The purpose of processing
The Department for Health and Social Care (DHSC) are contacting people who may have been exposed to individuals with COVID-19 as part of NHS Test and Trace. They do this by identifying locations that the infected individuals had visited up to 3 weeks prior to their symptoms developing. As such they may contact us as you visited a location that the infected individual said that they too had visited, we will provide them with your contact details and NHS Test and Trace will contact you.
Data subjects
All visitors and staff to Council or associated Buildings.
Personal data
Name
Contact telephone number
Date and times that you were on site
We may collect the name of your group leader or party organiser who in turn may contact you separately.
We may record the name of the member of staff as well if you only interact with that one person.
How is it used?
We will in most cases record you details in person when you visit the site, however in some instances such as when booking events or tickets we may use the details that you provided online. We will make it clear when you provide information in an electronic form that it may be used as part of the NHS Test and Trace Programme.
Profiling and automated decision making
Not applicable
Legal basis for using your data
GDPR condition relied upon for processing personal data:
Article 6.1 f - Legitimate interests
https://www.gov.uk/guidance/maintaining-records-of-staff-customers-and-visitors-to-support-nhs-test-and-trace#list-of-settings
Guidance - Maintaining records of staff, customers and visitors to support NHS Test and Trace
Designated venues in certain sectors must have a system in place to request and record contact details of their customers, visitors and staff to help break the chains of transmission of coronavirus.
Published 2 July 2020
Last updated 18 September 2020 — see all updates
From: Department of Health and Social Care
Guidance - Maintaining records of staff, customers and visitors to support NHS Test and Trace
Designated venues in certain sectors must have a system in place to request and record contact details of their customers, visitors and staff to help break the chains of transmission of coronavirus.
Published 2 July 2020
Last updated 18 September 2020 — see all updates
From: Department of Health and Social Care
GDPR condition relied upon for processing special category data
Not applicable
Sharing of personal data with external recipients
We will share the information specified above, or that of your group leader with NHS Test and Trace Contact Tracers only upon request.
How long is the personal data retained by the Council?
We will retain your information for 21 days. When it is shared with NHS Test and Trace, they may retain it for up to 8 years. Further information about how NHS Test and Trace handles your personal data can be found on www.bathnes.gov.uk/NHS-track-trace.