Information about your Personal Data
This Privacy Notice is provided to you by the Chief Constable of Greater Manchester Police who is the data controller of this data. It contains important information about what personal details we collect; what we do with that information; who we may share it with and why; and your information rights when it comes to the personal information you have given to us.
Personal data processed by GMP is governed by the General Data Protection Regulation (the “GDPR”) and the Data Protection Act 2018, and other legislation relating to personal data and rights, such as the Human Rights Act.
What we need:
Greater Manchester Police (GMP) may need to collect the following information to enable the vetting process to take place in respect of someone’s suitability to work or serve GMP. The level of data being processed will depend on the level of vetting required for a specific role or service.
- Name, address (previous addresses for 5yrs)and any other contact details such as email address and telephone numbers of applicant;
- Current occupation and employer;
- Details of family members and associates with criminal convictions.
- Gender, ethnicity, age, and nationality;
- Proof of id and address: Passport/Visa details, driving licence, P60, etc. etc.
- Open source information, for instance data from Facebook and Twitter
- Financial records including credit checks
- Criminal record including unspent convictions.
Why we need it:
The purpose of GMP requiring the information is for the Data Controller to administrate background checks to establish a person’s suitability to work for GMP or to provide a service to GMP. The information will not be used for any other purposes.
The Lawful Basis
The legal basis for processing of your personal data is necessary for the performance of a contract and performance of functions relating to law enforcement. These are established in the main under the College of Policing Vetting Code of Practice, the Police Act 1996 and Crime and Police Act 2014.
Is the information shared?
We may share your personal data internally with relevant departments for the purpose of fulfilling one or more of the above stated legal bases. We may also engage the services of other agencies to meet legal requirements, or fulfil another lawful basis.
Where we have arrangements to share your personal data, there is a contract, memorandum of understanding or information sharing agreement in place to ensure that the requirements of the Data Protection legislation on handling personal information are met. Where we are required to disclose information by law, for example for safeguarding purposes, we may do so without these arrangements.
GMP will take steps to ensure any disclosures of personal data are necessary and proportionate, as required by law. Whenever we share your personal information, sharing options will be evaluated to ensure that your data is shared in the most secure manner.
What we do with it:
The information provided will be used to conduct the necessary background checks that are relevant to all job roles within GMP or a service being provided to GMP. Depending on the level of vetting required such background checks may consist of checks on policing systems, financial systems and social media sites to determine someone’s suitable to work or provide a service to GMP.
How long we keep it:
We will only keep your personal information as long as it is required for the particular purpose or purposes for which it is held in accordance with GMP’s Record Retention Policy.
Will this information be used to take automated decisions about you?
What are your rights?
You have the right under the Data Protection legislation to request a copy of your information (subject to exemptions). For example, to know what it is used for and how it has been shared. This is called the right of subject access.
In addition to the right of access, you also have other rights, such as; the right to have inaccurate information rectified, erased or restricted, the right to data portability and the right to object.
For further detail, please visit the data protection pages on our website: www.gmp.police.uk
What we would also like to do with it
If we wish to use your personal data for a new purpose, not covered by this Privacy Notice, we may provide you with a new notice explaining this new use and setting out the relevant purposes and processing conditions, prior to commencing the processing. We will seek your prior consent to the new processing if this is appropriate.
Making a complaint about your personal data
You can complain directly to the Greater Manchester Police's Data Protection Officer via email or in writing to: -
Email: firstname.lastname@example.orgData Protection Officer
Information Compliance and Records Management Unit
Greater Manchester Police
You also have the right to complain to the Information Commissioner’s Office using the following details:The Information Commissioner's Office
Cheshire SK9 5AF
Telephone: 08456 30 60 60 or 01625 54 57 45