We are committed to protecting the privacy and security of candidates’ personal data. This privacy notice describes how we collect and use personal data about you during and after the recruitment process in accordance with the General Data Protection Regulation (GDPR).
Take the next step
What is the purpose of this privacy notice?
Skipton Building Society is a Data Controller, which means we decide how we process your personal data. Here we let you know what that involves and aim to answer many of your questions. If there is anything we haven’t covered, please contact our People Team on HR@skipton.co.uk in the first instance.
You can also contact our Data Protection Officer at DPO@Skipton.co.uk or by writing to Data Protection Officer, Skipton Building Society, The Bailey, Skipton, North Yorkshire, BD23 1DN.
As a data controller, we are responsible for deciding:
Under the GDPR, we are required to notify you of points 1 to 4 above.
The types of personal information we may collect and hold about you
Personal data means any information about an individual from which that person can be identified. Personal data does not include anonymous data. The categories of personal data we may collect and hold about you may include:
We may also collect, store and use the following special categories of more sensitive personal data, which could include:
How is your personal data collected/how we use it?
Where is your personal data stored?
Your personal data will be stored securely in a range of different places, including in our recruitment files, in our HR system, and in other IT systems (including our email system). This may include third party firms who we authorise to process personal data on our behalf.
Why is your personal data processed?
Under the GDPR, a data controller should only collect your personal data if it has a valid purpose for doing so that falls into one of the prescribed categories set out in the GDPR. The purposes for which we process your data are set out below.
If you have any questions as to why we hold any type of personal data about you, please contact the People Team or the DPO using the contact details above.
Who has access to your data?
Your information will be shared internally for the purposes of the recruitment exercise. This includes members of the People Team, relevant hiring managers and interviewers involved in the recruitment process, and IT staff if access to the data is necessary for the performance of their roles.
Skipton Building Society will only share your data with third parties for the purposes of assessing your application for employment. This will be with authorised third parties that have been engaged by Skipton Building Society such as, external consultants, recruitment agencies etc. If you are successful in your application and we make an offer of employment, we will ask for your nominated referees and contact them in order to obtain references for you and we will use your name within that correspondence, and we will contact a credit reporting agency to undertake necessary credit referencing checks.
Is my data secure?
We take the security of your data very seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed without authorisation, and is not accessed except by our employees/authorised third parties in the performance of their duties.
Where we engage third parties to process personal data on our behalf or we share personal data with third parties, those third parties do so on the basis of written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
How long do you retain my data for?
We will not hold your personal data longer than we need it. If unsuccessful, we keep your specific information related to an application for the duration of the recruitment process plus an additional 6 months thereafter. Your online applicant account will remain live for 18 months if not accessed and will then be closed but anonymised rather than deleted in order that we can continue to report on historical activity.
If you are successful in your application, information collected as part of the recruitment process will be transferred to your personnel file and retained during your employment. Our Colleague Data Privacy Notice available to all employees details how long we will retain your employee data upon leaving employment.
You also have the following rights when it comes to our handling of your data:
If you would like to exercise any of these rights, please contact our People Team using the contact details above.
If you fail to provide personal data
You are under no statutory or contractual obligation to provide data to Skipton Building Society during the recruitment process. However, if you do not provide the information, we may not be able to process your application properly or at all. If your application is successful, it will be a condition of any job offer that you provide evidence of your right to work in the UK and satisfactory references.