The General Data Protection Regulation (GDPR) is a regulation of the European Parliament, the council of the European Union and the European Commission intended to strengthen and unify data protection for all individuals within the European Union (EU) and became law in the UK on 25th May 2018.
Under the GDPR, we are required to publish information about what data we collect, why we need to store it, and your rights under the GDPR legislation.
Workplace Drugs and Alcohol Testing Ltd falls into the category of medical info, which requires a lawful basis for collection and processing of data. We have always and will continue to, treat all data we receive and information submitted to us as strictly confidential.
How to contact us You can contact us by visiting our website; www.workplacedat.co.uk or email us; firstname.lastname@example.org.
Purposes and legal basis for processing
The purpose of us processing your personal data is through a request to perform a drugs and alcohol screening test from either your employer or agency that you currently work for. This will be in line with their health and safety policy, in response to a need for screening for; pre-employment, random or for cause. We always ask for consent and read out our declaration to you before starting any screening test. We always ask if you understand and if you are happy to sign the consent form after we have read the declaration to you.
We only process a person's personal data for one or more of the following reasons;
Data we hold
The data we hold consists of:
Your name, employer or company name, postal address (if applicable), email address (if applicable), telephone number (if applicable), job title, D.O.B (date of birth), gender, ID e.g. Passport or driving licence number for identification purposes, medication used in the last two weeks, screen test for drugs (negative or non-negative and for what substances) and breathalyser results (up to 4 readings).
This data is used to identify you, Donor the screen results and contact you if, with your consent, a chain of custody laboratory screen is carried out.
This is not held for individuals whom are being screened, only for clients whom we invoice after works have been completed. This information is deleted upon completion of a contract or at the clients request (if applicable/ legally able to).
Any enquiries we have will have been received via email or post. Enquiries via email, once read and acted upon, unless still relevant to an ongoing contract, financial implication or tax Donor will be delete after 12 months.
We store and process data only as agreed by the client or as required in order to perform services requested by the client. We regard all details that we store as confidential. We will keep hold of your data for no longer than necessary. We only store personal data for as long as is legally required and for as long as we have your consent. We retain personal data that you supply to us, for as long as you (contractor and employee) are a client with an active account, and for as long as we are legally required to do (e.g. For tax and accounting regulations).
Recipients data sharing
We do not sell any of your personal data or engage in any profiling activities. To be able to provide our services to you and run our business effectively, we share data with 3rd parties from the following categories;
For the purposes of GDPR regulations - We do not transfer data to any third country.
You also have the right to raise any issues or concerns to us, please do this directly to email@example.com.
Consent and withdrawal
You have a genuine, free choice to either consent or not consent to us performing a drugs and alcohol screening test (see Appendix 1). We will offer you both options after reading the declaration form and you will be confirming that you fully understand the process of consent/ not consenting through signing this form. We acknowledge your consent when you voluntarily sign and date the sample donor section, sign and date the alcohol screen results and similarly the drug testing results section. As outlined in your employer/ agencies policies a refusal / deliberate attempt to tamper with the samples or delay testing may constitute a breach of your employment and would therefore be actioned as a refusal.
Similarly as you are able to refuse consent, you are also within your rights to withdraw consent after you have agreed to it. You can do this by informing the tester throughout the process of your intention to withdrawal.