CEH Privacy Notice: Information for Job Applicants

Personal Data:

This section of the privacy notice provides information on: the purpose of the data processing; the lawful basis for the processing; further information where the lawful basis is legitimate interests for the processing; the categories of personal data obtained (if the personal data is not obtained from the individual it relates to).

Job Applicants' personal data

a. The lawful basis for the processing personal data: For the performance of a contract with CEH

Purpose of the processing: As a job applicant for a role with CEH your data is processed in order for you to be considered for employment.

In addition to the personal data provided by you, in some instances there may be some categories of personal data that are not obtained from you personally. This may include information received such as:

  • Information from recruitment agencies where relevant, which may include an agency candidate summary
  • Information from pre-employment checks:
    • Employment references
    • DBS
    • Agenda Screening
    • OH Fit for Work Clearance

The recipients or categories of recipients of the personal data:

 b. The lawful basis for the processing: CEH complies with its legal obligations.

Purpose of the processing: CEH processes and shares data to comply with statutory requirements, including:

  • Right to Work checks: passport
  • Identity checks: personal identity documents
  • DBS: for safegyarding checks
  • Tax & NI information

CEH satisfies condition (b) for processing special category data under Article 9(2) of the European General Data Protection Regulations (EU) 2016/679. Condition (b) states processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law.

c. The lawful basis for the processing: Necessary for the legitimate interests of CEH

Purpose of the processing: Business needs are met to enable management and delivery of services.

The legitimate interests for the processing are based on financial viability of funding available and analysis of the employee headcount and costs. Forecasting resource requirements over projected timescales for work.

Personal data processed for legitimate interests includes:

  • OH Report recommendations
  • Promotion applications
  • Skills matching processes
  • Job Applications

The recipients or categories of recipients of the personal data:

  • UKRI and NERC
  • Salus OH Service Providers: for Bangor / Lancaster / Wallingford sites.