Processing of (personal) data by the entity in charge of the online application process
General information
This data privacy statement, which refers exclusively to data collected as part of the online application process, is to inform you about how your personal data that is collected as part of the online application process is handled at our end.
At Blue Marine Foundation ("we", "us", and "our") the privacy and security of your personal information is extremely important to us. This privacy notice explains how we collect and use personal data about you, in accordance with applicable UK Data Protection Legislation, including the UK GDPR and the Data Protection Act 2018 during our recruitment process, to ensure you are informed and can be confident about giving us your information.
The controller
For clarity, Blue Marine is the 'controller' of your personal information and is responsible for it under data protection regulations.
When you apply for a vacancy advertised by us, these privacy notice provisions will apply to the processing of your personal information. This notice supplements our main privacy notice and should be read alongside it.
The Blue Marine Foundation (“Blue Marine”) is an ocean conservation charity seeking to protect and restore life in the ocean. We are a UK registered charity – number 1137209. Our registered office is: Somerset House, South Building, The Strand, London, WC2R 1LA. Phone: 020 7845 5850
This notice also applies to Blue Marine’s subsidiaries: BMT Trading Limited and Blue Marine Belgium ABSL.
Information we collect from you
Personal data means any information concerning the personal or material circumstances of an identified or identifiable individual. This includes information such as, for example, your name, address, telephone number and date of birth, but also data relating to your specific career etc. by reference to which a specific individual can be identified with reasonable effort. However, information which cannot be (in)directly associated with your real-life identity is not personal data.
We collect and process some or all of the following types of information:
How we use your data
By submitting an application to us via our recruitment website, you express your interest in taking up work with us. In this context, you transmit your personal data, which we will use and store exclusively for the purpose of your job search/application process.
Purposes of processing
Storing your data
We take appropriate measures to ensure that all personal data is kept secure, including security measures to prevent personal data from being accidentally lost, or used or accessed in any unauthorised way. We limit access to your personal data to those who have a genuine business need to view it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through any online means, therefore any transmission remains at your own risk.
Where we store your data
Your personal data will be stored securely on our internal HR system, which is accessible only to authorised individuals.
We implement appropriate technical and organisational measures to protect your data. The data that we collect from you and process as part of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers a human resource and applicant management software solution (https://www.personio.com/legal-notice/). In this context, Personio is our processor under article 28 of the GDPR. In this case, the processing is based on an agreement for the processing of orders between us as the controller and Personio. By submitting your personal data, you agree to this transfer, storing or processing.
Data retention
In accordance with data protection legislation, we will retain your personal data for no longer than is necessary for the purposes of our recruitment policies and processes.
Your data will be retained on our secure recruitment platform in accordance with the following:
Should you be offered and accept a position with us during the application process, we will store the personal data collected as part of the recruitment application process for at least the duration of your employment. Data for successful applicants will be transferred to your own individual record on our main HR system, Personio, and retained for 7 years after employment ends, unless a longer period is required by law.
Your personal information will be deleted if we receive a written request by you to us to delete your information.
Your rights
Under the General Data Protection Regulation, you have a number of important rights. In summary, those include rights to:
The Head of Operations has operational responsibility for our good practice and will be accountable for maintaining the Data Controller notification with the ICO. We will pay the required data protection fee and be registered with the Information Commissioner's Office (ICO) with the following reference ZA821304.
Personal data collected as part of the application process
Personal data means any information concerning the personal or material circumstances of an identified or identifiable individual. This includes information such as, for example, your name, address, telephone number and date of birth, but also data relating to your specific career etc. by reference to which a specific individual can be identified with reasonable effort. However, information which cannot be (in)directly associated with your real-life identity is not personal data.
How to complain
Changes to this notice
We reserve the right to adjust this data privacy notice at any point in time to ensure it is in line with current legislation, or to accommodate changes in the application process or other processes. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.
This data privacy statement, which refers exclusively to data collected as part of the online application process, is to inform you about how your personal data that is collected as part of the online application process is handled at our end.
At Blue Marine Foundation ("we", "us", and "our") the privacy and security of your personal information is extremely important to us. This privacy notice explains how we collect and use personal data about you, in accordance with applicable UK Data Protection Legislation, including the UK GDPR and the Data Protection Act 2018 during our recruitment process, to ensure you are informed and can be confident about giving us your information.
The controller
For clarity, Blue Marine is the 'controller' of your personal information and is responsible for it under data protection regulations.
When you apply for a vacancy advertised by us, these privacy notice provisions will apply to the processing of your personal information. This notice supplements our main privacy notice and should be read alongside it.
The Blue Marine Foundation (“Blue Marine”) is an ocean conservation charity seeking to protect and restore life in the ocean. We are a UK registered charity – number 1137209. Our registered office is: Somerset House, South Building, The Strand, London, WC2R 1LA. Phone: 020 7845 5850
This notice also applies to Blue Marine’s subsidiaries: BMT Trading Limited and Blue Marine Belgium ABSL.
Information we collect from you
Personal data means any information concerning the personal or material circumstances of an identified or identifiable individual. This includes information such as, for example, your name, address, telephone number and date of birth, but also data relating to your specific career etc. by reference to which a specific individual can be identified with reasonable effort. However, information which cannot be (in)directly associated with your real-life identity is not personal data.
