Compliance manager

You have already applied for this vacancy, please go to your account to see your progress.

The Grammar School at Leeds privacy notice for applicants and candidates

A. General Principles

1. The Grammar School at Leeds (“GSAL”, “the school”) is a data controller with registered address at Alwoodley Gates, Harrogate Road, Leeds, LS17 8GS and is committed to ensuring that the personal data of its staff is handled in accordance with the principles set out in the UK General Data Protection Regulation (GDPR).
2. The school will process your information in accordance with the Data Protection Act 2018, the GDPR and its own Data Protection Policy and Data Retention Schedule. To comply with the law, data must be collected and used fairly, stored safely and securely, be adequate, relevant and not excessive, be kept accurate and up to date, held only as long as necessary and not disclosed to any third party unlawfully.
3. This policy applies to individuals applying for a position at GSAL whether as an employee or under any other contractual or voluntary arrangement, including prospective consultants, coaches, casual workers, supply staff, visiting music teachers, agency workers, extra-curricular providers, volunteers and individuals on work experience (“Applicants”).
4. This policy describes the categories of personal data that we collect, how we use your personal data, how we secure your personal data and when we may disclose your personal data to third parties. It also describes your rights regarding your personal data and how you can access, correct, and request erasure of your personal data.

As defined by the General Data Protection Regulation (GDPR) The Grammar School at Leeds is the Data Controller and ultimately responsible for ensuring the data you provide is kept secure, processed correctly and that you understand your legal rights in relation to the data you provide.

The recruitment software we use via this website is supplied by IRIS Software Group Limited and they are defined as a Data Processor under the GDPR. They will only process your data in accordance with our instructions.

IRIS can be contacted at: 4th Floor Heathrow Approach, 470 London Road, Slough, England, SL3 8QY

For Data Protection enquiries, please contact the Help Desk at support@networxrecruitment.com

B. What information do we hold?

1. This information is normally initially provided to the school by you through an online application form via a third-party recruitment website (Networx).
2. To carry out our activities and obligations as a prospective employer, we may collect, store, and process the following categories of personal data about you:
   • personal contact details such as name, title, addresses, telephone numbers, and personal email addresses;
   • date of birth;
   • equal opportunities monitoring information;
   • copies of identification;
   • government identification numbers such national insurance number, driver’s license number or other identification card number;
   • qualifications, education and training records;
   • employment records (including professional memberships, references, work history, and proof of work eligibility);
   • Information of whether you have worked overseas so we can make the necessary checks; and
   • other personal details collected during the recruitment process, or other information that you otherwise voluntarily provide to us.

Collection and use of special categories of personal data

We may collect and process special categories of personal data and data relating to criminal convictions and offences, for a variety of purposes including undertaking screening (e.g. medical screening, right to work in the U.K., security screening, suitability to work with children, and safeguarding etc.) monitoring equal opportunities, making or considering work-place adjustments, management of health and safety or other legal obligations. Such special categories of personal data may include:

1. Information about an applicant’s racial and ethnic origin, religion, beliefs and disability information to ensure meaningful equal opportunity monitoring and reporting;
2. physical or mental health condition or disability information to provide appropriate adjustments where required during the recruitment stages, and to assess an applicant’s suitability for the role;
3. information about past criminal convictions and cautions that are not filtered, as a condition of employment for all posts, as required by applicable statute;

Some special categories of personal data, such as information about health or medical conditions, are processed to carry out employment law obligations (such as those in relation to disabilities).

Where we process other special categories of personal data, such as information about ethnic origin, sexual orientation or religion or belief, this is done for the purposes of equal opportunities monitoring.

C. Why do we process personal data?

1. We collect and process your personal information in order to manage our potential and subsequent employment relationship with you which includes:
   1. Managing Human Resources processes such as recruitment and selection;
   2. Communicating with you regarding the vacancy and recruitment process if you have been shortlisted for the role;
   3. Monitoring equal opportunities and statistical analysis;
   4. Where applicable, communicating with you if other similar/suitable vacancies arise;
   5. Seeking references from current/former employers;
   6. Responding to and defending any legal claims that may arise from the recruitment process.

Lawful basis

1. We process your personal data for the following purposes:
   1. In order to take steps to enter into a contract.
2. In other cases, we have a legitimate interest in processing personal data before, during and after the end of the employment relationship. Processing prospective candidate’s data allows GSAL to:
   1. Run recruitment and promotion processes;
   2. Operate and keep a record of candidates who have applied for a role;
   3. Ensure effective general HR and business administration;
   4. To allow GSAL to appoint staff, contractors and volunteers.

