Fair processing notice for job applicants on handling of personal data

Data protection legislation regulates the way in which certain data about yourself (received as part of applying for employment with the RSM), both in paper and electronic form is used and held. The Society is registered with the information Commissioner’s Office and fully complies with the requirements placed on it as a ‘data processor’.

The following statement describes the type of data that the RSM keeps about job applicants and the purpose for which it is kept and your rights under the GDPR related to data processed about you, should you apply to work for the RSM. This applies whether your application is received direct by the RSM or via an agency.

From the point at which we receive your application for employment with the Society, the Society will need to maintain and process data about you for the purposes of reaching and communicating a recruitment decision and production of an offer of employment if appropriate. Such data is normally retained for six months following completion of our recruitment processes in the event of an offer of employment not being made.

Should an offer be made a further fair processing notice will be provided alongside any offer covering how such data is used and stored during the processing of offers and subsequent employment.

Processing at the recruitment stage includes the collection, storage, retrieval, alteration, disclosure or destruction of data. The kind of data that the Society will process includes:

  • Interview details including notes of interviewers, dates and times
  • Candidate’s work history
  • Qualifications and experience relevant to the role
  • Ethnic origin (for monitoring purposes only)
  • Disabilities (for monitoring and adjustments only)
  • Date of birth (for post employment health checks and adjustments advice only)
  • Contact details, including addresses, phone numbers and other contact details including historical address records for staff vetting and ID verification
  • Criminal records (only where relevant to role and where legally permitted)
  • Court judgements and directorships (only where relevant to role and where legally permitted)
  • References provided by previous employers and personal or educational referees
  • National insurance number
  • Rights to work information for example copies of passports, ID cards, residence permits
  • Documents to confirm identity and address for example the above and utility bills, bank statements

The Society believes that those records are consistent with the recruiter, candidate and in the event of an offer being made, employer relationship between the Society and yourself and with our requirements under data protection legislation.

The data the Society holds may be held and processed to meet the Society’s legal responsibilities and also for the purposes of management and administration of an offer of employment, ascertaining suitability for employment, to comply with equal opportunity, immigration and money laundering legislation and, from time to time, the need to disclose data it holds about you to relevant third parties (or example where legally obliged to do so by HM Revenue and Customs, UK Border or other public authority, or where requested to do so by yourself for the purpose of giving a reference).

The Society may also share this data with selected third parties, under agreements which strictly govern the use the third party may make of the data, to facilitate the above uses including our nominated occupational health advice provider and our nominated staff vetting provider. In some cases, the Society will use automated profiling methods to analyse the above data, including against standard industry benchmarks, but will not use such methods as the sole basis for any related decision making.

In some cases the Society may also hold sensitive data, as defined by the legislation, about you. This could be information about health, criminal convictions and financial debts and directorships.

If you wish to view the information held about you, you must make a written request to the Finance Director at mark.johnstone@rsm.ac.uk . You may, within a period of thirty days of your written request, inspect and/or have a copy (subject to the requirements of the legislation) of information held about you and, if necessary, require corrections should such records be faulty.Your rights under the GDPR also include the following:

  • The right to rectification
  • Right to erasure (sometimes known as the right to be forgotten)
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights in relation to automated decision making and profiling

Should you have any complaints regarding the handling of your data you have the right to lodge a complaint with Mark Johnstone the RSM’s Data Protection Officer using the contact details below.

Mark Johnstone, Finance Director
1 Wimpole St, London
Tel: 0207 290 2910