Job Applicant Privacy Notice

This privacy notice explains how the personal data of job applicants is processed.

Info This page was last reviewed and updated 17 April 2023.

 

The type of personal information we collect

To manage individuals’ applications to work with the Link group of organisations, Link collects and processes the following information about you:

  • Link careers portal username and password (if applying online);
  • applications that have been submitted to a specified vacancy;
  • your name, address and contact details, including email address and telephone number;
  • details of your qualifications, professional memberships, skills, experience and employment history;
  • when applying for employee and worker vacant positions, information about your current level of remuneration, including benefit entitlements;
  • whether or not you have a disability for which the organisation needs to make reasonable adjustments during the recruitment, selection and vetting process;
  • information about your entitlement to work in the UK e.g a valid passport;
  • information to confirm your identity and proof of address;
  • information on your relationship of any friends or relatives that are members of Link’s Board of Management, Committees or staff;
  • information on if you have a current driving license and/or access to a vehicle;
  • information on two appropriate individuals that can provide a reference on your suitability for the post in which you have applied;    
  • information on criminal convictions or offences; 
  • information on your skills, experience, competency, values, behaviours through selection assessments; and  
  • with your consent information on where you heard of the vacancy and equal opportunities monitoring information is not needed for the purposes of recruitment and selection so it is optional for you to provide.
  • If you are offered a post, additional information may be requested from you, as outlined in our employee and worker privacy notice.

How we get the personal information and why we have it

We need your information to process your application for the following reasons: 

  •  Link needs to process data prior to entering into a contract with you. It also needs to process your data to enter into a contract with you if your application is successful;
  • Link needs to process data to ensure that it is complying with its legal obligations. For example, it is required to check a successful applicant's eligibility to work in the UK before employment/contract for service starts;
  • Link processes health information if it needs to make reasonable adjustments to the recruitment and selection process for candidates who have a disability. This is to carry out its obligations and exercise specific rights in relation to the Equality Act 2010;
  • Link is obliged to seek information about criminal convictions and offences. Where the organisation seeks this information, it does so because it is necessary for it to carry out its obligations and exercise specific rights in relation to certain posts, as a provider of “regulated work” as defined by Scheduled 2 and 3 of the Protection of Vulnerable Groups (Scotland) Act 2007 and the Police Act 1997; 
  • Link has a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from job applicants allows Link to manage the recruitment process, assess and confirm a job applicant’s suitability for employment/engaging on a contract for service and decide to whom to offer a job/contract for service; 
  • Link may also need to process data from job applicants to respond to and defend against legal claims;
  • where Link processes other special categories of data, such as information about ethnic origin, sexual orientation, health or religion or belief, this is for equal opportunities monitoring purposes and is at your discretion to provide;
  • where Link relies on legitimate interests as a reason for processing data, it has considered whether or not those interests are overridden by the rights and freedoms of employees or workers and has concluded that they are not;
  • Link will not use your data for any purpose other than the recruitment, selection and if appropriate vetting process for the post(s) in which you have applied.

Some of Link’s recruitment processes are occasionally based on automated decision-making. For example at the beginning of an online application, you may be asked a number of questions that require a yes or no answer. The answers you provide to these questions may automatically end the application process as based on the information provided you do not meet the legal and/or essential criteria for the vacancy. A question may ask if you have the right to work in the UK, if a job applicant answered no to the question, then the application would end and would not be taken forward to the recruitment and selection process. The job applicant is welcome to contact Link Human Resources to discuss the reason if this happens.   

The majority of information that we store and process about you is provided directly by yourself, typically through the following methods:

  • Application forms and CV’s
  • Identity documents (such as passports, driving license, work visa)
  • Information gathered from interviews, role specific testing, and supporting statements

During the selection process Link will seek information from third parties as appropriate to the selection process for the post: 

  • when an applicant has advised they require a reasonable adjustment to participate in recruitment and selection process Link may seek independent medical advice from an Occupational Health provider to support making the appropriate reasonable adjustments;
  • when a selection process requires the use of a third party to process the assessment, information will be provided to them to undertake this service on our behalf.  

