WHO HAS ACCESS
TO THE DATA?
WHAT INFORMATION DOES
THE COMPANY COLLECT?
WHY DOES THE COMPANY
PROCESS PERSONAL DATA?
The Company collects and processes a range of information
about you including:
• Name, address, title, contact details
including email address and telephone
number;
• Details of your qualifications, skills and
employment history;
• Information about your current level of
remuneration including entitlement to
benefits;
• Whether or not you have a disability for
which the Company needs to make
reasonable adjustments during the
recruitment process;
• Information about your nationality and
entitlement to work in the UK;
The Company collects this information in a variety of ways.
For example data is collected through application forms, CVs,
passports or other identity documents, or collected through
interviews or other forms of assessments.
The Company may also collect personal data about you from
third parties such as references obtained from former
employers, social media searches, background check providers
and criminal records checks permitted by law.
Data is stored in a range of different places including on your
application record in HR management systems and on other IT
systems including email.
YOUR RIGHTS
As a data subject you have a number of rights. You can:
• Access and obtain a copy of your data on request;
• Require the organisation to change in correct or
incomplete data;
• Require the Company to delete your data where it
is no longer necessary for the purposes of
processing;
• Object to the processing of your data where the
organisation is relying on its legitimate interests
as the legal ground for processing;
• Ask the Company to stop processing data for a
period if it is inaccurate or there is a dispute
about whether your interests override the
Company’s legitimate grounds for processing
data.
If you would like to exercise any of these rights please contact
Head Office (contact details at the foot of this notice).
If you believe the Company has not complied with your data
protection rights you can complain to the Information
Commissioner.
The Company needs to process data in order to consider your
application for employment. It also needs to process your
data if a contract is entered into with you.
In some cases the Company needs to process data to ensure
it is complying with its legal obligations eg to check
entitlement to work in the UK.
The Company has a legitimate interest in processing
personal data during the recruitment process and for
keeping records of the process. Processing data from job
applicants allows the organisation to manage the recruitment
process, assess and confirm a candidate’s suitability for
employment and decide to whom to offer a job. The Company
may also need to process data from job applicants to respond
to and defend legal claims.
Where the Company relies on legitimate interest as a reason
for processing data it has considered whether or not these
are overridden by the rights and freedoms of employees and
has concluded they are not.
The Company may process health information if it needs to
make reasonable adjustments to the recruitment process for
candidates who have a disability. This is to carry out its
obligations and exercise specific rights in relation to
employment.
If your application is unsuccessful the Company will keep
your personal data on file in case there are any future
employment opportunities for which you may be suited. The
Company will ask for your consent before it keeps your data
for this purpose and you are free to withdraw your consent
at any time.
Your information may be shared internally for the purposes
of the recruitment exercise. This includes members of the
HR team, interviewers involved in the recruitment process,
managers in the business area with a vacancy, directors and
IT staff if access to the data is necessary for the performance
of their roles.
The Company will not share your data with third parties
until your application for employment is successful and it
makes you an offer of employment. The Company may then
share your data with former employers to obtain references
for you, employment background check providers and if
necessary the Disclosure & Barring Service to obtain
necessary criminal records checks.
The Company will not transfer your data outside the
European Economic Area.
HOW DOES THE
COMPANY PROTECT DATA?
The Company takes the security of your data seriously. The
Company has internal controls in place to try to ensure your
data is not lost, accidentally destroyed, misused or disclosed
and is not accessed except by employees in the performance
of their duties.
HOW LONG DOES THE
COMPANY KEEP DATA?
WHAT IF YOU DO NOT PROVIDE
YOUR PERSONAL DATA?
If your application for employment is unsuccessful, the
Company will hold your data on file for six months after the
end of the relevant recruitment process. At the end of that
period, or in the meantime if you withdraw your consent,
your data will be deleted or destroyed.
If your application for employment is successful, personal
data gathered during the recruitment process will be
transferred to your personnel file. The periods for which
your data will be held will be provided to you in a new
privacy notice.
You are under no statutory or contractual obligation to
provide data to the Company during the recruitment
process. However if you do not provide the information, the
Company may not be able to process your application
properly or at all.
1
4
5
2 3
JOB APPLICANT PRIVACY NOTICE
This notice is being provided to meet the requirements of the General Data Protection Regulations (GDPR) which come in to effect from 25th May 2018.
GDPR sets out new rules on how personal data can be used. As part of the recruitment process, Stay Original (the Company) will collect and process some personal data relating to job applicants.
The Company is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.
The Manor, Pilton, Somerset BA4 4BE
0203 0024740 | 25 April 2018