Privacy notice to job applicants
- INTRODUCTION
1.1 The purpose of this privacy notice is to provide information on how Diaverum UK (“we”) process your Personal Data in connection with your participation in one of our recruitment processes or your submission of an application for a position with us.
1.2 We respect your privacy and duly protect the Personal Data we process about you. All processing of Personal Data is carried out in accordance with the GDPR. The following describes how we collect, process and share your Personal Data. - WHAT PERSONAL DATA WILL BE PROCESSED?
2.1 We will collect and process the following types of personal data about you (your “Personal Data”):
Contact information (e.g. name, address, email and telephone number);
Personal identity number
Immigration Status
DBS status
Vaccination History
DOB
Gender
Religion
Ethnic Origin
Nationality
Sexual orientation
Disclosure of Criminal Background
Pictures (if required in the recruitment process)
Information regarding prior working experience, qualifications, skills and education
CV and cover letter
Results from personality assessments (if required in the recruitment process)
Result from integrity check (if required in the recruitment process)
Licence and registration for applicable position
2.2 As a general rule, we will collect the Personal Data from you directly via the application process or through Recruitment companies you are in contact with and have consented that the recruitment company share your personal data with Diaverum. However, we may also collect information about License and registration about you through publicly accessible sources, or accurate tax details from the national tax agency. - FOR WHAT PURPOSES IS PERSONAL DATA BEING PROCESSED
3.1 We will process your personal data for the following purposes:
(i) To review if you are a suitable candidate for the advertised job;(ii) To process potential claims relating to the recruitment process (e.g. discrimination claims, etc.); and
(iii) To draft employment agreements that will be concluded if you are hired.
(iv) If applicable and if your explicit consent has been obtained, to include your contact information in an internal data base with potential applicants in order to be able to contact you if a relevant position or role is available.
3.2 The provision of your Personal Data is necessary for us to evaluate whether or not you are suitable for the advertised position. If you do not provide us with your Personal Data, we will not be able to include you in the recruitment process. - WHAT ARE THE LEGAL GROUNDS FOR PROCESSING YOUR PERSONAL DATA?
4.1 The processing of your Personal Data for purpose (i) to (ii) in Section 3.1 above is based on our legitimate interest since the recruitment process require the information in order for Diaverum to make the best selection of candidates and to manage any other recruitment related issues.
4.2 The processing of your Personal Data for purpose (iii) in Section 3.1 above is based on the necessity of such processing to conclude an employment agreement with you, in the event you are offered employment.
4.3 The processing of your Personal Data for purpose (iv) is based on your explicitly given consent to such processing. - WHO HAS ACCESS TO YOUR PERSONAL DATA?
5.1 We have implemented appropriate technical and organisational measures to protect your Personal Data against loss, unlawful access, etc. The number of persons with access to your Personal Data is limited. Only individuals associated with the Diaverum Group that need to process your Personal Data in accordance with the purposes above will have access to your Personal Data.
5.2 We will share your Personal Data with companies within the Diaverum Group, for the purpose of recruitment that is supported centrally and if the position is based abroad. We will also share your Personal Data with suppliers and partners that carry out services on our behalf such as Personality assessment companies and Pension providers.
5.3 Your Personal Data could, depending on if the position is based abroad, be transferred to a country outside of EU/EEA which may have a lower level of protection than within the EU/EEA. The transfer is based on legitimate interest of the Diaverum Group and is needed to share the information with Diaverum entity where the position will be based. When transferring Personal Data to countries outside the EU/EEA, we use standard contractual clauses approved by the European Commission to ensure a sufficient level of protection for your Personal Data. The standard contractual clauses can be found via the following link: https://ec.europa.eu/info/strategy/justice-and-fundamental-rights/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.] - FOR HOW LONG IS YOUR PERSONAL DATA STORED?
Your Personal Data will only be stored as long as the purpose for which it is kept exists and as long as permitted or required under local law. This means that your Personal Data will be stored for 6 months after the recruitment process is finished. Your application could potentially be retained for 24 months after the recruitment process is finished, if allowed or required under local laws with the purpose to resolve any disputes relating to potential claims of discrimination.
Data will be stored in a range of different access controlled places, including the HR management systems and on other IT systems (including email). - WHAT ARE YOUR RIGHTS?
7.1 Diaverum UK, reg. no. 06614923, postal address: 22-24 Upper Marlborough Road, St Albans AL1 3AL, and e-mail address uk@diaverum.com is the controller of the processing of your Personal Data. This means that we are responsible for your Personal Data being processed correctly and in accordance with applicable laws. Diaverum UK has appointed a Data Protection Officer who can be reached at UK.DPO@diaverum.com or Diaverum UK, 22-24 Upper Marlborough Road, St Albans AL1 3AL.
7.2 You are entitled to know what Personal Data we are processing regarding you, and you can request a copy of such data. You are entitled to have incorrect Personal Data regarding you corrected, and in some cases you may request that we delete your Personal Data (if, for example, the Personal Data is no longer necessary since the recruitment process has been completed). If you have given your consent to processing of your personal data for an explicit purpose you may always withdraw your consent. If you want to withdraw your consent, you may contact us through the contact information provided in Section 7.1. You also have the right to object to certain processing of your Personal Data, and request that the processing of your Personal Data be limited. Please note that limitation or deletion of your Personal Data may result in us not being able to include you in the recruitment process. You are also entitled to extract your Personal Data in a machine-readable format and to transfer the Personal Data to another controller.
7.3 If you have questions regarding how we process Personal Data concerning you, you are most welcome to contact us at uk@diaverum.com, by mail to the address above or by phone +44 1727 737 680.
7.4 If you have any objections to or complaints about the way we process your Personal Data, you have the right to lodge a complaint with the relevant data protection supervisory authority. - CHANGES
If any changes are made concerning the processing of your Personal Data, we will inform you by publishing an updated version of this privacy notice on www.diaverum.com
Date of last modification: 06-01-2021