Link will seek information from the following third parties only once a job offer/contract for service has been made and verbally accepted and will inform you that it is doing so. Link may disclose your information as appropriate to third parties who act for us for the purposes set out in this notice including the following:   

  • former employers and/or referees to obtain references for you and as an employment/contract for service background check;
  • Pre-Employment Health Assessment Questionnaire is completed by you and sent directly to Link’s Occupational Health Provider for processing. The outcome of the assessment is shared with Link and if appropriate to the outcome of the initial assessment, further medical reports or assessments may be required with your consent; 
  • based on the legal requirement of the post you have applied for, if you are not already a member of the Disclosure Scotland PVG Scheme, you will be required to complete and return an application form to obtain necessary criminal records and disclosure checks at the time and for the duration of your appointment to the post;
  • based on the legal requirement of the post you have applied for, you may be required to complete a Disclosure Scotland criminal records and disclosure check at the time of appointment and every three years thereafter for the duration of your appointment to the post;
  • based on the requirements of the post you have applied for you may require a driving licence and, if necessary, have access to a roadworthy vehicle with the required insurance to drive for business purposes. If this is the case, then your details will be provided to a third party to undertake these checks on our behalf; 
  • based on the requirements of the post, Link may need to validate that you have the required qualifications and/or professional memberships from the issuing body in circumstances e.g. Scottish Social Services Council;  
  • if necessary, Link may need to seek advice from regulatory bodies on your legal right to work in the UK;
  • if necessary, Link may seek legal advice in relation to the processing of your application in relation to the recruitment, selection and vetting processes and outcomes. 

Link will not transfer your data outside the European Economic Area. 

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

Personal data

  • Your consent.
  • We have a contractual obligation.
  • We have a legal obligation.
  • We have a vital interest.
  • We need it to perform a public task.
  • We have a legitimate interest.

Special category data

  • Explicit consent
  • Employment, social security and social protection (if authorised by law)
  • Vital interests
  • Not-for-profit bodies
  • Made public by the data subject
  • Legal claims or judicial acts
  • Reasons of substantial public interest (with a basis in law)
  • Health or social care (with a basis in law)
  • Public health (with a basis in law)
  • Archiving, research and statistics (with a basis in law)

How we store your personal information

Data will be stored in a range of different places, including on your online careers portal account, application record, in HR management systems and on other IT systems (including email and SharePoint), occupational health provider’s portal and in secured locked cabinets within the HR Department. 

How long we keep your personal information

We review our data retention periods regularly and will only hold your personal data for as long as is necessary for the relevant activity, or as required by law (we may be legally required to hold some types of information), or as set out in any relevant contract we have with you.  We will generally keep your information for the following minimum periods after which this will be destroyed if it is no longer required for the reasons it was obtained. 

Data Retention

Data/Document Type 

Condition of Processing 

Retention Period 

Speculative CV’s and information provided by potential job applicants and/or recruitment agencies unrelated to a specific current vacancy.   

None applicable  

Destroyed on receipt. Vacancies are advertised on the careers portal and Link only accepts applications for a vacant position when advertised. 

Link Careers Portal – job applicant active profile account. 

Consent  

Legal basis of processing is consent therefore account will be active until requested to be closed by job applicant or it becomes inactive (see below).  

Link Careers Portal – job applicant – inactive profile account. 

Consent 

Closed after 2 years from last log-on if account is inactive.   

Unsuccessful job applicant data submitted in relation to a vacancy.  

Consent and 

Contractual  

7 months from the vacant post(s) being offered and accepted, unless there is a legal basis for retaining for a longer period. 

Successful job applicant data submitted in relation to a vacancy. 

Contractual  

Transferred to employee/worker personnel file. The periods for which your data will be held will be provided to you in a new privacy notice. 

Your rights

Your right of access

You have the right to ask us for copies of your personal information. 

Your right to rectification

You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Your right to erasure

You have the right to ask us to erase your personal information in certain circumstances. 

Your right to restriction of processing

You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

Your right to object to processing

You have the right to object to the processing of your personal information in certain circumstances .

Your right to data portability

You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. 

Please contact us at datamanagement@linkhaltd.co.uk if you wish to make a request. 

How to complain 

If you have any concerns about our use of your personal information, you can make a complaint to us at Link House, 2c New Mart Road, Edinburgh EH14 1RL or by email at datamanagement@linkhaltd.co.uk  

You can also complain to the ICO if you are unhappy with how we have used your data. 

The ICO’s address:             

Information Commissioner’s Office 

Wycliffe House 

Water Lane 

Wilmslow 

Cheshire 

SK9 5AF 

Helpline number: 0303 123 1113 

ICO website: https://www.ico.org.uk 

Stay Connected