Recruitment: Candidate Data Protection Notice
As part of our candidate application and recruitment process Ecojet Airlines Limited, “Ecojet” collects, processes and stores personal data about you. Personal data is any data or information from which an individual can be identified or data which when mixed with other information held about the same individual would make it obvious as to who the subject of the data is. Examples of personal data include name, address, telephone number and employment history.
We may also collect, process and store special category data about you. Special category data includes, for example, information about an individual’s health, racial or ethnic origin, religious or philosophical beliefs, biometric data (where it is used for identification purposes) or sexual orientation. We will only process this where it is necessary, and any processing will be done in accordance with our obligations under relevant UK data protection legislation.
Ecojet is committed to being transparent about how it uses your data and meets its UK data protection obligations. This Privacy Notice sets out:
Why we process your data;
What data we might process; and
How your data is processed as part of the candidate application and recruitment process e.g. protected, retained and shared with.
Throughout this Notice we use the term “processing” to cover all activities involving your personal data, including collecting, handling, storing, sharing, accessing, using, transferring and disposing of the data.
1 Why we process your data
In order to manage your application, we need to process certain data about you. Ecojet must have a legal basis for processing your personal data and special categories of your personal information may only be processed where an additional lawful basis applies. We will process your data for the purposes of progressing your application as required by law or regulatory requirements, so not all of the purposes for which we process your personal data will apply to you all of the time. Ecojet’s processing will always be fair and lawful and in accordance with applicable UK data protection legislation. In summary:
We may need to process data to take steps at your request prior to entering into a contract with you. We may also need to process your data to enter into (and comply with our obligations under) a contract with you;
In some cases, we need to process data to ensure that we are complying with our legal obligations; for example, it is mandatory to check a successful applicant’s eligibility to work in the UK before employment starts;
Ecojet has a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from job applicants allows us to manage the recruitment process, assess and confirm a candidate’s suitability for employment and decide to whom to offer a job;
We may also need to process data from job applicants to respond to and defend legal claims;
Ecojet may process special categories of data, such as information to monitor recruitment statistics and to comply with legal obligations in relation to equality and diversity. We may also collect information about whether or not applicants are disabled in order to make reasonable adjustments for candidates who have a disability in accordance with legal obligations in relation to equality; and
We will also process your personal data to comply with obligations and exercise specific rights in relation to employment, social security and/or social protection.
2 What data we might process
We may collect, store, and process the following categories of information:
Personal details such as name, address (including proof of address), date and place of birth, telephone number(s);
Work history/job data: previous employers, positions, dates;
Remuneration: basic salary, benefit entitlements, bonuses;
Education and work history including professional qualifications, skills and/or memberships;
References to include regulated references where necessary (this could include absence information received from referees);
Nationality/visa/right to work information (e.g., passport/driving licence/national insurance numbers/birth certificate/evidence of name or gender change);
Results of pre-employment screening checks (e.g., credit history and criminal records checks where permitted by law);
Notes from interviews and/or assessment results e.g., psychometric test or written assessment results;
Bank account details for salary payment purposes (if successful); and
Images from onsite CCTV and audio recordings of telephone interviews (if relevant).
During the process we may also capture some special category data about you (e.g. disability information), in order to make reasonable adjustments (to enable our candidates to apply for jobs with us, take online/telephone assessments, attend interviews/assessment centres, prepare for starting at Ecojet if successful, and to ensure that we comply with regulatory obligations placed on us with regard to our recruitment) and to allow us to complete pre-employment checks.
In very limited circumstances, we may approach you for your explicit consent to allow us to process certain particularly sensitive data. If we do, we will provide you with full details of the information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent.
3 Who we share your data with
Ecojet will need to share your personal data internally and may require to share it with some external third parties (e.g. Credit Reference Agencies) or associates of Ecojet. Your information will only be shared if it is necessary or required and permitted by law (eg. in order to carry out pre-employment screening).
The recruitment process will involve:
Assessing and progressing your application;
Assessing your suitability (e.g. skills, experience, and behaviours for the role); and/or
Activities needed to complete the on-boarding and screening process should your application be successful.
To enable these processes your personal data may be shared internally, but the information shared is limited to what is required by each individual to perform their role in the recruitment process: For example, your personal data may be shared internally with:
Employees who would have managerial responsibility for you or are acting on their behalf;
Employees in Human Resources (HR) who have responsibility for certain HR processes (for example recruitment, assessment, pre-employment screening (including checking whether applicants have a student loan and/or arrears);
Employees in Legal, Risk, HR, Counter Fraud with responsibility for investigating issues of noncompliance with laws and regulations, policies and contractual requirements;
Employees in Information Technology (IT) who manage user access;
Employees in compliance and audit functions in relation to specific audits/investigations; and
Employees in Estates/Facilities.
Ecojet may also need to share your data with certain external third parties or associates including:
Companies who provide candidate interview and assessment services to Ecojet;
Suppliers who undertake background screening on behalf of Ecojet (credit checking agencies, criminal checking bureaus, etc.);
Academic institutions (Universities, colleges, etc.) in validating information you’ve provided; and
Other third-party suppliers (or potential suppliers) who provide services on our behalf.
