During the recruitment process, we will gather the following information:
- personal details such as name, address, phone numbers, e-mail address;
- information gathered via the recruitment process such as that entered into a CV or included in a CV cover letter;
- references from former employers;
- notes made during any interview;
- verification of qualifications;
- where appropriate, verification of eligibility to hold a post
and the following special category data:
- your gender;
- information of any disability you have or other medical information;
and information relating to criminal convictions.
WHAT DO WE DO WITH IT?
We will use the contact details you provide to provide information about the advertised post and the recruitment process. If we offer you a post, we will use any information about a disability or health conditions to make any necessary, reasonable adjustments to working conditions. If we offer you a post, we would also use the data under our legal obligation to check your right to work in the UK. The information gathered will otherwise be used to assess your suitability for the advertised post.
HOW LONG FOR?
If you are unsuccessful in your application, your personal data will be kept for one year.
If you are successful, the personal data will be gathered in a personnel file which will be retained for seven years after the end of your employment, paper and electronic format. Additional personal data will be sought from you on entering into a contract of employment.
WHERE IS THE DATA KEPT?
The OA database is held on secure servers within the UK.
The OA will not share your personal data with any other third party without your consent, subject to any statutory or legal obligations.
You have the right, subject to any legal or statutory rights of or requirements placed on the OA, to:
- Receive a copy of the personal data we hold on you.
- Object to processing.
- Have corrected or deleted any errors in your personal data.
- Ask that your data be erased
- Ask that the processing of your data be restricted, if you disagree about the accuracy of the data the controller holds or you object to the controller’s intention to erase your data.
- Claim compensation for damages caused by a breach of data protection legislation.
- Make a complaint to the Information Commissioner’s Office at: https://ico.org.uk/concerns/ or 0303 123 1113.
If you wish to know more about this policy or your rights, please contact the Data Protection Officer, Gary Shipsey, on firstname.lastname@example.org.