Candidate Privacy Notice

What is the purpose of this document?

This privacy notice describes the ways in which we collect and use your data when you apply for a role with us, or other ways we will engage with you about a vacancy.

CAV Systems Group is a data controller, which means we are responsible for deciding how we hold and use personal information about you. CAV Systems Group is made up of different legal entities. This privacy notice is issued on behalf of the CAV Systems Group so if we mention “CAV Ice Protection Limited”, “CAV Advanced Technology Limited”, “we”, “us” or “our” in this privacy notice, we are referring to the relevant company in the CAV Systems Group of companies responsible for collecting and/or processing your personal data. Each entity is the controller of the personal data.

Data protection principles

We comply with data protection law and principles which ensure that your personal information will be:

  • Used lawfully, fairly and in a transparent way
  • Collected only for the purposes of progressing your application
  • Kept only as long as necessary
  • Kept securely

What kind of information do we hold about you?

While assessing your application for employment, we will collect, store and use the following:

  • Information you have provided in your CV and covering letter
  • Information you have provided in the application process, including (but not limited to) name, title, address, telephone number, email address, date of birth, gender, employment history, qualifications, employment references and information regarding your right to work in the UK
  • Information you provide during an interview
  • We may also process the following special categories of personal data:

Information you may voluntarily submit about any self-declared disabilities that we would need to make reasonable adjustments for to support your application and any future possible employment.

How will we use information about you?

We will use the information you provide to:

  • Communicate with you about the recruitment process
  • Assess your skills, qualifications and suitability for the role
  • Keep records relating to our recruitment and selection processes
  • Comply with legal/regulatory requirements

 

Legal basis of processing

Our legal basis for processing is set out below in relation to:

  • personal data we process as part of our “right to work” checks, we process this because we are legally required to.
  • sensitive personal data, we process this as permitted by employment laws.
  • all other uses of your personal data set out in this notice, we process this because it is in our “legitimate interests” to do so.

Our legitimate interests are:

operating a fair and transparent recruitment process
recruiting and retaining the right candidates
ensuring candidates have the right skills and experience for any given role
resolving any complaints in a fair and transparent manner

Data sharing

Why might you share my personal information with third parties?

We may share your personal data with government agencies, regulatory bodies and law enforcement agencies where we are obligated to by law.

Data retention

How long will you hold my personal data?

If your application is successful, personal information you have provided during the application process will be kept in your employee file for the duration of your employment plus 6 years following the end of your employment.

If your application is unsuccessful, personal information you have provided will be retained for 6 months from the end of the recruitment campaign. We retain your personal information so that in case of a legal claim, we can demonstrate that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way. After this period, we will securely destroy your personal information.

How we protect your personal data?

We know how important it is to protect and manage your personal data and have the following measures in place to do this:

  • We use computer safeguards such as firewalls and data encryption.
  • We enforce physical access controls to our buildings and files to keep this data safe, such as access cards and key control.
  • We only authorise access to colleagues who need it to carry out their job responsibilities.
  • We may ask for proof of identity before we share your personal data with you.

Your rights

Under certain circumstances, by law you have the following rights to:

  • Request access to your personal information.
  • Request correction of personal information we hold about you.
  • Request erasure of your personal information when you withdraw consent or there is no legal reason for us to continue to process it.
  • Object to processing of your personal information where we are relying on legitimate interest.
  • Request the restriction of processing your personal information if you wish to establish its accuracy or the reason for processing it.
  • Request the transfer of your personal information to another party.

If you would like to exercise any of these rights, please email dataprotection@cav-systems.com.

Right to withdraw consent

In the limited circumstances where you may have provided your consent for processing your personal information, you have the right to withdraw your consent any time. To withdraw your consent, please email dataprotection@cav-systems.com.

Once we have received notification that you have withdrawn consent, we will stop processing your personal information unless we have another legal basis for doing so.

Your duty to inform us of any changes

It is important that the personal information we hold about you is accurate and complete. Please inform us promptly if your personal information changes.