DPA 2018 and GDPR

The DPA 2018 sets out the data protection framework in the UK, alongside the GDPR.  CPM Solutions abides by the rules in both the DPA and GDPR.

Data protection is about ensuring people can trust you to use their data fairly and responsibly.  You have the right to ask an organisation whether or not they are using or storing your personal information. You can also ask them for copies of your personal information, verbally or in writing.

As part of any recruitment process, we collect and processes personal data relating to job applicants. We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations.

 

The information we ask for is used to assess your suitability for employment and includes:

 

  • your name, address and contact details, including email address and telephone number;
  • details of your qualifications, skills, experience and employment history;
  • information about your entitlement to work in the UK;
  • information about any unspent convictions either on the application form or in a separate, confidential letter, to CPM Solutions HR Manager.

We collect this information in a variety of ways. For example, data might be contained in application forms, CVs, obtained from your passport or other identity documents, or collected through interviews.

 

We need to process your data to enter into a contract with you. We also need to process data to ensure that we are complying with our legal obligations such as checking a successful applicant's eligibility to work in the UK before employment starts.

 

We have a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data from job applicants allows us to manage the recruitment process, assess and confirm a candidate's suitability for employment and decide to whom to offer a job.

 

We may also need to process data from job applicants to respond to and defend against legal claims. We take the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.

 

You are under no statutory or contractual obligation to provide data to us during the recruitment process. However, if you do not provide the information, we may not be able to process your application properly or at all.