4 Pre-employment checks
Given the nature of our business, we have legal and regulatory obligations to ensure that the people we employ can be relied on to handle customer information responsibly. As part of the selection process, Ecojet uses third parties to perform a number of pre-employment checks (reference, criminal record and credit reference; for example, credit reference agencies will supply us with information that will assist us with our recruitment decision. The agencies will record details of the search but will not make them available for use by lenders to assess your ability to obtain credit. You have the right of access to your personal records held by credit reference agencies). These pre-employment checks are only performed on candidates who have been selected for a role. We provide the third parties with your name, address and email address; they will then contact you direct in advance of carrying out the checks. We can supply the names and addresses of the third parties we use upon request. We will also check whether an applicant has a student loan and/or arrears.
5 How we protect your information
We have in place appropriate organisational and technical (security) measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. This is done in accordance with Ecojet’s Electronic Information and Communications Systems policy.
6 How long Ecojet keeps your data
If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your Human Resources file and retained for 6 months. If successful, our Employee Privacy Policy will then apply to you.
You may be asked when you submit your CV, whether you give us consent to hold your details in order for you to be considered for other positions.
7 Your duty to inform us of changes
It is your responsibility to keep your personal data up to date so that accurate application records can be maintained. If you need to make any changes to your personal data once you have submitted your application, then you should contact Ecojet’s People Team.
8 Your rights of access, correction, erasure, and restriction
Your rights in relation to your personal information are summarised below.
If you want to exercise any of these rights, please write to the Data Protection Officer at data.protection@ecojetair.com . Please note that we may need to request specific information from you to help us confirm your identity and ensure that we comply with the right you are exercising. We are obliged to comply with any such requests within one month. This may be extended by an extra two months if we consider the rectification request to be complex.
8.1 Request access to your personal information:
You have a right to have access to the personal information which we hold about you, subject to certain limitations - this is referred to as a data subject access request, or DSAR. Visit https://www.gov.uk/government/publications/data-subject-access-request for more information if you wish to exercise this right.
8.2 Request correction of your personal information:
You have a right to have your personal information corrected, or rectified, if it is inaccurate or incomplete. If you become aware that any of the data which we hold about you is inaccurate, you should contact us as soon as practicable. You must notify us immediately on becoming aware of any change of circumstances which require changes to be made to any of the personal information which we hold about you.
8.3 Request erasure (or deletion) of your personal information:
You have a right to request the deletion or removal of your personal information where there is no compelling reason for its continued processing. Your right to make such a request will arise in specific circumstances, for example, where data is no longer necessary for the purpose for which it was collected or where you withdraw your consent for processing your data (and this is the sole basis on which your data is processed). If you would like to exercise this right, you must submit a written request specifying the information which you wish deleted. We will then consider this request in accordance with our obligations under UK data protection laws.
8.4 Request the restriction of processing of your personal information:
You have a right to block or suppress the processing of your personal information in certain circumstances. If for example you contest the accuracy of the personal data, processing may be restricted until the accuracy of the personal information has been verified. This may also apply where you contest that the processing is unlawful. If you would like to exercise this right, you must submit a written request specifying the information on which you would like us to impose a processing restriction.
8.5 Request the transfer of your personal information to another party:
You have a right to obtain and re-use your personal information for your own purposes across different services – this is referred to as the right to data portability. This allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way. If you would like to exercise this right, you must submit a written request to specifying the information which you wish to be transferred. Where the right applies, we are obliged to comply with any such request within one month.
8.6 Object to us processing your personal information:
You have the right to object to the processing of your personal data if it is based on the performance of a task carried out in the public interest. If you would like to exercise this right, you must submit a written request outlining the grounds upon which you object. We will consider any request in accordance with our obligations under UK data protection law.
8.7 Right to Withdraw Consent:
In the limited circumstances where you may have provided your consent to us processing your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please see the relevant contact numbers listed on page one of this Notice. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we are required to do so by law, or have another legitimate basis for doing so in law.
9. What if you do not provide any data
You are under no statutory or contractual obligation to provide personal data to Ecojet during the recruitment process, however, if you do not provide all of the information we require, we may not be able to process your application properly or at all.
10. Data Protection Officer and the Right to Complain
We have appointed a Data Protection Officer (“DPO”) to oversee compliance with this Notice. If you have any questions about this privacy notice or how we handle your personal information, please contact the DPO at data.protection@ecojetair.com You also have the right to make a complaint at any time to the Information Commissioner’s Office (“ICO”), the UK supervisory authority for data protection issues about the way in which we process (or have processed) your personal information. You can contact the ICO by writing to:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF
Email: icocasework@ico.org.uk
Telephone: 0303 123 1113
11. Changes to this Notice
We reserve the right to update this Notice at any time. We may also notify you in other ways from time to time about the processing of your personal information.
Last updated:
2 September 2024