastern University – London and Northeastern University including:
- HR Records: a personal record is held to identify you and ensure your staff record we hold for you is accurate, complete and up to date. Line managers have access to your HR Record as do staff working in the HR department both at Northeastern University – London and Northeastern University.
- HR and Payroll Records: to assist Northeastern University – London to maintain its personal record for you and exercise all payroll responsibilities, including name, title, gender, address, and bank account for the purposes of making payments to your bank account, making deductions and paying pension contributions.
- University reporting: management and statistical information to enable Northeastern University – London to monitor the effectiveness of its procedures and policies, for example in gender pay gap reporting.
- External reporting: your personal record is used when required for example to supply anonymised information about our staff to the Higher Education Statistical Agency (HESA), which is part of Jisc. Please visit HESA’s website for more information on how they manage their data.
- Third parties: your data is shared with third parties for example to verify the dates and nature of your prior employment and to outsourced suppliers of services to Northeastern University – London for example to our Independent Financial Advisor (IFA) who liaises with you to set up your pension or private health insurance.
Third-Party Collection
- Sometimes Northeastern University – London may receive personal information about you from third parties as described in the following table:
Source | Information the University May Receive From Them |
Home Office (UKVI) | Your immigration status |
Occupational Health Service, GPs/Medical Practitioners | Medical, accessibility related and similar information (the University only obtains this information from third parties if you give it consent to do so) |
Relevant professional body (for example, HEA, FRS, etc.) | Your professional registration status |
University DBS provider | Your police and criminal record and barred list status |
External Training Providers | Training and development information |
External Assessment Providers | Psychometric testing and assessment outcomes |
Other employment agencies | Personal and contact details, your application and CV |
Former employers | Your previous employment record and references |
Students (past and present) | Complaints or performance related information |
Third-Party Sharing
- Sometimes Northeastern University – London may need to share your personal information with third parties. In addition to the third-party sharing set forth in Section C.2 of the Employee Privacy Policy, the following table gives examples of third-party sharing:
Recipient | Information the University May Share With Them |
Third-party organisations who process personal data on the University’s behalf, such as training providers, assessment providers, benefits providers (e.g. Oakfields) and employment surveyors) | Name, contact and employment details |
Third-party organisations to whom a potential TUPE transfer is being made | Employment contract terms and conditions and associated benefits (full Employee Liability Information) |
Official bodies to which the University is obliged to report, or who may carry out an audit or inspection
(for example, Ofsted, HESA and OfS, ONS or their agents) |
Information supplied as necessary to fulfil the University’s reporting obligations to these bodies. This may include relevant special category data |
Future employers | Personal information relating to conduct, performance and employment, where HR are asked for a reference |
Professional development course tutors | Course attendance lists and contact details |
Government agencies such as UK Visa and Immigration Office and the Home Office | Contact details, passport details, salary and other employment basis details for example fixed term or permanent contract status |
University DBS providers | Name and contact details including utility bills showing home address and photographic ID such as driving licence or passport |
University pension providers (e.g. Scottish Widows) | Personal information including contact details and salary and pension contribution details |
HMRC | Contact, pay and benefit details |
Professional regulatory bodies with which you have professionally registered | Contact details, attendance and performance and conduct information |
When You Leave Northeastern University – London
- If you decide to leave employment with us, your personal data is, in most cases, kept for 6 years from the date you leave and with your consent, for longer, for processing requests such as from potential employers. If you were a member of a pension scheme, some information will be kept longer to allow payment of a pension. We will retain your personal data no longer than is necessary for the stated purposes. If you wish to delete your personal information, please contact privacy@northeastern.edu.
Complaints
- If you are unhappy with the way in which your personal data is being processed you may, in the first instance, lodge a complaint with the Chief Privacy Officer whose contact details are:
Chief Privacy Officer
Northeastern University London
Devon House, 58 St Katharine’s Way, London, E1W 1LP
Email: dpo@nulondon.ac.uk
- If you continue to have concerns thereafter you have the right to contact the Information Commissioner for a decision. The Information Commissioner can be contacted as below:
Helpline: 0303 123 1113
Live Chat: Contact us – public | ICO
Version History
Title: Supplemental Privacy Notice for Northeastern University – London Employees, Job Applicants, Contractors and Others Working With the University
Approved by: Executive Committee Location: Academic Handbook/ Data Protection |
||||
Version | Approved | Published | Owner | Proposed Next Review |
24.1.0 | December 2024 | February 2025 | Director of Human Resources | April 2027 |
Referenced documents | None. | |||
External Reference Point(s) | HESA; Home Office – GOV.UK; Jisc; Office for National Statistics; Office for Students, Ofsted – GOV.UK; Policy Governing the Personal Information of Employees, Job Applicants, Contractors and Others Working with the University; Visas and immigration – GOV.UK. |