D. How do we use your information within the school?

1. GSAL is required to obtain information about past criminal convictions and cautions that are not filtered, as a condition of employment for all posts. The school also undertakes DBS checks on all staff.
2. The amount of personal information shared within GSAL will be no more than is reasonably necessary.
3. We will use your personal data to answer your questions, enquiries and use your information on an anonymised basis to produce internal reports in relation to the candidate recruitment experience.
4. We will also use your personal data to improve our customer service and to make our services more valuable to you.

E. Who has access to your data?

1. Within the school, personal data may be shared between colleagues who legitimately need the information to carry out appropriate recruitment processes.
2. The school shares your data with third parties in order to obtain pre-employment references from other employers, employment background checks from third-party providers, necessary criminal records checks from the Disclosure and Barring Service (DBS), Teaching Regulation Agency.

F. Do we transfer your personal data to other countries?

We do not envisage transferring your personal data outside of the UK other than as indicated above and we have a commitment from our business partners and data processors that they too will honour this commitment. However, where you have worked outside of the UK, as part of our pre-employment checks, we may contact your appropriate employers for confirmation of your previous employment details, and other agencies as necessary for the compliance of relevant statutory checks. In such cases, we ensure that appropriate security and data protection measures are in place to protect your data including, for example, data minimisation, use of secure portals to transfer personal data and/or encryption of information. We will not permit personal data to be transferred or processed outside the UK, unless the processing meets the conditions set out within the GDPR regarding safety mechanism.

G. How does the school protect your personal data?

1. The school takes the security of your data seriously. Internal policies and controls have been put in place to try to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees in the performance of their duties.
2. Where the school engages third parties to process personal data on its behalf, they do so on the basis of written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.

H. For how long does the organisation keep data?

Your data will be retained for the duration of the recruitment process and, if your application is unsuccessful, 6 months after the closure of the vacancy after which it will be destroyed securely. Your information will be retained for this period to allow candidates to challenge recruitment decisions. Successful candidate’s information required for employment purposes will be retained throughout your employment, all other documentation not relevant will be securely destroyed 6 months after your start date has been confirmed, this includes any supporting documentation which you provide for criminal reference checking and proof of address.

I. Your rights

You have a number of rights under Data Protection Legislation, which include:

1. Right of Access – You have the right of access to information we hold about you. We have up to one month to provide you with the information and at no cost to you. We will provide you with a copy of the information we hold that relates to you. For more information, please see our Data Protection Policy.
2. Right to rectification or erasure – If you feel that any data we hold about you is inaccurate, you have the right to ask us to correct or rectify it. You also have a right to ask us to erase information about you where you can demonstrate that the data we hold is no longer needed by us, or if you feel that we are unlawfully processing your data. Your right of rectification and erasure extends to anyone we have disclosed your personal information to and we will take all reasonable steps to inform them about your request.
3. Right to Restriction of processing – you have a right to request that we refrain from processing your data where you contest its accuracy, or the processing is unlawful and you have requested its erasure, or where we don’t need to hold your data anymore but you need us to in order to establish, exercise or defend any legal claims, or we are in dispute about the legality of our processing your personal data.
4. Right to object – you have a right to object to our processing of your personal data where the basis of the processing is our legitimate interests including but not limited to direct marketing and profiling.
5. Right to data portability - you have a right to receive any personal data that you have provided us to transfer it on to another data controller where the processing is based on consent or performance of a contract and is carried out by automated means. This is called a data portability request.
6. Rights related to automated decision-making, including profiling – you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
7. If you would like to exercise any of these rights, please contact the school’s Data Manager at datamanager@gsal.org.uk (or by post to Data Manager, The Grammar School at Leeds, Alwoodley Gates, Harrogate Road, Leeds, LS17 8GS). For internal queries regarding this Privacy Notice, you can contact HR.

J. Information Commissioner's Office

1. More information about your data protection rights can be found on the Information Commissioner’s Office (ICO). You also have a right to lodge a complaint about any aspect of how we are handling your data with the ICO and can do so by contacting:

Information Commissioner's Office Wycliffe House

Water Lane Wilmslow Cheshire SK9 5AF

0303 123 1113 | www.ico.org.uk

K. Automated decision-making

We do not make any decisions about you, using automated means and we do not envisage this changing in the near future. If the situation does change, we will notify you in writing.

L. What if you do not wish to provide personal data?

1. In order to process applications, you are required to provide the school with your personal data.
2. Certain information, such as contact details, your right to work in the UK, and statutory employment checks, must be provided to enable the school to effectively administer your application. If you do not provide this information, the school will not be able to administer your rights and fulfil obligations arising from the recruitment process.

M. Changes to this Privacy Notice

We may change this Privacy Notice from time to time. Any significant changes to the terms will be published on the school’s website and you will be notified of such changes. For full details of how data and privacy are managed by the school, please visit: www.gsal.org.uk/about/school-policies