Policy page
The Edingburgh roofing team from Ronald Graham Roofing and Building Ltd is committed to protecting your personal information’s privacy and security via this document. This document contains information regarding how we collect your personal information and how we utilize them in advance before the beginning of any employment relationship according to the General Data Protection Regulation (GDPR), along with other active data protection legislation currently in force.
Under all data protection legislation, we will perform the following actions while processing your data:
- Will process your personal information lawfully, fairly, and precisely with full transparency.
- The only purpose of collecting your data is to select the best for the course of your employment in ways that we have already been explained to you.
- The Edingburgh roofers company will use your data only in the way that we have mentioned to you before.
- Make sure that your data is original and up-to-date.
- The company will keep your data only up to the time we require it.
- The company ensures you that we will use your data to ensure no damage to your data. Also, the data will not be used in anything that you are not aware of.
Ronald Graham Roofing and Building Ltd work as a data controller, which means that the Edinburgh roofing company is responsible for determining the reason and the way of processing your personal information.
Personal data and personal information refer to the information that relates to an identity or a particular individual by the reference to a person like a name, location data, identification number, an online identifier, or multiple factors that relates to the physical, psychological, mental, genetic, economic, cultural, and social identity of that individual.
The Edinburgh roofers company has a particular category for sensitive personal information that requires a higher level of protection, including personal data related to ethnic or racial origin, religious belief, political opinions, philosophical thoughts, trade union membership, sex life or sexual orientation, mental and physical health-related personal data, genetic data, and other biometric data, etc.
The above statement is for job applicants. This statement does not form any part of the job contract. We have all rights to make some changes to the above information. If you are affected by any substantial change, the company will make an alternate statement for you.
When you get successful and get an appointment for any position, we will send you data of our data protection compliance statement (privacy notice).
Details of the information we will hold about you.
Given below is the list of your data that the company will hold and will process during the application process:
- Your contact details like name, surname, address, contact number, and personal email address.
- Your data of birth
- SEX/ Gender
- Individual’s photograph
- Marital status
- Personal documents like education history, CV resume, and employment history.
- Documentations that prove your right to work in the UK.
- Copy of driving license
- National insurance number
- Documents related to your qualification or professional membership
Now we list you the documents that lie under the particular category that requires a higher level of protection. These are:
- Personal data is related to ethnicity, race, sexual orientation, religious belief, and political opinion.
- Personal information related to your health condition, mental and physical health, and any other disability.
- Genetic information and biometric data
- Personal data associated with any criminal history
How the company collects personal information?
We, the Ronald Graham Roofing and Building Ltd team, collect your personal information via the application and the recruitment process either directly from the individual or through some employment agency or any other third-party agency. The roofing in Edinburgh company may request additional personal information about the individual from third-party agencies, including credit reference agencies, previous employees, or any other agency that undertakes background check IE qualification. Also, we can ask for more personal information in the course of the job and employment-related activity throughout the time when you work for us if appointed.
Processing information about you
The Ronald Graham Roofing and Building Ltd Company will process your personal information according to the laws. The company will apply one of the following while processing your personal information:
- Consent: You have allowed us to process your personal information for any specific purpose.
- Contract: To have a contract with you, we have to process your personal information because we have already informed you and asked you to take all the steps before finalizing the agreement.
- Legal obligation: We have to process your data to comply with the law.
- Vital interest: There is a need to process your information to protect someone’s life.
- Public task: There is a need to process your data to perform a job in the public interest or for some official functions. Also, the study needs to have a clear basis in law.
- Legitimate interests: Also, the processing of your personal information is a must for the company’s legitimate interest or third party’s legitimate interest unless you have some concrete reason to protect your data that overrides those legitimate interests.
Lawful basis for processing your personal information
Based on the above list, we will process your data and consider your consent for entering into a contract or agreement with you. In some cases, we may process your personal information to pursue the company’s legitimate interest or the legitimate interest of a third-party agency unless you provide us some concrete reason to protect your data.
Following are the circumstances when we will process the personal data relates to you:
- Making the final decision for your appointment
- Agreeing to the terms and condition of the company, salary, and other benefits
- To check your legal permission to work in the UK.
- Will access your qualification for any particular post or task
- The company will process your information for training, educational, and development requirement
- The processing of your data will comply with the health and safety obligation
- To prevent fraud
- The company will process your data to fulfill equal opportunity monitoring and reporting obligations
- Any other legitimate interest
We may have some different reasons not listed here to process your data.
Lawful basis for processing your personal information lying under “Special category” or “Sensitive data.”
Sensitive data include personal information that requires a higher level of protection. The company requires more justification to collect, store, and process these sensitive personal data in the below listed circumstances:
- Consent: You have allowed us to process your personal information for any specific purpose.
