Privacy Notice - Staff (Applicants) | University of Salford

Here at the University of Salford we work hard to ensure that you get the very best experience without having to worry if your information is safe.

Outlined below is how and why we collect, use and share your personal information and your rights in relation to that data.

There’s lots of information here but it’s important that you’re fully informed – we hope the following sections will answer any questions you have but if not, please do get in touch with us via hradvice@salford.ac.uk

A bit about us

The University of Salford is the “Data Controller” of your personal data and is subject to the UK General Data Protection Regulation 2016 (“GDPR”). We are registered with the Information Commissioner’s Office (“ICO”) Z469563X and our Data Protection Officer is Andrew Hartley.

We are committed to ensuring that your personal data is handled in accordance with the regulation.

Why do we collect your Information?

Under the GDPR we have to have justification (“legal basis”) for obtaining your information and for job applicants we believe this is:

1. Contract

The legal basis for this is the contract of employment or to take steps to enter into a contract.

2. Legal obligation

In addition we have a legal obligation to ensure that recruitment decisions are made fairly and accurately

3. Employment, social security and social protection

In order to meet our legal obligations in connection with employment, social security or social protection the University processes special category data.

When Do We Collect Data?

We collect data about you at various stages in your relationship with us. This may be:

When you first apply to us for a job.
When you complete your equal opportunities form as part of the application
When you provide us information once you have been selected as a successful applicant

What sort of data do we collect?

Under the GDPR we will only collect the minimum amount of information needed to carry out a specific purpose. We may collect the following type of personal data about you:

Information that helps identify you, e.g. your name, date of birth, address, email
Information relating to your education and employment history, e.g. qualification and exam results, previous places of work etc.
Sensitive personal data, including, for example, information about medical conditions, criminal convictions, gender, race and personal identity
- Information about your racial or ethnic origin, religion, preferred gender, trade union membership, marital status, age, gender at birth and sexual orientation,
- Criminal convictions on staff who work with young and/or vulnerable people and require a criminal records check to be employed.
Work related data, e.g. right to work status, including Passport Number (or National Identity Card details); other necessary documentation to satisfy immigration/Home Office requirements, your job application, references, and emergency contact details.

How do we use your information?

We will process your personal information and data for a range of purposes associated with your application here. The primary purposes are:

To make decisions on who to employ for a job
To ensure fair decisions were made in making that decision
To ensure you have the right to work in the UK,
To input successful candidate data onto the main HR payroll system
To monitor fairness in recruitment decisions across protected characteristics
To send with consent future job opportunities that you may be interested in
Complying with statutory requirements, such as monitoring equal opportunities

How long do we keep your data for?

Data is retained for as long as it is required to perform its purpose, or for as long as is required by law. At the end of that retention period, your data will either be deleted completely or anonymised.

Records retention schedule

Who do we share your information with?

Sometimes we share your personal data between colleagues, managers and leaders to enable them to undertake their University role. We also share data with trusted third parties, who are contracted to work for us and to deliver certain services. Note that:

We provide only the information they need to perform their specific services,
They may only use your data for the purposes we specify in our contract with them,
We work closely with them to ensure that your privacy is respected and protected at all times,
If we stop using their services, any of your data held by them will either be deleted or rendered anonymous.

Examples of the kind of third parties we work with are:

Suppliers and contractors where there is a valid reason for their receiving the information, for example 3rd party IT support
Referees, who you have given us permission to contact as part of your application
Government departments and agencies where we have a statutory obligation to provide information, for example the UK Visa and Immigration service, the Disclosure and Barring Service

International data transfers

Some of the personal information we process about you may be transferred to, and stored at, a destination outside the UK, for example where it is processed by staff operating outside the UK who work for us or for one of our suppliers, or where the personal data is processed by one of our suppliers who is based outside the UK or uses a storage facilities outside of the UK.

Sharing sensitive personal data

Sometimes we may need to share your sensitive personal date with colleagues. We will try to do so only with your explicit consent but there may be occasions when obtaining your consent is impossible or inappropriate, e.g.

To protect your or another person’s vital interests,
Where the provision of confidential counselling, support or similar would be prejudiced,
To meet statutory obligations for equality and diversity monitoring,
For the purpose of prevention or detection of crime, pursuant to a court order or for the University to obtain legal advice.

How can you find out what information we hold on you?

You have certain rights in respect of the personal information the University holds about you. Visit our data protection, privacy and cookies page for more information about individual rights under GDPR and how you exercise them.

Reporting a data breach

If you suspect a data breach has occurred at the University the organisation has a duty to report this to the Information Commissioners Office (ICO) within 72 hours. Please report suspected data breaches as soon as you can.

This statement

From time to time we may make changes to this statement because the way we are processing your personal information changes. All alterations will be posted on this page and will apply from the time we post them. Where we have a valid email address for you we will periodically email you to inform you what changes have been made and to send you a link to our current privacy statement.

This statement was last updated on 10 February 2021.