Staffordshire County Council – Recruitment Privacy Notice (Applicants)
We are fully committed to complying with Data Protection Act 2018 legislation, including the General Data Protection Regulation (GDPR), which regulates how we process personal information. Here we explain how we collect and use personal data during the recruitment process and subsequently, if you become an employee, tells you about your rights and gives contact details for help and advice.
The software we use to help manage recruitment processes is called Tribepad which is owned by Tribepad Limited. This means that your personal data is processed by Tribepad Limited (the ‘data processor’) on behalf of Staffordshire County Council, following the instructions the Council sets out.
What personal information do we collect about you?
As part of every recruitment process, Staffordshire County Council collects and processes personal data relating to job applicants. This will include but is not limited to:
- Your name, address and contact details, including email address, telephone number and date of birth
- Details of your qualifications, skills, experience, employment history, other relevant experience and achievements
- Whether or not you have a disability for which we need to make reasonable adjustments during the recruitment process
- Proof of your entitlement to work in the UK
- Equality monitoring information, including information about your gender, ethnic origin, sexual orientation, sexual identification, age, health and religion or belief.
- Employment references and the results of any pre-employment screening
- The outcome and results of any interviews or tests which formed part of the recruitment process
- Pay details, national insurance number, tax coding and details of the bank or building society account
We collect this information in a variety of ways. For example, data might be contained in application forms, CVs or resumes, obtained from your passport or other identity documents, or collected through interviews or other forms of assessment, including tests and/or online tests.
We will also collect personal data about you from third parties, such as references supplied by your former employers, information from employment background check providers and information from criminal records checks.
Data will be stored in a range of different places, including on your application record, in electronic HR Management Systems and on other IT systems (including email).
Why do we need collect and use personal data about you?
We need to collect and process data during the recruitment process and to make offers of employment to each successful candidate.
We will use this information to:
- Communicate with you about job applications made and provide you with alerts about vacancies for roles you have indicated you will be interested in.
- Evidence how you meet the requirements of the job being applied for.
- Make decisions about whether and how to progress your application through the various stages of the recruitment process.
- Initiate pre-employment and employment checks when job offers are made.
- Enter into an employment contract with successful candidates.
- Help us maintain and promote equality in the workplace.
We process personal data because it is necessary to comply with our legal obligations which change throughout the recruitment process:
Consent: We use the personal data in your candidate profile to communicate with you and provide you alerts about vacancies for roles you have indicated you will be interested in.
Contract: Processing your data is necessary to move your application forward before signing a contract of work. This concerns employment or pre-employment checks.
Legal obligation: UK law requires the Council as an employer to check that candidates are entitled to work in the UK.
How we use your Personal Information
We will request your initial consent to process the personal data that you supply when you first apply for work with Staffordshire County Council. However, after this point we will rely on legal and legitimate interests as reason for your processing data.
Whenever we use information, we will always limit this to only what is needed and ensure that it is used safely and securely. We require anyone we share information with, or who uses it on our behalf, to do so too.
All staff and Councillors receive regular training on data protection and information security.
Who has access to your personal information?
Your information will be shared internally for the purposes of the recruitment process and only be accessed and processed by authorised personnel for the performance of their duties such as:
- Recruitment and Resourcing Team
- Hiring Managers
- People named by candidates as referees
- The DBS for criminal records checks
- Occupational Health Services to confirm your fitness for work for certain job roles
- Providers of psychometric tests for certain job roles
We will not share your data with third parties, unless your application for employment is successful and we make you an offer of employment. We will then share your data with:
- Former employers to obtain references for you
- Employment background check providers to obtain necessary background checks e.g. Occupational Health.
- Disclosure and Barring Service to obtain necessary criminal records checks.
- Our third party payroll provider, to process salary and payroll information
We will not transfer your data outside the European Economic Area. The only exception to this will be for International Recruitment when your data may be transferred outside the European Economic Area (EEA) as part of the recruitment process, in order to conduct the necessary checks to employ you and to comply with other legal and Home Office requirements.
Any such processing will be carried out strictly in accordance with UK and EU privacy legislation and the appropriate contractual safeguards which Staffordshire County Council has put in place.
How do we protect data?
Staffordshire County Council takes the security of your data seriously and has a range of robust policies, processes and technical measures in place to safeguard personal information.
Access to systems that hold employment related information is restricted to authorised personnel through the use of unique identifiers and passwords. Your information is stored on systems that are protected by secure network architectures and are backed-up on a regular basis (to a second secure location) for disaster recovery and business continuity purposes; and to avoid the risk of inadvertent erasure or destruction.
How long will we keep your information?
We only keep information for as long as it is needed.
If your application for employment is unsuccessful, we will hold your data on file for 12 months after the end of the relevant recruitment process. (In exceptional circumstances, we may need to retain your record for a further duration in order to comply with Home Office requirements). If you register and agree to allow us to keep your personal data on file, we will hold your data on file for 6 months from the date of your last access/update.
At the end of that period, your data will be deleted or destroyed.
If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your employee file and retained during your employment with us. The periods for which your data will be held is in line with our Privacy notice and Retention Schedule
Third Party Processing
Staffordshire County Council has a number of contracts with third party suppliers and service providers e.g. Payroll providers, Employment Agencies, who provide specialist services. These third parties will process candidate information in accordance with our instructions and make decisions regarding the information as part of the delivery of their services. They are also required to put in place appropriate security measures that ensure an adequate level of protection for personal information.
What Rights do you have?
You have a number of rights relating to the data we hold about you. These include the right to:
- Ask to see the personal information we hold about you
- Withdraw consent
- Ask us to change information we hold about you if it is wrong
- Ask us to delete the information we hold about you
- Ask us to limit the way we use your personal Information
- Ask for human intervention regarding decisions made about you by a computer
- Data portability (have your data transferred to another Authority)
- Complain to the Information Commissioner’s Office
If you would like to exercise any of these rights or are unhappy with any aspect of how your information has been collected and/or used, please see our Privacy notice
What if you do not provide personal data?
You are under no statutory or contractual obligation to provide data to Staffordshire County Council during the recruitment process. However, please be aware that if you decline, it will not be possible for your application to progress as we will be unable to process the data needed to do this.
Data Protection Officer Contact Details
The contact details for the Data Protection Officer for Staffordshire County Council are outlined in our Privacy notice