Job Applicants Privacy Policy

Policy Statement

At The Bannatyne Group, we value your privacy and are committed to being open about how we handle your personal information during the recruitment process. Here’s a simple guide to help you understand what data we collect, why we collect it, and how we keep it safe.

Who’s in Charge of Your Data?

The Bannatyne Group Limited, located at Power House, Haughton Road Darlington, DL1 1ST (ICO ZA174260), is responsible for your data. Our Data Protection Officer, Hannah Jenkins (friendly General Counsel at the group), is here to help if you have any questions. You can reach her at gdpr@bannatyne.co.uk.

What Information Do We Collect?

We gather some basic information to help us get to know you better and assess your suitability for the role. This includes:

Contact details: Your name, address, email, and phone number.
Your background: Qualifications, skills, work experience, and employment history.
Your current job: Details about your current pay and benefits.
Special needs: Information about any disabilities so we can make any necessary adjustments during the recruitment process.
Right to work: Confirmation that you’re eligible to work in the UK.

We collect this information directly from you through your CV, during interviews, from correspondence between us or from documents you provide. We may also ask for references or carry out a criminal records check, but only after we’ve made you a job offer (and we’ll let you know beforehand).

Why Do We Collect This Information?

We collect and use your information to:

Get to know you better during the recruitment process.
Ensure legal compliance, like verifying your right to work in the UK.
Make fair hiring decisions and keep records of the recruitment process.
Support your application by making any necessary adjustments if you have a disability.

We only collect what we need, and we always consider your rights when we use your data.

Who Sees Your Information?

Your details are shared internally within our group, such as with our People team, hiring managers, and IT staff if needed.

We may also share your personal information with trusted partners and services to help us deliver the best experience for you. Here's how your information might be shared:

Legal Advice: Our legal advisers may access your information if needed for advice or representation, or for any data protection queries.
Right to Work Compliance: We may share information to confirm your eligibility to work.
IT Services: Our tech partners might occasionally access your data to keep our systems running smoothly.
Business Changes: If our business merges with or is acquired by another, your data may be shared as part of that process.
Payroll Services: Access ensures you’re set up as an employee to get paid accurately.
E-Signatures: We use DocuSign to manage electronic signatures securely.

We only share your information when absolutely necessary as part of the job application process, and all partners are required to keep your data secure, confidential, and compliant with data protection laws. Your information will never be shared without a valid reason.

We won’t share your information with anyone not stated above unless we offer you a job. If that happens, we’ll need to check your references and possibly carry out a criminal records check, but we’ll keep you informed every step of the way.

Dependent on the role you apply for, The Bannatyne Group will share your information with the other companies in its group, such as Bannatyne Fitness Limited (ICO Z8376772), Bannatyne Fitness (2) Limited (ICO ZA173884) and/or Bannatyne Hotels Limited (ICO ZA156876).

Rest assured, your data stays within the UK and European Economic Area (EEA) as much as possible, and we don’t send it overseas unnecessarily. However, some of our trusted providers might transfer data to other countries for specific reasons, such as providing technical support or hosting services. For example:

Google Apps: Provided by Google, Inc.
Sky WiFi: Transfers marketing consents to the US.
Access: May transfer personal information outside the EU.
DocuSign: May transfer personal information outside the UK.
Training Providers: May transfer your personal information outside the UK.

Legal Basis for Data Transfers

Some of these transfers occur under specific legal frameworks, ensuring that your data remains protected:

Ireland's laws: Considered equivalent to the UK’s under the relevant UK adequacy regulations.
Standard Data Protection Clauses: Used for transfers by Google, Inc., Amazon Web Services, and others.
Privacy Policies: all the third parties we use provide their privacy policies, which outline the conditions under which they transfer personal data.

Options for Data Transfers to Third Countries

Here is a short explanation of the options for transferring personal information to third countries or international organisations:

Adequacy Decisions: Some countries have been deemed to provide adequate protection for personal data based on factors like the rule of law, independent authorities, and international commitments.
Appropriate Safeguards: These can include:

Standard data protection clauses under UK regulations.
Contract clauses authorised by the Information Commissioner.
Binding corporate rules for companies operating within a group.
Approved codes of conduct or certification mechanisms.

Derogations: In specific cases, data may be transferred without these safeguards, such as when the individual consents or when necessary for contract performance.

While safeguards are in place, the absence of adequacy regulations or appropriate safeguards can introduce risks. For example, individuals may have different rights and remedies in third countries, which may not offer the same level of protection as the UK.

How Do We Keep Your Data Safe?

Your privacy is important to us. We have strong policies and security measures in place to protect your data from being lost, misused, or accessed by anyone who shouldn’t see it.

How Long Do We Keep Your Information?

If you don’t get the job, we’ll keep your details on file for 6 months, just in case another opportunity comes up. After that, we’ll securely delete or destroy your data. If you do join our team, your data will be kept as part of your employee file.

Your Rights

You have several rights when it comes to your personal data:

Access: You can ask us for a copy of the data we have about you.
Correction: If anything’s wrong, let us know and we’ll fix it.
Deletion: You can ask us to delete your data if it’s no longer needed.
Objection: If you’re not happy with how we’re using your data, you can object.
Pause processing: If you think something’s incorrect, you can ask us to stop using your data while we check it out.

To exercise any of these rights, just get in touch with our People team at People@bannatyne.co.uk or write to us at Power House, Haughton Road Darlington, DL1 1ST. If you’re not satisfied with how we handle your data, you can also reach out to the Information Commissioner’s Office who can be contacted here.

What If You Don’t Want to Share Your Data?

You’re not required to give us your personal data, but if you don’t, we might not be able to process your application properly, or at all.

Cookies

We use cookies and similar technologies to help us understand how people interact with our website. For more information about the cookies we use, please see page 26 of the full Bannatyne Privacy Policy which can be accessed here.

No Robots Here!

Don’t worry—our recruitment process isn’t based on automated decisions. Real people are reviewing your application!

For more detailed information about how we use your data, please read Bannatyne’s full Privacy Policy here. If you have any questions or need more details, feel free to reach out to our Data Protection Officer, or our People team. We’re here to help!

Review of this document

This document will be reviewed annually and updated accordingly.