2. General privacy notice
You will find the LDNPA’s General privacy notice on the Privacy and cookie notice page.
In the General privacy notice, you will find general information on how the LDNPA uses personal data.
Please read the following sections of the General privacy notice, as this Privacy Notice for job applicants is a supplement to it, specialising in our use of employees’ personal data:
- Section 2 Important information with all subsections.
- Section 4.1 Aggregated data.
- Section 6.1 Lawful basis with all subsections.
- Section 6.5 Change of purpose.
- Section 7 Disclosures of your personal data with all subsections.
- Section 8 International transfers.
- Section 9 Data security.
- Section 10 Data retention with all subsections.
- Section 11 Your legal rights with all subsections.
Please note that your legal rights under the UK GDPR are explained in detail in the General privacy notice.
3. Questions, complaints, and Subject Access Requests
If you want to:
- Ask questions about this privacy notice or our General privacy notice,
- Ask us what personal data we hold about you and ask about getting access to it (a Subject Data Request),
- Raise a complaint about our use of your personal data, or
- Otherwise comment on our use of your personal data,
please contact our Data Protection Officer in writing:
- Full name of legal entity: Lake District National Park Authority
- Data Protection Officer: Julie Wood, LDNPA Solicitor
- Email: Wood@lakedistrict.gov.uk (opens email)
- Postal address: LDNPA, Murley Moss, Oxenholme Road, Kendal, Cumbria, LA9 7RL
- Telephone Number: 01539 724555
4. Specific privacy notice
The rest of this document is a specific privacy notice for job applicants and supplements the General privacy notice referred to above.
4.1. The data we collect about you
We may collect, use, store, and transfer the following categories of personal data about you:
- Identity data, such as name, title, and date of birth.
- Contact data, such as addresses, telephone numbers, and personal email addresses.
- Other information related to your job application, such as details of your qualifications, skills, experience, and employment history; information about your current level of remuneration, including salary, annual leave, pension, and benefits entitlement; and information about your entitlement to work in the UK.
We may also collect, store and use the following more sensitive personal information:
- Equal opportunities monitoring information, including information about your ethnic origin, sexual orientation, health, and religion or belief.
- Whether or not you have a disability for which we will need to make reasonable adjustments during the recruitment process.
- Information about criminal convictions and offences.
4.2. How your personal data is collected
We typically collect personal information about job applicants through the application and recruitment process, either directly from you or, sometimes, from an employment agency or background check provider, and through interviews.
We may sometimes collect additional information from third parties, including former employers and occupational health providers, as well as from DBS checks. The Authority will seek information from third parties only after a job offer has been made and will inform you of this.
4.3. How we use your personal data
Purpose/activity
- Entering into and managing your employment with us.
- Making a decision about your recruitment or appointment.
- Checking you are legally entitled to work in the UK.
- Assessing qualifications for a particular job or task, as part of the recruitment processes.
- Making decisions about whether or not to employ you.
- Ascertaining your fitness to work.
- Complying with health and safety obligations.
- Administering and protecting our business.
- Dealing with legal disputes involving you.
- Preventing fraud.
Types of data
- Identity
- Contact
- Other information related to your job application
Lawful basis for processing
- Contractual obligation
- Legitimate interests
We have found that we have legitimate interests in using your personal data for the following purposes:
- Administering and protecting our business.
We have considered that the processing is necessary, that there isn’t a less intrusive alternative, and that your interests, rights, and freedoms don’t outweigh our legitimate interests.
We will use your particularly sensitive personal information in the following ways:
- Information about your physical or mental health, or disability status: to ensure your health and safety in the workplace, to assess your fitness to work, and to provide appropriate adjustments during the recruitment process.
- Information about your race or national or ethnic origin, religious, philosophical or moral beliefs, or your sexual orientation: to ensure meaningful equal opportunity monitoring and reporting.
We do not need your consent if we use special categories of your personal information in accordance with our written policy to carry out our legal obligations.
In limited circumstances, we may request your written consent to process certain particularly sensitive data. If we do so, we will provide you with full details of the information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent. You should be aware that it is not a condition of your contract with us that you agree to any request for consent from us.
We may only use information relating to criminal convictions where the law allows us to do so. This will usually be where using your information is necessary to carry out our obligations, only if this is in line with our data protection policy.
Less commonly, we may use information relating to criminal convictions where it is necessary in relation to legal claims, where it is necessary to protect your interests (or someone else’s interests), and you are not capable of giving your consent, or where you have already made the information public.
We may also process such information about employees or former employees in the course of legitimate business activities with the appropriate safeguards.
We do not envisage holding information about criminal convictions.
We will only collect such information if it is appropriate, given the nature of the role or task you have been asked to perform, and where we are legally able to do so.
4.4. If you fail to provide personal information
If you fail to provide certain information when requested, we may not be able to further your application through our recruitment process and, if you are successful, enter into a contract with you, or we may be prevented from complying with our legal obligations (such as checking a successful applicant’s eligibility to work in the UK before employment starts).
4.5. Automated decision-making
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.
We do not envisage that any decisions will be taken about you using automated means; however, we will notify you in writing if this position changes.
4.6. Disclosures of your personal data
Please see 7 Disclosures of your personal data in our General privacy notice, as this section supplements the general text.
The following needs to be added regarding the use of your personal data as a job applicant:
We may share your personal information with third parties
- where required by law,
- where it is necessary to administer the working relationship with you, or
- where we have another legitimate interest in doing so.
The following activities are carried out by third-party service providers:
- Employment background check providers.
- CRB check providers.
We may share your personal information with other third parties, for example, in the context of obtaining a reference. We may also need to share your personal information with a regulator or to otherwise comply with the law.
Job applications are submitted via a portal hosted by a data processor that acts only under our instructions.
4.7. For how long will we use your personal data?
Please see 10 Data retention in our General privacy notice, as this section supplements the general text.
The following needs to be added regarding the use of your personal data as a job applicant:
If you are unsuccessful in your application, the Authority will retain your data on file for 12 months after the end of the successful recruitment process before destroying it.
If your application for employment is successful, personal data collected during the recruitment process will be transferred to your personnel file and retained for the duration of your employment.
In some circumstances, we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
Once you are no longer an employee, we will retain your personal information and securely destroy it in accordance with applicable laws and regulations.
4.8. Your duty to inform us of changes
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your working relationship with us.
