Who we are and how to contact us
This is the London Borough of Hammersmith and Fulham's health and safety team privacy notice.
LBH&F is the Controller for the personal data we process. Our Information Commissioner's Office (ICO) registration number is: Z5124889.
Council contact information, including our switchboard phone number and our address is on our council 'Contact us'.
Please see 'Your data rights' for:
- how to contact us to exercise your data rights (e.g., to access your data) or if you're unhappy with how we use your data or comply with your data rights
- how to contact our Data Protection Officer (DPO).
What we collect and process
The type of information we collect and process relating to personal data includes:
- personal identifier such as names (including previous known names), date of birth, contact information (address, contact number, personal email address) and preferred contact methods
- offences including alleged offences, criminal proceedings, and investigations
- photographs, audio, and visual recordings
- information that we have received from internal services e.g., business rates, housing, parking etc, and from external partners such as the police relating to risks to health and safety and wellbeing
- whilst we do not seek to collect it, we do recognise that we could be provided with special category data from, or about, a data subject. This data can include but is not limited to:
• details of medical conditions and health
• racial or ethnic origin
• political opinions
• religious or philosophical beliefs
• sexual orientation.
We may also collect information concerning criminal convictions and offences.
Why we need it and what we do with it
The team carries out various functions under the remit of workplace health and safety, licensing of massage and special treatments, animal activities establishment licensing, sports ground safety, public safety at major events and the investigations of accidents, incidents and occupational diseases.
Most of the personal data we process is data provided directly to us to investigate reports of workplace health and safety contraventions, occupational diseases, accidents, massage and special treatment licensing, modern day slavery and exploitation, etc. We process this information to carry out our statutory duties and to prevent or detect crime.
If we have data about you from others, we will let you know how we are processing it unless processing it would be prejudicial to our work or require disproportionate effort.
Our legal basis for processing your data is that:
We need to process it to perform a public task which is to address workplace health and safety concerns, infectious disease and public safety matters involving commercial premises or commercial operations (6(1)(e) of the GDPR). The legislation listed above provides the basis for the work we carry out.
- We need to process it to comply with the law: The main piece of legislation is the Health and Safety at Work, etc Act 1974.
- Special category personal data e.g., health - where processing is necessary for the reasons of substantial public interest (UK GDPR Article 9(2)(g) and DPA 2018, Schedule 1, para.6(1) & (2)(a)).
- Criminal convictions and offences - where processing is necessary for reasons of substantial public interest (UK GDPR Article 10 as supplemented by DPA 2018 section 10(5) & Schedule 1, Part 2, paras. 6(1) and (2)(a))
Whilst undertaking an investigation, we process personal information under Part III of the Data Protection Act 2018 (DPA) for law enforcement purposes.
We also need your data because we use it to protect and promote public safety and public health in our community, and to encourage a safe and healthy community & workplaces.
You can contact the health and safety team on 0208 753 1081 and 0208 748 8588.
Who we share it with
We share your data within the council where it is necessary to deliver service or comply with our statutory obligations. We may share your data with:
- external enforcement agencies such as Met Police, City of London Police, the fire brigade and rescue services, Environment Agency, Action Fraud, insolvency service and other local authorities, and other regional investigations teams
- internal council departments such as housing, planning, and public health services, and elected members, other government departments such as Health and Safety Executive, Sports Ground Safety Authority, UK Health Security Agency, Environment Agency etc
- other organisations including voluntary services, where the disclosure is necessary for the purposes of the prevention and / or detection of crime
- other parties - where the law requires us to pass on information under special circumstances, for crime prevention or the detection of fraud, and as part of the National Fraud Initiative.
We also collect or receive information from external parties such as professional bodies including police, London Fire Brigade and NHS etc.
If you require an interpreter or document translation, your data may be shared with our translation and interpretation service to provide this service. Data shared with our translation and interpretation service will be only for the explicit purpose of completing the translation/interpretation and will not be shared for any other purpose.
We only process your data in the UK and the European Union (EU)
How long we keep it
We retain your data in accordance with the council retention schedule. Most data are retained for up to six (6) years, though it may be as long as 10 years where safety legislation is involved. We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any future legal, accounting, or reporting requirements.
When we no longer need your data, we will dispose of it securely or, if it is of historic interest, we will transfer it to our local archives service.
What are your rights?
In relation to this processing, you have the right to:
- be informed – we do this through this privacy notice
- access your data
- have us change incorrect or incomplete data
- restrict how we process your data.
For more information on your rights and how to exercise them, please see Your data rights – what they are and Your data rights – how to exercise them.
Who to contact if you're unhappy
For who to contact if you're unhappy about how we use your data or comply with your data rights, please see Your data rights – who to contact if you're unhappy.
What if this notice changes?
If we make a substantial change to what personal data we process, how or why we process it, or who processes it we will update this notice. We may also contact you using other communication channels to make you aware of the changes.