Recruitment privacy notice

Everything we do with information about people, has to comply with the Data Protection Act 2018. A key part of this is being open about how we use information and what rights you have in respect of information we collect and hold about you during the recruitment process.

When you first contact us to request information about a job or register your details to receive job alerts by email (so that you can decide whether or not to make an application) we will ask for your consent to process the information.

However, if you apply for a job we will rely on legal reasons and legitimate interests in processing personal data.

The information on this page explains how East Cambridgeshire District Council will use your personal information when you apply for work with us, during the recruitment process and subsequently if you become an employee. This includes how we collect, process and share it. It also describes how long information is kept and the circumstances in which we might disclose it to a third party.

As part of every recruitment process, East Cambridgeshire District Council collects and processes personal data relating to job applicants. This will include:

  1. Your name, address and contact details which may include email address, telephone number as well as date of birth
  2. Details of your qualifications, skills, experience, employment history, other relevant experience and achievements
  3. Information about your current level of remuneration
  4. Whether or not you have a disability for which the organisation needs to make reasonable adjustments during the recruitment process
  5. Proof of your entitlement to work in the UK
  6. Equality monitoring information, including information about your gender, ethnic origin, sexual orientation, age, health and religion or belief
  7. Employment references
  8. The outcome and results of any interviews or tests which formed part of the recruitment process
  9. Pay details, national insurance number, tax coding and details of the bank or building society account
  10. Photographs used during a recruitment exercise and for building access passes

We collect this information in a variety of ways. For example, data might be contained in application forms, CVs or resumes, obtained from your passport or other identity documents, or collected through interviews or other forms of assessment, including tests and/or online tests.

We will also collect personal data about you from third parties, such as references supplied by your former employers, information from employment background check providers and information from criminal records checks.

Data will be stored in a range of different places, including on your application record, in electronic HR Management Systems and on other IT systems (including email).

Why does East Cambridgeshire District Council need to process personal data?

East Cambridgeshire District Council needs to process data during the recruitment process and to make offers of employment to each successful candidate. We also needs to process your data to enter into a contract with you. In some cases, we need to process data to ensure that we are complying with our legal obligations. For example, we are required to check a successful applicant's eligibility to work in the UK before employment starts.

East Cambridgeshire District Council has a legitimate interest in processing personal data during the recruitment process and for keeping records of the process.

Processing data from job applicants allows us to manage the recruitment process, evaluate a candidate's suitability for employment and decide to whom to offer a job.

We may also need to process data from job applicants to respond to and defend legal claims.

Where we rely on legitimate interests as a reason for processing data, we have considered whether or not those interests are overridden by the rights and freedoms of employees or workers and has concluded that they are not.

East Cambridgeshire District Council processes health information if it needs to make reasonable adjustments to the recruitment process for candidates who have a disability. This is to comply with its legal obligations and exercise specific rights in relation to employment.

Where we process other special categories of data, such as information about gender, ethnic origin, sexual orientation, health or religion or belief, this is for equality monitoring purposes.

For some roles, East Cambridgeshire District Council is obliged to seek information about criminal convictions and offences. Where we seek this information, we do so because it is necessary for us to comply with our legal obligations and exercise specific rights in relation to employment. We will not use your data for any purpose other than the recruitment exercise for which you have applied.

If your application is unsuccessful, we will only keep your personal data on file for the purpose of considering you for other suitable vacancies, if you provide your consent to do so.

You are free to withdraw your consent at any time.

How we use Personal Information

We will request your initial consent to process the personal data that you supply when you first apply for work with East Cambridgeshire District Council.

However, after this point we will rely on legal and legitimate interests as reason for your processing data.

Whenever we use information, we will always limit this to only what is needed and ensure that it is used safely and securely. We require anyone we share information with, or who uses it on our behalf, to do so too.

Who has access to data?

Your information will be shared internally for the purposes of the recruitment process and only be accessed and processed by authorised personnel for the performance of their duties (i.e. the HR team and Line Managers in the service area with the vacant post(s), and IT staff if access to the data is necessary.

East Cambridgeshire District Council will not share your data with third parties, unless your application for employment is successful and we make you an offer of employment. We will then share your data with:

  1. Former employers to obtain references for you.
  2. Employment background check providers to obtain necessary background checks e.g. Occupational Health (if applicable).
  3. Disclosure and Barring Service to obtain necessary criminal records checks (if applicable).

We will not transfer your data outside the European Economic Area.

The only exception to this will be for International Recruitment when your data may be transferred outside the European Economic Area (EEA) as part of the recruitment process, in order to conduct the necessary checks to employ you and to comply with other legal and Home Office requirements.

Any such processing will be carried out strictly in accordance with UK and EU privacy legislation.

How does East Cambridgeshire District Council protect data?

East Cambridgeshire District Council takes the security of your data seriously and has a range of robust policies, processes and technical measures in place to safeguard personal information.

Access to systems that hold employment related information is restricted to authorised personnel through the use of unique identifiers and passwords.

Your information is stored on systems that are protected by secure network architectures and are backed-up on a regular basis (to a second secure location) for disaster recovery and business continuity purposes; and to avoid the risk of inadvertent erasure or destruction.

How long does East Cambridgeshire District Council keep data?

We only keep information for as long as it is needed.

If your application for employment is unsuccessful, East Cambridgeshire District Council will hold your data on file for 12 months after the end of the relevant recruitment process (in exceptional circumstances, we may need to retain your record for a further duration in order to comply with Home Office requirements). At the end of that period, your data will be deleted or destroyed.

If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your HR file and retained during your employment with us.

Third party processing

East Cambridgeshire District Council will occasionally use third party suppliers and service providers, for example employment agencies, who provide specialist services. These third parties will process applicant information in accordance with our instructions and make decisions regarding the information as part of the delivery of their services. They are also required to put in place appropriate security measures that ensure an adequate level of protection for personal information.

What rights do you have?

You have a number of rights relating to the data we hold about you. These include the right to:

  1.  Access (to obtain a copy of your personal data, on request)
  2. Rectification (to request inaccurate or incomplete data be corrected)
  3. Erasure (to request that your data is deleted)
  4. Restrict processing (to request that we stop or do not use your data in a certain way)
  5. Portability (in some cases, you can ask to receive a copy of your data in a commonly-used electronic format so that it can be given to someone else)
  6. Object (generally to make a complaint about any aspect of our use of your data)

Ask the organisation to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override the organisation's legitimate grounds for processing data.

If you have any questions or comments about this privacy notice please email, or write to The Data Protection Officer, The Grange, Nutholt Lane, Ely, Cambs, CB7 4EE.

If you believe that the organisation has not complied with your data protection rights, you can also complain to the Information Commissioner.

What if you do not provide personal data?

You are under no statutory or contractual obligation to provide data to East Cambridgeshire District Council during the recruitment process.

However, please be aware that if you decline, it will not be possible for your application to progress as we will be unable to process the data needed to do this.