Candidates

OUR CONTACT DETAILS

Our head office address is:

Unit 3, Ulysses House, Ulysses Park

Heron Road, Exeter

EX2 7PH

Our Data Protection Officer is Jody Kennard and she can be contacted at [email protected].

WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU? HOW WILL WE USE THAT PERSONAL DATA?

At Situ, we value candidates for our jobs and this notice explains how we treat your data after you apply for a role with us. We have a separate notice explaining how we treat your data if you become an employee. It is available by emailing [email protected].

When you are a candidate, it means your data has been passed to us by you or by a third party on your instruction (e.g. recruitment agency). We receive your name, email address, phone number, work history, education history, date of birth and other personal data you include on your CV/application.

The data we have about you is stored on our email servers and in our secure electronic folders.

WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

We need a legal basis in order to process your personal data.  For the personal data you give us, the legal basis is consent.

We will process the following personal data because you have consented for us to do so:

• All personal data provided during the application process, as details above.

You have the right to withdraw your consent at any time, and you can do this by emailing [email protected]. Please speak to us if you have any concerns.

DO WE USE ANY AUTOMATED DECISION MAKING?

We do not use any automated decision making.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?

We share your personal data with the following recipients:

• our software providers (e.g. our email server provider).

DO WE TRANSFER YOUR PERSONAL DATA OUTSIDE OF THE EU OR EEA?

SwipedOn is our chosen visitor management supplier. They are based in New Zealand and use servers in the USA.

HOW LONG DO WE KEEP YOUR PERSONAL DATA FOR?

We will hold your data for as long as your application remains live, plus three years.

YOUR RIGHTS AS A DATA SUBJECT

The GDPR gives you rights as a data subject. You have:

1.  The right to request from us access to your personal data;

2.  The right to request from us the rectification of your personal data;

3.  The right to request from us the erasure of your personal data;

4.  The right to request from us restriction of processing your personal data;

5.  The right to object to our processing of your personal data;

6.  The right of data portability;

7.  If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time. This does not affect the lawfulness of processing based on your consent before you withdrew it; and

8.  You have the right to complain to the ICO.

More information on your rights can be found in Chapter 3 of the GDPR.