The Company is aware of its obligations under the General Data Protection Regulation (GDPR) and is committed to processing your data securely and transparently. This privacy notice sets out, in line with GDPR, the types of data that we collect and hold on you as a speculative job applicant. It also sets out how we use that information, how long we keep it for and other relevant information about your data.
Types of data we process
The type of data we hold on you is the information included on your CV and, any covering letter you may have provided, including your name, contact details, email, address, references, education and employment history.
How we collect your data
We collect data about you from the information you have included on a CV or a cover letter.
Your Personal data is stored electronically in a file within the HR systems.
Why we process your data
The organisation needs to process the data you have submitted, such as your CV, to ascertain if you are suitable for any roles we currently have available or in the near future.
Once we have reviewed your CV we will contact you with the outcome of this review.
This may include seeking your consent to retain your data in case any suitable job vacancies arise in the Company. You are free to withhold your consent to this and there will be no consequences for withholding consent.
Sharing your data
Your data will be shared with colleagues within the Company where it is necessary for them to undertake their duties regarding recruitment. This includes, the HR department and those in the department where there may be a vacancy such as the recruiting manager. We do not share your data with third parties.
How long we keep your data for
In line with data protection principles, we only keep your data for as long as we need it and this will depend on if you are successful in obtaining employment with us. If we have sought your consent to keep your data on file for future job vacancies, and you have provided consent, we will keep your data for 6 months. At the end of this period, we will delete or destroy your data, unless you have already withdrawn your consent to our processing of your data in which case it will be deleted or destroyed upon your withdrawal of consent.
If your application is successful, your data will be kept and transferred to the systems we administer for employees. We have a separate privacy notice for employees, which will be provided to you if your application is successful.
Your rights
As a data subject, you have a number of rights. You can:
• access and obtain a copy of your data on request;
• require the organisation to change incorrect or incomplete data;
• require the organisation to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
• object to the processing of your data where the organisation is relying on its legitimate interests as the legal ground for processing; and
• ask the organisation to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override the organisation's legitimate grounds for processing data
Where you have provided consent to our use of your data, you also have the unrestricted right to withdraw that consent at any time. Withdrawing your consent means that we will stop processing the data that you had previously given us consent to use. There will be no consequences for withdrawing your consent. However, in some cases, we may continue to use the data where so permitted by having a legitimate reason for doing so.
If you wish to exercise any of the rights explained above, please contact the HR function.
Making a complaint
The supervisory authority in the UK for data protection matters is the Information Commissioner (ICO). If you think your data protection rights have been breached in any way by us, you are able to make a complaint to the ICO.