HR documents HR210_Privacynoticeapplicants policy_Final_31may18 | Page 2

Privacy notice for job applicants policy Lawful basis for processing The law on data protection allows us to process your data for certain reasons only. The information below categorises the types of data processing we undertake and the lawful basis we rely on. Activity requiring your data Lawful basis Carrying out checks in relation to your right to work in the UK Legal obligation Making reasonable adjustments for disabled employees Legal obligation Making recruitment decisions in relation to both initial and subsequent employment e.g. promotion Our legitimate interests Making decisions about salary and other benefits Our legitimate interests Making decisions about contractual benefits to provide to you Our legitimate interests Assessing training needs Our legitimate interests Dealing with legal claims made against us Our legitimate interests Preventing fraud Our legitimate interests Special categories of data Special categories of data are data relating to your: 1. Health 2. Sex life 3. Sexual orientation 4. Race 5. Ethnic origin 6. Political opinion 7. Religion 8. Trade union membership 9. Genetic and biometric data We carry out processing activities using special category data: 1. For the purposes of equal opportunities monitoring 2. To determine reasonable adjustments Most commonly, we will process special categories of data when the following applies: 1. You have given explicit consent to the processing 2. We must process the data in order to carry out our legal obligations 3. We must process data for reasons of substantial public interest 4. You have already made the data public Failure to provide data Your failure to provide us with data may mean that we are unable to fulfil our requirements for entering into a contract of employment with you. This could include being unable to offer you employment, or administer contractual benefits. Criminal conviction data We will only collect criminal conviction data where it is appropriate given the nature of your role and where the law permits us. This data will usually be collected at the recruitment stage, however, may also be collected during your employment. We use criminal conviction data to determine your suitability, or your continued suitability for the role. We rely on the lawful basis of our legitimate interests to process this data. 2/4