This sets out the basis on which any employee personal data provided by a client will be processed by NB Bookkeeping on behalf of clients.
NB Bookkeeping is an outsourced payroll and bookkeeping company which provides a full payroll and bookkeeping service for our clients. Our services cover payroll administration; bookkeeping; VAT administration; Self-Assessment; and CIS.
Under the GDPR definitions, the Company is a Data Processor for our clients who are Data Controllers. Under GDPR, a Data controller determines the purposes and means of processing personal data. A Data processor is responsible for processing personal data on behalf of a Controller. The Company will complete a Data Processor Agreement with each client to ensure compliance with GDPR.
We use client employee data to enable clients to pay salaries and benefit of their employees. The client employee data provided to us and that we process may include name, address, email address and phone number, date of birth, CV, qualifications, passport information, national insurance number, Tax number, personal job-related information.
We process data only where it is necessary for the
- Performance of the contract with our clients.
- Compliance with a legal obligation.
- Performance of a task carried out in the public interest or in the exercise of official authority.
- Legitimate interests of the Data Controller or a third party, except where such interests are overridden by the interests or fundamental rights or freedoms of the data subject.
Any client employee personal data will be treated as strictly confidential and will not be shared with any other companies or Third Parties, except where there is a statutory duty to disclose. We do not transfer client employee data outside the UK. The Rights of client employees and clients are encompassed within the Data Processor Agreement.
For all data matters including complaints, contact our Data Protection officer, Nasser Drees, email on email@example.com.
If we do not manage to resolve the complaint to your satisfaction, then you have the right to contact the Information Commissioners Office.