Royal Berkshire NHS Foundation Trust ("We") use this site to obtain some preliminary information about candidates. We are committed to protecting and respecting your privacy and complying with Data Protection Act 2018.
This privacy statement sets out the basis on which any personal data we collect from you using this site will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting and submitting information via this site you are accepting and consenting to the practices described in this policy.
For the purpose of the European General Data Protection Regulation (Regulation (EU) 2016/679, known as the “GDPR”), the Data Protection Act 2018 (the "Act") and any other applicable data protection law, as amended or replaced from time to time (“Data Protection Law”), the data controller is Royal Berkshire NHS Foundation Trust.
1. Information we may collect from you
1.1. We use the site to ask you some questions about you in the context of your application (“Application”) for a position with us. The information you give us will include your first and last name and your email address.
1.2. We will use the information that we collect about you only in the context of any Application that you may have made with us. We will use your answers to the questions asked by the site, alongside other information provided in the application and interview process, to evaluate your suitability for the role(s) that you have applied for.
1.3. Decisions about your Application may be based wholly or partly on the answers that you provide. However, such decisions are not made on a wholly automated basis.
1.4. You must ensure that the answers that you provide accurately reflect your views. Any failure to do so may result in the rejection of your application.
2. Cookies
The site uses cookies to distinguish you from other users of the site. This helps us to ensure that the site works correctly and can identify return visits. For detailed information on the cookies we use and the purposes for which we use them see our Cookie policy here.
3. Disclosure of your information
We will not share the information that you submit via the site outside our organisation unless and to the extent that:
3.1. We outsource any aspect of the recruitment process in relation to the Application; Currently Eastpoint and April Strategy
3.2. We are under a duty to disclose or share that information in order to comply with any legal obligation; or
3.3. Such disclosure is necessary to protect the rights, property or safety of our organisation, our patients, or others
4. Where we store your personal data
The data that we collect from you will not be transferred to any destination outside the UK or European Economic Area ("EEA"). We will take all reasonable steps to ensure that your data is treated securely and in accordance with this privacy state
5. Legal basis of processing
5.1. Data Protection Law requires us to meet at least one “legal ground” for processing, currently set out in Article 6 of the General Data Protection Regulation. The grounds applicable to the personal data to which this notice relates are:
5.1.1. the processing may necessary for us to perform a contract that you are party to (if you enter an employment or other contract with us), or to take steps at your request prior to entering such a contract;
5.1.2. the processing may be necessary for compliance with a legal obligation to which we are subject (for example employment-related obligations);
5.1.3. the processing may be necessary for the purposes of our legitimate interests, including our recruitment and management, provided that your fundamental rights and freedoms which require protection of your data override those legitimate interests;
5.1.4. you may have given your consent to our processing the data
If more than one of the above grounds apply to our data processing, the grounds apply in the order set out above.
6. Length of data storage
6.1. Our policy is to ensure that personal data is only stored for as long as is necessary for the purposes set out at section 1 above. The information collected will be stored for a period of 12 months.
6.2. If you re-apply to us while we still hold your information from a previous application, we may re-use that information in the context of your new application.
7. Your rights
7.1. You have various rights under Data Protection Law. These include:
7.1.1. If our processing is based on your consent, the right to withdraw any consent you may have given for our processing of your data – if you exercise this right, we will be required to stop such processing if consent is the sole lawful ground on which we are processing that data;
7.1.2. The right to ask us for access to the data we hold about you (see section 8 below for further details);
7.1.3. The right to ask us to rectify any data that we hold about you that is inaccurate or incomplete;
7.1.4. The right to ask us to delete your data in certain circumstances;
7.1.5. The right to ask us to restrict our processing of your data in certain circumstances;
7.1.6. The right to object to our processing of your data in certain circumstances; and
7.1.7. In limited circumstances, the right to require us to give you the data we hold about you in a structured, commonly used and machine-readable format so that you can provide the data to another data controller.
7.2. You can exercise any of the rights set out above, free of charge, by contacting the Data Protection Officer – [I.G@royalberkshire.nhs.uk] In respect of certain of the rights referred to above, your right may be qualified by Data Protection Law, such as where we are processing data for in the context of actual or possible legal claims. We will discuss with you following your request any such qualifications, and any further information that we may need from you in order to fulfil your request. We may ask you to provide further information in order to confirm your identity. Please also note that if you submit unfounded or excessive (for example repetitive) requests to exercise any of these rights, we reserve the right to make a reasonable charge for providing the requested information or taking the requested action, or to decline your request.
7.3. You also have the right to lodge a complaint with the Information Commissioner’s Office (www.ico.org.uk) if you are concerned that we are not respecting your rights under Data Protection Law. The Information Commissioner’s Office is the authority in the UK which is responsible for overseeing the application of, and enforcing, Data Protection Law.
8. Accessing your data
You have the right to obtain from us:
8.1. Confirmation as to whether we are processing (including holding) personal data about you; and
8.2. If we are processing personal data about you, you are entitled to be provided with:
8.2.1. Information as to the purposes for which we process the data;
8.2.2. Information as to the categories of the data that we are processing;
8.2.3. Information as to the recipients or categories of recipients to whom the data has or will be disclosed;
8.2.4. Information as to the envisaged period for which we will store the data, or if the basis on which that period will be determined;
8.2.5. A copy of the data (further copies are available at a reasonable charge, which we will inform you of should you request further copies). Please note that this right is subject to the rights of others in relation to their own personal data, meaning that we cannot disclose data to you if it would involve disclosing data about someone else.
9. Changes to our privacy statement
We may change this privacy statement at any time, and such changes may take immediate effect. Any changes we may make to this privacy statement in the future will be posted on this page.
10. Contact
Questions, comments and requests regarding this privacy statement should be addressed to [I.G@royalberkshire.nhs.uk]