INFORMATION NOTICE REGARDING THE PROCESSING OF CANDIDATES’ PERSONAL DATA
IN ACCORDANCE WITH THE UK GENERAL DATA PROTECTION REGULATION (UK GDPR) / DATA PROTECTION ACT 2018
Data Controller
Your personal data provided is processed by Saipem Ltd, Saipem House, 12-42 Wood Street, Kingston Upon Thames, Surrey, KT1 1TG and Tern Place, Bridge of Don, Aberdeen, AB23 8JX. E-mail address: sltdprivacy@saipem.com. Also referred to as "Company" or "Controller" below.
Personal Data Processed
Please note that all personal data will be processed in accordance with the Data Protection Act 2018. Therefore the Company undertakes to process your personal data in accordance with the principles of fairness, lawfulness and transparency, in compliance with the purposes set out below. The Company will process your personal data only for specified and necessary purposes. Only authorised and properly trained personnel will be allowed to access and process your personal data.
In particular, the Company will collect, record, and generally process your personal and identifying data provided in the CV and during the recruitment process which are necessary for the selection and recruitment process.
The Company may also collect, record and process special categories of more sensitive personal information including information about your physical and mental health (such as medical conditions).
Personal data is collected from you, the data subject, during the recruitment process. It may also be acquired through third parties (e.g. registered professionals such as recruitment agencies).
Purposes and Lawful Basis for the Processing of Your Personal Data
The Company needs to use your personal information in order to process your application for a job or application for a work experience placement. In most cases we will use your personal data to perform our pre contractual/assignment measures taken at your request, to comply with our legal obligations or where we need to in order to further the Company’s legitimate business interests. The situations in which we commonly use your personal data include:
- Carrying out our selection and recruitment procedures
- Determining employment/assignment terms
- Implementing health and safety and security measures
- Monitoring CCTV records and physical access to our offices and worksites via ID badges and key cards
The Company’s legitimate business interests include:
- Making decisions about employment or engagement
- Recruitment and succession planning
- Ensuring compliance with our policies
- Ensuring health and safety in the workplace
- Protection of Company and third party property
- Dealing with enquiries from authorities, regulators and public bodies and managing legal disputes involving you or other personnel.
The Company may process “special categories” of your personal data (e.g. relating to your health) in the following circumstances:
- Where we need to carry out our legal obligations or exercise rights in connection with employment. The processing of personal data is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment or for the establishment, exercise or defence of legal claims;
Situations where we may use your personal data relating to physical and mental health include where we aim to ensure health and safety at work and assess your fitness to work and to provide appropriate adjustments.
Retention period of data
The Company will keep your personal data for no longer than is reasonably necessary and will act in line with GDPR/Data Protection Act 2018. The data will then be destroyed or anonymised in line with technical erasure and backup procedures.
What this means in practice will vary as between different types of information, and when we consider our approach we take into account any ongoing need for the information, as well as our legal obligations for example in relation to tax, health and safety, employment rights and potential or actual disputes or investigations.
Way of processing and provision of data
The processing will be carried out in digital and/or traditional form, with methods and tools aimed at ensuring maximum security and confidentiality (where appropriate), by persons specifically appointed for this purpose.
The Company does not conduct any automated decision making.
Recipients and data transfer
The Company may communicate personal data to other recipients from time to time, as described in detail below:
- Saipem Group companies – Personal data may be shared with group companies for the purposes set out above and to ensure the provision of effective and efficient services and communication throughout the group, including outside the EU.
- Third parties (such as, consultants, recruitment companies, companies providing IT services, service providers, business partners, clients, project partners and joint ventures, – this includes those third parties not located within the EU who carry out outsourcing activities on behalf of the Controller, in their capacity as data processors.
- Judicial authorities – as well as those recipients to whom disclosure is required by law. These subjects will process the data in their capacity as independent Data Controllers.
The transfer of data to countries outside the EU is only done where there are adequate safeguards in place. Adequate safeguards may take the form of ‘adequacy decisions’ about certain jurisdictions issued by the European Commission, or standard model clauses (approved by the European Commission) which govern the transfer of personal data.
Data Subjects rights
Data Subjects have the following rights:
- To be informed: you have the right to be provided with clear, transparent and easily understandable information about how we use your personal information;
- To have access to your personal data: you can request access to your personal information, subject to certain conditions;
- To rectification: you may challenge the accuracy or completeness of your personal data and have it corrected or completed, as applicable. You have a responsibility to help us keep your personal information accurate and up to date;
- To erasure: subject to certain conditions, you are entitled to have your personal data erased;
To portability: you have the right to ask that we transfer the personal information you gave us.
- to another organisation, or to you, in certain circumstances; and
- To object or restrict: subject to certain conditions, you have the right to object to or ask us to restrict the processing of your personal data including where we are using it for our legitimate business interests.
If we seek your consent to process specific personal information, you have the right to withdraw your consent at any time by notifying the Company of such withdrawal.
The above rights can be exercised at any time, against the Controller, by sending a specific request in writing to the e-mail address sltdprivacy@saipem.com.
You also have the right to lodge a complaint about any matter concerning your personal data to the Information Commissioner’s Office, using the details below. However, we take our obligations seriously, so if you have any questions or concerns, we would encourage you to raise them with the Company first, so that we can try to resolve them.
Information Commissioner’s Office
Wycliffe house
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel 0303 123 1113
https://ico.org.uk/