Privacy Notice regarding the processing of personal data relating to staff vaccination

At present, a national programme of vaccination is being rolled out which aims to offer a Covid-19 vaccination to every individual within Wales. Receipt of the vaccination is entirely voluntary, and Ceredigion County Council respects the rights of its employees to choose whether or not they wish to receive the vaccine.

There are a number of services provided by the Authority where both staff and service users are at a high risk of contracting or developing Covid-19, and/or at a high risk of developing serious health complications should they be exposed to the virus.

Additionally, as the vaccination programme rolls forward, we need to plan for the return of staff to their usual places of work, and this information will help us to enable returns to work in the safest possible way. For this reason, and in the interests of continuing to deliver our services in a manner that presents the lowest possible risk to our staff and service users, we are asking staff to let us know on a voluntary basis if they have received the vaccine. This will enable us to continue to protect our staff and service users to the fullest extent possible.

There are also circumstances whereby to prevent wastage of vaccine when individuals have no attended prior appointments, the Health Board may open vaccination slots to a reserve list of patients. If you wish to be included on this list, you can indicate this on the questionnaire.

The purposes for which we use your personal data

Your information will be used:

  • To inform workforce planning (i.e. to enable the safest return of staff to workplaces)
  • For anonymised statistical reporting

Your information will be processed on the basis of consent.

Where special category data is processed, it will be processed on the basis of explicit consent.

You can withdraw your consent at any time by contacting the data protection team at data.protection@ceredigion.gov.uk

What if you do not provide personal data?

If you do not give us the information we need when we ask for it, this may result in our being unable to offer the service to you.

What type of information do we use?

We may collect the following types of personal data about you to deliver this service, depending on your circumstances:

  • Name
  • Present role within Ceredigion County Council
  • Your vaccination status

Do we use information received from other sources?

To deliver this service, we only collect personal data directly from you and do not obtain information about you from any other source.

Transferring your information abroad

Your information will not be transferred outside the United Kingdom.

Who your information may be shared with (internally and externally)?

We share anonymised statistics with the following recipients:

  • Ceredigion County Council senior management team
  • Hywel Dda University Health Board
  • Welsh Government
  • Regional local authorities

Where you have indicated that you wish to be included on a reserve list for vaccination, we may share your name with the Health Board.

  • Where the Council is required to provide the information by law
  • Where disclosing the information is required to prevent or detect a crime
  • Where disclosure is in the vital interests of the person concerned

Your data will be held for a maximum of one year before confidential destruction