Recruitment Privacy Notice
BUXTON COMMUNITY SCHOOL
GDPR Privacy Notice: Applicants to a new role
Who processes your information?
As part of Buxton Community School’s recruitment process, certain information needs to be collected so that your application can be considered. The following privacy notice informs you how the school intends to collect, use, process and store your data.
The School is the data controller, and it is responsible for any personal data that it is provided with. This means that the School determines the purposes for, and the manner in which, any personal data relating to any prospective staff member is to be processed. The School Data Protection Officer is: Jo Carr email: firstname.lastname@example.org or by phone on: 01298 23122.
The School Data Protection Officer's role is to oversee and monitor the School’s data processing practices. The school is the data controller, and it is responsible for any personal data that is provided to them. This means that they determine the purposes for, and the manner in which, any personal data relating to any prospective staff member is to be processed. The School Data Protection Officer can be contacted as above.
Where necessary, third parties may be responsible for processing personal information. Where this is required, the school places data protection requirements on third party processors in line with their own data protection requirements, to ensure data is processed in line with prospective staff members’ privacy rights.
Why do we need your information?
Buxton Community School has the legal right and a legitimate interest to collect and process personal data relating to its prospective employees to ensure the school’s safeguarding and safer recruitment protocols are upheld. We process personal data to meet the requirements set out in UK employment and childcare law, including those in relation to the following:
- Safeguarding Vulnerable Groups Act 2006
- The Childcare (Disqualification) Regulations 2009
- Keeping Children Safe in Education 2018
- Working Together to Safeguard Children 2015
- Individuals who are recruited will have their personal data processed to assist in the running of the School, and to enable individuals to be paid.
If prospective members of staff fail to provide their personal data, there may be significant consequences. These including the following:
- Failure to provide the school with ample proof of a right to work in the UK will prevent employment at Buxton Community School. Failure to complete a DBS application, will prevent employment at Buxton Community School.
- Employees found to be working illegally could face prosecution by law enforcement officers.
- Employees unwilling to provide two suitable referees may be prevented from employment at Buxton Community School.
- Employees unwilling to complete a medical questionnaire, could be unwittingly unsupported in the delivery of their duties.
- Failure to provide accurate tax codes and/or national insurance numbers could lead to issues of delayed payments or an employee paying too much tax.
- Failure to provide banking details may prevent timely payment of salary to employees.
For which purposes are your personal data processed?
In accordance with the above, personal data pertaining to prospective members of staff is used for the following reasons:
- Contractual requirements
- Employment checks, eg, right to work in the UK
- Salary requirements
- Reasonable Adjustment in working conditions
Which data is collected?
The personal data the School will collect from the prospective members of staff includes the following:
- Phone number
- Work history for example, previous employers and positions
- Compensation for example, basic salary or benefits
- Education and work history, including professional qualifications and skills
- References, including regulated references where necessary
- Nationality, visa, proof of right to work permit information including passport, driving licence, National Insurance numbers
- Photographs and images from recorded assessments
- Results of pre-employment screening checks for example, credit history, criminal records checks where permitted under local law
- Characteristics such as ethnic group
- Remuneration details
- Absence information
The collection of personal information will benefit both the DfE and LA by:
- Improving the management of workforce data across the sector.
- Enabling the development of a comprehensive picture of the workforce and how it is deployed
- Informing the development of recruitment and retention policies.
- Allowing better financial modelling and planning.
- Enabling ethnicity and disability monitoring.
- Supporting the work of the School’s teachers’ review body.
Will your personal data be sought from third parties?
Personal data is only sought from the data subject. No third parties will be contacted to obtain personal data pertaining to prospective members of staff without the data subject’s consent.
Prospective staff members’ personal data may be obtained and processed from third parties where the law requires the school to do so, eg, medical records from a GP. The categories of data obtained and processed from third parties include:
- Medical Records
- DBS – Criminal Records
Where data is obtained from third parties, the personal data originates from the following sources:
- Local GP
- Disclosure and Barring Service
- Previous Employers
- National College of Teaching
How is your information shared?
Buxton Community School will not share your personal information with any third parties without your consent, unless the law allows us to do so.
We are required, by law, to pass on some personal information to our LA and the DFE. This information is used so that relevant pre-employment checks can be made. This information can be found on certain documentation for example your passport. Documents required to perform pre-employment checks are:
- Your passport
- Your birth certificate
- Your most recent bank statement
- A biometric residence permit
How long is your data retained for?
Personal data is retained in line with the Derbyshire County Council’s Summary Guidelines of records, retention periods for schools.
Personal information may be retained for varying periods of time depending on the nature of the information; you will be informed on how long your data will be obtained by the School. Data will only be retained for as long as is necessary to fulfil the purposes for which it was processed and will not be retained indefinitely if there is no such reason for it to be.
Once your data has served its purpose it will be disposed of in line with the procedure outlined in the Derbyshire Council Summary Guidelines of records, retention periods for schools.
If you require further information regarding retention of data, and the periods for which your personal data is held for, please download the Derbyshire County Council guidelines from the school website policy section.
What are your rights?
As the data subject, you have specific rights to the processing of your data.
You have a legal right to:
- Request access to the personal data that Buxton Community School holds.
- Request that your personal data is amended.
- Request that your personal data is erased.
- Request that the processing of your data is restricted.
- Request to obtain and reuse your personal data for your own purposes across different services.
- Object to your consent being obtained
- Request that your personal data is collected using automated processing.
Where the processing of your data is based on your explicit consent, you have the right to withdraw this consent at any time. This will not affect any personal data that has been processed prior to withdrawing consent. You can withdraw consent by contacting the Data Protection Officer.
You also have the right to lodge a complaint with the ICO in relation to how Buxton Community School processes your personal data. If you wish to make a complaint to the ICO, you can do so on the ICO’s website or call their helpline on 0303 123 1113.
How can you find out more information?
If you require further information about how we store and use your personal data, please visit our website, the Gov.UK website, or download our Data Protection Policy and Derbyshire County Council Summary Guidelines.