We collect and process some or all of the following types of information:
- Information that you provide to us when you apply for a role. This includes information provided through an online application, via email, in person at interviews and/or by any other method.
- In particular, we process personal details such as name, email address, address, date of birth, qualifications, LinkedIn profile, experience and any information relating to your employment history, skills and experience that you provide to us.
- If you contact us, we may keep a record of that correspondence.
- Details of your visits to our careers website including, but not limited to, traffic data, location data and other communication data, the site that referred you to our careers website and the resources that you access.
How we use your data
- Lawful basis for processing
- We rely on legitimate interest as the lawful basis on which we collect and use your personal data. If you apply to us electronically, i.e. via e-mail or using our online application form, we will collect and process your personal data for the purpose of executing the application process and preparing contracts.
- By submitting an application to us via our recruitment website, you express your interest in taking up work with us. In this context, you transmit your personal data, which we will use and store exclusively for the purpose of your job search/application process.
By submitting an application to us via our recruitment website, you express your interest in taking up work with us. In this context, you transmit your personal data, which we will use and store exclusively for the purpose of your job search/application process.
Purposes of processing
- We will use information held about you in the following ways:
- To consider your application in respect of the role for which you have applied
- To consider your application in respect of other roles
- To communicate with you in respect of the recruitment process
- To enhance any information that we receive from you with information obtained from third party data providers.
- To find appropriate candidates to fill our job openings
- Automated decision making / profiling
- We may leverage Personio’s technology to help us select appropriate candidates for us to consider based on criteria we have identified. However, all stages of the recruitment process and any decision as to whom we will engage to fill the vacancy will be made by our team.
Storing your data
We take appropriate measures to ensure that all personal data is kept secure, including security measures to prevent personal data from being accidentally lost, or used or accessed in any unauthorised way. We limit access to your personal data to those who have a genuine business need to view it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through any online means, therefore any transmission remains at your own risk.
Where we store your data
Your personal data will be stored securely on our internal HR system, which is accessible only to authorised individuals.
We implement appropriate technical and organisational measures to protect your data. The data that we collect from you and process as part of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers a human resource and applicant management software solution (https://www.personio.com/legal-notice/). In this context, Personio is our processor under article 28 of the GDPR. In this case, the processing is based on an agreement for the processing of orders between us as the controller and Personio. By submitting your personal data, you agree to this transfer, storing or processing.
Data retention
In accordance with data protection legislation, we will retain your personal data for no longer than is necessary for the purposes of our recruitment policies and processes.
Your data will be retained on our secure recruitment platform in accordance with the following:
- We retain all candidate data for a period of 12 months after the application process has been concluded.
- After 12 months, we are obligated to delete or anonymise your data. In case of anonymization, the data will only be available to us in the form of metadata, without any direct personal reference, for statistical analysis (for example, share of male/female applicants, number of applicants per role).
- We reserve the right to store your data for 12 months after the application process has been concluded for the purpose of adding you to our talent pool, to identify any other vacancies that may be of interest to you, for example, applications for internships. By accepting the data privacy notice, you consent to any further storage of your data as well as its inclusion in our talent pool.
Should you be offered and accept a position with us during the application process, we will store the personal data collected as part of the recruitment application process for at least the duration of your employment. Data for successful applicants will be transferred to your own individual record on our main HR system, Personio, and retained for 7 years after employment ends, unless a longer period is required by law.
Your personal information will be deleted if we receive a written request by you to us to delete your information.
Your rights
Under the General Data Protection Regulation, you have a number of important rights. In summary, those include rights to:
- Access to your personal data and to certain other supplementary information that this Privacy Notice is already designed to address.
- Require us to correct any mistakes in your information which we hold
- Request the erasure of personal data concerning you in certain situations
- Request access to the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
- Object at any time to processing of personal data concerning you for direct marketing
- Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
- Object in certain other situations to our continued processing of your personal data
- Otherwise restrict our processing of your personal data in certain circumstances
- Claim compensation for damages caused by our breach of any data protection laws.
If you have any questions or would like to exercise any of these rights, please contact our Data Protection Lead, Matthew Peckett, Head of Operations. Telephone: 0207 845 5850, Email: info@bluemarinefoundation.com.
The Head of Operations has operational responsibility for our good practice and will be accountable for maintaining the Data Controller notification with the ICO. We will pay the required data protection fee and be registered with the Information Commissioner's Office (ICO) with the following reference ZA821304.
Personal data collected as part of the application process
Personal data means any information concerning the personal or material circumstances of an identified or identifiable individual. This includes information such as, for example, your name, address, telephone number and date of birth, but also data relating to your specific career etc. by reference to which a specific individual can be identified with reasonable effort. However, information which cannot be (in)directly associated with your real-life identity is not personal data.
How to complain
We hope that we can resolve any query or concern you raise about our use of your information.
However, if your request or concern is not satisfactorily resolved by us, you may approach your local protection authority. The Information Commissioner is the supervisory authority in the UK and can provide further information about your rights and our obligations in relation to your personal data, as well as deal with any complaints that you have about our processing of your personal data. For more information on your individual rights, please see the Information Commissioner’s Office.
Changes to this notice
We reserve the right to adjust this data privacy notice at any point in time to ensure it is in line with current legislation, or to accommodate changes in the application process or other processes. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.