JOB APPLICATION PRIVACY NOTICE
As part of any recruitment process, BlueLife Ltd and its Subsidiaries (Herein “BLL”) collects and processes personal data relating to job applicants. We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations.
1. What personal data do we collect?
Your data is stored in a range of systems and formats. These include in your recruitment file, in the organisations HR management system and in other IT systems, including the organisations email system.
BLL processes a range of information collected from you. This may include:
- your name, address and contact details, including email address and telephone number;
- your gender and date of birth;
- details of your qualifications, skills, experience and employment history, including start and end dates with previous employers;
- information about your current level of remuneration, including benefit entitlements;
- details of your marital status and dependents;
- your nationality and entitlement to work in Mauritius;
- candidate photographs.
High risk personal data
- Details of your bank account and national insurance number.
- Passport and driving license information.
- Whether or not you have a disability for which the organisation needs to make reasonable adjustments during the recruitment process.
- Where permitted by law, we may hold information from criminal record checks.
BLL may collect this personal data in a number of ways. For example, identity information might be collected through application forms, CV’s or resumes; obtained from your passport or other documents such as your driving license; from the correspondence with you; or through interviews, meetings or other assessments.
Personal data provided by third parties
The organisation will also collect personal data about you from third parties, such as references supplied by former employers, recruitment agencies or social media such as LinkedIn. The organisation will seek information from third parties only once a job offer to you has been made and will inform you that it is doing so.
2. Why do we process personal data?
Processing data from job applicants allows us to manage the recruitment process, assess and confirm a candidate’s suitability for employment and decide to whom to offer a job. In order to comply with Data Protection Laws, BLL need a lawful basis to process your Personal Data. We use the following lawful reasons to obtain and use your Personal Data.
BLL do not make use of Consent as a Lawful Basis to process Personal Data belonging to job applicants.
BLL needs to process your Personal Data to take steps at your request, prior to entering into a potential employment contract with you.
In some cases, the organisation needs to process data to ensure that it is complying with its legal obligations.
In other cases, BLL has a legitimate interest in processing Personal Data during and after the end of the recruitment process, including:
- Running the recruitment processes;
- Responding to and defending against legal claims;
- Maintaining and promoting equal opportunities within the workplace.
3. Who may have access to personal data?
Your information will be shared internally for the purposes of the recruitment exercise. This includes with members of the HR and recruitment team, interviewers involved in the recruitment process, managers in the business area with a vacancy, internal and external auditors and IT staff if access to the data is necessary for the performance of their roles.
The organisation will not share your data with third parties, unless your application for employment is successful and it makes you an offer of employment. The organisation will then share your data with former employers to obtain references for you.
BLL may share your personal data with third parties in order to, obtain pre-employment references from other employers, obtain employment background checks from third party providers and to obtain necessary criminal record checks.
BLL may shares your personal data with third-party processors who provide services to the organisation. These services include:
- Recruitment agencies;
- Employment and credit reference agencies;
4. How long do we hold your personal data?
If your application for employment is unsuccessful, we will hold your data on file for 5 years after the end of the relevant recruitment process. At the end of that period, your data is deleted or destroyed.
If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your personnel file and retained during your employment. The periods for which your data will be held will be provided to you in the Employee Handbook.
5. What if you do not supply your personal data?
You are under no statutory or contractual obligation to provide data to us during the recruitment process. However, if you do not provide the information, we may not be able to process your application properly or at all.
6. What are your rights and how to exercise them?
In accordance with applicable law and circumstances, you have the right to:
Request access to your personal information. This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
Request the transfer of your personal information to another party.
If you wish to exercise the rights listed above, please send a request to firstname.lastname@example.org or a letter to the following address: BlueLife Limited, 4th Floor, IBL House, Caudan, Mauritius.
In accordance with applicable regulation, in addition to your rights above, you are also entitled to lodge a complaint with the competent supervisory authority.
We will report any breaches of data held by us to the Data Protection Commissioner of Mauritius as required under the DPA 2017 (http://dataprotection.govmu.org), within seventy-two (72) hours of becoming aware of such a breach, which includes accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored or otherwise processed.
8. Changes to this policy
This Notice is governed by and shall be construed in accordance with the laws of the Republic of Mauritius. This Notice is written in the English language and may be translated into other languages. In the event of any inconsistency between the English version and the translated version of this Notice, the English version shall prevail.
10. How to contact us
This version is dated 20th of September 2019