- Contract: To have a contract with you, we have to process your personal information because we have already informed you and asked you to take all the steps before finalizing the agreement.
- Legal obligation: We have to process your data to comply in accordance with the law.
- Vital interest: There is a need to process your information to protect someone’s life.
- Public task: There is a need to process your data to perform a study in the public interest or for some official functions. Also, the research needs to have a clear basis in law.
- Legitimate interests: Also, the processing of your personal information is a must for the company’s legitimate interest or third party’s legitimate interest unless you have some substantial reason to protect your data that overrides those legitimate interests.
In rare cases, we can process your sensitive personal information without your consent where you have made the specific information public or for some legitimate business activity.
Following are the situation where we can collect and process your personal information without your consent:
- To access your emotional and physical fitness for a particular job
- To know if a reasonable adjustment is required
- The company will process your data to fulfill equal opportunity monitoring and reporting obligations
INFORMATION ABOUT CRIMINAL CONVICTIONS
The Ronald Graham Roofing and Building Ltd Company will only collect your criminal conviction data where needed following the law. In most of the case, we collect your data while the recruitment process. However, we can manage your criminal data when required during the employment course.
To protect you or someone else, we can process your personal information without your consent. Also, we can process your data in the case when you have made that information public. While processing your data related to a criminal conviction, we will strictly follow all the guidelines and laws in force.
Automated- decision makings
The company has all the right to make some automated decisions like rejecting your application while the online process does not meet the qualification requirement.
Sharing data
The Edinburgh roofing company will share your data with a person where it is needed for recruitment purposes. Sometimes, the company may need to share your data with third-party agencies, including contractors, agents, or others inside or outside the European Union (EU). We can also share your data because of legal obligations, as a part of the contract, in legitimate interest.
Following are the activities operated by third parties on behalf of us:
- Payroll
- Pension provider/ administrator
- Legal advisor
- IT services
- Security/ CCTV
- Insurance providers
Given below are the circumstances when we can share your personal information:
- For maintenance support or for hosting of data
- Following a legal obligation
- To obtain advice and help following a legal obligation
When we need to share your personal information, we expect from third-parties to adhere to GDPR and other data protection laws in-force while processing your personal information. We never allow any of the third-party agencies to process your information for any own reasons unless the reason is following our instructions.
DATA SECURITY
We, the team from Ronald Graham Roofing and Building Ltd, are committed to protecting your data. We have several security measures to protect your data from being accessed, damaged, or interfered with, stolen, or compromised. In the case of any compromise, we will inform you of the appropriate regulator following the laws.
The personal data shared with a third party is restricted to them only for business purposes.
Data retention
The Ronald Graham Roofing and building Ltd will collect your data for recruitment purposes and will keep it for a limited time when it is essential for the task the information is collected for. We will keep your data up to 6 years after the termination of employment.
Based on the following consideration, the appropriate retention period will be decided. These are:
- Quantity
- Sensitivity
- Nature
- Risk of harm
- Legal obligations
- Purpose for processing
In the case of your application’s failure, the company will not keep your data for future job vacancies without your consent.
After you consent to keep your data for future job vacancies, we will keep them for one year after the recruitment exercise. After one year, we will destroy your data.
In the last of the retention period, or upon the end of any contract we may have with you, or the end of legal retention, the company will review your data and delete them unless there is some reason to keep your personal information.
After the successful application, the company will transfer your data to the system, which is especially administered to employees. When applicable, the company can provide you particular data protection compliance statement for employees, workers, and contractors.
Your rights about your data
The company is committed to correctly and process your data and keep it up to date. You can make some changes to your personal information.
Following listed are your rights:
Right to be informed: You can ask the company how they are processing your data. Also, you can know the reason for the processing of your data.
Right to request access: You have the right to access the data that the company holds on you. There is a need to make a subject access request to access your access.
Right to request correction: When ay data is not correct and is incomplete, you have the right to correct it.
Right to request erasure: If you the company to not process your data anymore, you can request to delete your system’s data.
Right to object to the inclusion of any information: If the company is relying on some legitimate interest, you have the right to object to the way we are processing your data.
Right to request the restriction of processing: You have the right to ask the company to stop processing your data.
Right to portability: You have the right to transfer the data that the company holds on you for your reason.
Right to request transfer: You can order the company to transfer your personal information to another party.
With your consent, the company will process your data. You can withdraw your consent at any time and stop the company from using your data. In some cases, we can continue processing your data following some legitimate reasons.
Consequences of not providing personal data
When we ask for specific personal information, and you do not answer that, in this case, the company may not form any employment contract with you. Also, we may take some steps against our legal obligations.
Change of purpose for processing data
The company will only process your data for the purpose it was collected for and why it consisted of the original basis. When we need to process your data for any other reason, we will inform you about the lawful reason.
