As part of our recruitment process, Stella McCartney Ltd (“the Company”) collects and processes personal data from job applicants. We care about your privacy and want you to be familiar with how we collect, use and disclose information. The Company is the data controller of your personal data.
Our data protection commitment is a core value, but we also aim to ensure that all times we comply with the requirements of data protection law (this includes the General Data Protection Regulation, or GDPR, and the UK’s Data Protection Act 2018).
Who are we?
We are Stella McCartney Ltd, a company registered at 3 Olaf Street, London, W11 4BE, with company number 04169969. We are the “data controller” for the processing of your personal data, (according to the meanings given in data protection law), and we are registered with the Information Commissioner’s Office, number Z9393260.
What information do we collect?
We collect a range of information about you. This may include:
- your name, title, address and contact details, including email address and telephone number;
- information about your entitlement to work
- details of your qualifications, skills, experience and employment history;
- information from interviews and phone-screenings you may have;
- information about your current level of remuneration, including benefit entitlements;
- results of pre-employment screening checks for positions in the Finance Department (e.g. credit history, criminal records checks where permitted under local law);
We may collect this information in a variety of ways. For example, data might be contained in application forms you submit or your CV (including when these are sent to us as part of speculative applications or queries), obtained from your passport or other identity documents, or collected through interviews or other methods of assessment.
We may also collect personal data about you from third parties, such as references supplied by former employers, recruitments agencies, business partners, background-screening agencies as well as from publicly available sources such as social media profiles.
Why do we process your personal data and what is our “legal basis” for doing so?
We use your personal data to perform the contract of employment between you and the Company, in the event that you accept an offer of employment, or to comply with certain legal obligations which the Company is subject to, or on the basis of your consent, or where our or someone else’s legitimate interests justify it (as long your own interests don’t outweigh those legitimate interests) and. We use your personal data to help us manage our business, including management of resources and to carry out marketing activities directed towards the public, and to keep our systems secure. For example, we may use your personal data for the following purposes:
- recruitment and business management reasons including identifying and evaluating candidates for potential employment, as well as for future roles that may become available;
- record keeping in relation to recruitment and hiring;
- ensuring compliance with legal requirements;
- protecting our legal rights to the extent authorised or permitted by law;
We will not generally use your personal data other than for recruitment purposes, unless we are required to do so by law, or unless you consent to its use.
Special categories of data
We may also collect “special categories of data” (a term GDPR uses for some of the more sensitive types of personal data) for equal opportunities monitoring purposes, including information about your ethnic origin, sexual orientation, health and religion or belief.
The Company may also process information about whether or not applicants are disabled so we can make reasonable adjustments for candidates who have a disability. We process these types of data to ensure you or us can meet our obligations or exercise our rights under law related to employment or (only where applicable) to enable us to establish, exercise or defend legal claims.
We will only process special categories of information or information about criminal convictions and offences where we have obtained your explicit consent or where permitted by applicable laws (and then only when necessary for the purposes mentioned above)
Who has access to this data?
We will need to share your personal data internally (both in the country where you may work and in other countries in which we have central operations) and may require to share it with some external parties or other entities within the Stella McCartney group of companies. This data will only be accessible by the People & Culture department and some of this information will be shared with the manager who is recruiting for the role you applied for. All Company employees have a personal obligation to treat any sensitive information accessed as part of their employment in strict confidence
Why might we share your personal information with third parties?
We may share your personal information with third parties for the purposes of processing your application, for example:
- A recruitment agency or search consultancy with whom you have registered or instructed to feedback on interviews or to process your applicable;
- A third party provider of skills, aptitude or psychometric testing used in the selection process;
- the provider of our online recruitment platform at lever.co and other third party providers of recruitment software;
- Background screening agencies
Some of these third parties and associates will be located outside the European Economic Area (“EEA”). Where we transfer your personal information outside the EEA, we will ensure that it is protected in a manner that is consistent with how your personal information will be protected by us in the EEA. This can be done in a number of ways, for instance the country that we send the information to might be approved by the European Commission; or the recipient may have signed up to a contract based on “Standard Contractual Clauses” approved by the European Commission, obliging them to protect your personal information. In other circumstances, the law may permit us to transfer your personal information outside the EEA. In all cases, however, we will ensure that any transfer of your personal information is compliant with applicable data protection law.
How is the data protected?
There are appropriate processes and policies in place at the Company to protect your personal information from loss, misuse or disclosure, and to ensure your data is only accessed by authorised personnel as needed.
We have adopted security measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access. For the best possible protection of your personal data outside the limits of the Website or our control, your device should be protected (such as by updated antivirus systems) and your internet service provider should take appropriate measures for the security of network data transmission (such as, for example, firewalls and anti-spam filtering).
All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
While we take reasonable steps to protect your personal data, we cannot guarantee that the personal data you disclose to us will be 100% secure, nor that any data breach will not occur. You accept the inherent security implications of dealing on-line over the Internet and will not hold us responsible for any data breach unless it is due to our negligence.
How long is data kept?
If we decide not to hire you, we will retain your personal data for 12 months, for consideration for future job opportunities. At the end of that period, your data will either be deleted or destroyed. You can also request the data to be deleted or destroyed before the anniversary of your application by emailing us at firstname.lastname@example.org
If your application is successful, personal data gathered during the recruitment process will be transferred to your Human Resources file. In this case, you will receive our Employee Privacy Notice with further details.
You have a number of rights in relation to your personal data including the right:
- to be informed about how your personal data is used (as we have explained in this Notice);
- to request access to the personal data we hold about you;
- to request that we correct any inaccuracies in your personal data;
- in certain circumstances, to request that we delete your personal data or restrict processing of your personal data;
- in certain circumstances, to move, copy or transfer personal information you have provided to us; and
- where we are using your personal data with your consent, to withdraw your consent.
Please note that there may legal reasons why we cannot, or decide not, to comply with your exercise these rights. Should this be the case you have the right to complain to a supervisory authority, such as the Information Commissioner’s Office in the UK, if you consider that the processing of your personal data infringes applicable law. The website of the Information Commissioner’s Office (available at www.ico.org.uk) has lots of information to help you understand your rights in relation to your personal data.
If you have any questions or would like to exercise any of your rights in respect of your personal data, please email email@example.com.
Please note that we may require proof of identity before responding to you.
What if you do not provide personal data?
You are under no statutory or contractual obligation to provide data to us during the recruitment process. However, if you do not provide the information, we may not be able to process your application.
Changes to this Notice
We may occasionally change this Notice, for example, to comply with new requirements imposed by the applicable laws or technical requirements. We will post the updated Notice on our website stellamccartney.com