Job applicant privacy notice (GDPR compliant)
The Charity is aware of its obligations under the General Data Protection Regulation (GDPR) and is committed to processing your data securely and transparently. This privacy notice sets out, in line with GDPR, the types of data that we collect and hold on you as a job applicant. It also sets out how we use that information, how long we keep it for and other relevant information about your data.
Data controller details
The Charity is a data controller, meaning that it determines the processes to be used when using your personal data. Our contact details are as follows:
Ben Gray, Director of Finances & Resources, Henshaws, Bogs Lane, Harrogate HG1 4ED T: 01423 886451
Data protection principles
In relation to your personal data, we will:
- process it fairly, lawfully and in a clear, transparent way
- collect your data only for reasons that we find proper for the course of your employment in ways that have been explained to you
- only use it in the way that we have told you about
- ensure it is correct and up to date
- keep your data for only as long as we need it
- process it in a way that ensures it will not be used for anything that you are not aware of or have consented to (as appropriate), lost or destroyed
Types of data we process
We hold many types of data about you, including:
- your personal details including your name, address, date of birth, email address, phone numbers
- your photograph
- information included on your job application documents including references, education history, employment history, and whether you have been subject to any Safeguarding concerns
- criminal records
- equality monitoring data including gender, nationality, age, ethnic origin, religion/belief, sexual orientation, disability
- documentation relating to your right to work in the UK, and DBS check where appropriate
How we collect your data
We collect data about you in a variety of ways including the information you would normally include in job application documents, or notes made by our recruiters during a recruitment interview. Further information will be collected directly from you when you complete forms at the start of your employment, for example, your bank and next of kin details. Other details may be collected directly from you in the form of official documentation such as your driving licence, passport or other right to work evidence.
In some cases, we will collect data about you from third parties, such as employment agencies, former employers when gathering references or credit reference agencies.
Personal data is kept in personnel files and within the Charity’s HR and IT systems.
Why we process your data
The law on data protection allows us to process your data for certain reasons only:
· in order to perform the employment contract that we are party to
· in order to carry out legally required duties
· in order for us to carry out our legitimate interests
· to protect your interests and
· where something is done in the public interest.
All of the processing carried out by us falls into one of the permitted reasons. Generally, we will rely on the first three reasons set out above to process your data.
We need to collect your data to ensure we are complying with legal requirements such as:
· carrying out checks in relation to your right to work in the UK and
· making reasonable adjustments for disabled employees.
We also collect data so that we can carry out activities which are in the legitimate interests of the Charity. We have set these out below:
· making decisions about who to offer employment to
· making decisions about salary and other benefits
· assessing training needs
· dealing with legal claims made against us
· supporting evidence for funding bids
Social Media
Recruitment processes are increasingly utilising social media as a method of engaging job-seekers. Due to the increasing amount of content posted online, viewing candidate’s social media profiles is a quick and effective way of checking details contained in a CV or gaining an insight into the values of the candidate.
Henshaws permits reviewing the social media profiles of candidates for recruitment purposes. This review will be carried out in accordance with Henshaws’s policies and code of conduct. The recruiter must make a copy of any information obtained and provide this to the HR department. Accessing of the candidate’s profile page may be disclosed to the candidate during the recruitment process. Where information is discovered that makes the candidate unsuitable for the position, the candidate will be notified and they will be entitled to make representations about the information and their unsuitability.
If you are unsuccessful in obtaining employment, your data will not be used for any reason other than in the ways explaining in relation to the specific application you have made.
Special categories of data
Special categories of data are data relating to your:
·