GDPR

How we use personal data about individuals for recruitment purposes

OVERVIEW

This privacy notice describes how we at Harvest London (“Harvest London”, “we”, “us”) – as a data controller – collect and use personal data about you. Specifically, it applies to you (a “Candidate”, “you”) if you are applying for, or otherwise considered for a job at Harvest London using email, LinkedIn or other systems we use from time-to-time.

We process, manage, use, and protect Candidates’ personal data in accordance with this privacy notice for the purpose of managing the recruitment of people to Harvest London.

We are responsible for the processing of the personal data that Candidates contribute share, and for the personal data that we, in other ways, collect and use in LinkedIn, Notion and email.

If we decide to make you a written job offer, we will need to carry out our standard pre-employment screening checks about you. If you do receive a job offer, we will provide you with information about these checks then.

WHAT INFORMATION DO WE USE?

We need to collect, store, and use the following categories of personal data about you during the recruitment process using LinkedIn, Notion and email:

  • Name and contact details

  • Information about your previous experience and education that you include in your CV, cover letter, your LinkedIn profile, and any other documents that you provide in the application process.

  • Application information (including interview notes and any written test records).

  • Only personal data that is relevant for the recruitment process is collected and processed by us.

HOW IS YOUR PERSONAL DATA COLLECTED?

We collect personal data about you in the following ways:

  • when you make an application to Harvest London through LinkedIn or other means, adding personal data about yourself either personally or by using a third-party source such as LinkedIn or Twitter; and

  • as part of any interviews you have with us

In some cases, existing Harvest London employees can make recommendations about potential candidates. Such employees may add personal data about such potential candidates via email or Notion. In these cases, the potential candidate is considered a Candidate in the context of this privacy notice and will be informed about the processing if we contact them about a vacancy at Harvest London.

WHAT IS THE LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATA?

We use Candidates’ personal data for managing the recruitment of people to Harvest London.

Given the nature and sources of Candidates’ personal data, we rely on our legitimate interests to use personal data for these purposes.

STORAGE AND TRANSFERS

The personal data collected through Lever is stored and processed inside the EU/EEA.

If we need to transfer your personal data outside the EU/EEA, we will only do so where: (a) the country or territory to which we transfer the personal data has been considered by the European Commission to have an adequate level of data protection; and/or (b) the personal data will be processed by third parties that have entered into appropriate arrangements that guarantee adequate safeguards are in order to protect the rights of the data subjects whose data is transferred. For further information, please contact our HR team.

HOW LONG WILL YOU USE MY PERSONAL DATA FOR?

We will retain personal data obtained in the recruitment process for two years from the date when a Candidate contacts us, or from the date when a Candidate is sourced or otherwise referred to us.

Following the expiry or any retention permission, we will securely delete all your personal data and retain only a record of the date of your application.

If you are successful, and become an employee, we will retain your personal data in accordance with the privacy notice that applies to our employees, a copy of which will be provided to you.

DATA SECURITY

We have appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data only to those involved in the hiring process at Harvest London and have access to our email system, Notion and LinkedIn account.

Transfers of information over the internet and mobile networks can never occur without any risk, so all transfers are made on the own risk of the person transferring the data. It is important that Candidates also take responsibility to ensure that their data is protected. It is the responsibility of the Candidate that their login information is kept secret.

WHAT ABOUT THIRD PARTIES?

We may need to share Candidates’ personal data with a regulator or to otherwise comply with the law. We will not sell or otherwise transfer Candidates’ personal data to third parties other than as set out below. In all cases, we will only transfer Candidates’ personal data to third parties that we have confidence in. We will carefully choose partners to ensure that Candidates’ personal data is processed lawfully.

YOUR RIGHTS

Under certain circumstances, by law you have the right to:

·     Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

·     Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

·     Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).

·     Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes.

·     Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.

·     Request the transfer of your personal data to another party.

·     Complain You also have the right to make a complaint (at any time) to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee or we may refuse to comply if your request for access is clearly unfounded or excessive.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

It is important that the personal data we hold about you is accurate and current. Please keep us informed, via email or otherwise, if your personal data changes during the application process.