Job applicants
I want to apply for a job at The Crown Estate.
This notice may vary from time to time so please check it regularly.
This notice describes the types of information collected, how that information is used and disclosed, and how you can access, modify, or delete your information.
The Crown Estate is the ‘data controller’ for the personal data we collect. We are registered with the Information Commissioner’s Office with registration number Z6390151.
Where you are submitting an application on behalf of a candidate you shall only do so provided that you have the candidate's authority to provide their personal data and have made them aware of the conditions of processing in accordance with the terms of this notice.
The Crown Estate will collect and process the following personal data about you:
Information that you provide to us - this includes information that you give us by registering an interest, accessing or submitting any applications, using any of the services provided on our websites, and/or through offline means. This is likely to include your name, email address, postal address, phone number, qualifications, employment history, credit history, driving licence, your right to work in the UK, information obtained from public records, other application details and your CV. For equal opportunities we also collect information relating to your ethnicity; age; gender; disabilities and sexual orientation – however, this information is not mandatory and you do not need to provide this to us.
Information we obtain from other sources - we will obtain information about you (such as details of your suitability to work with us, your past performance at work, your character, verification of the information that you provide to us, and if legally permitted, any history concerning criminal convictions) from third-party references that you provide to us, from your previous and/or current employers, and from third-party background checking services.
We will require basic criminal reference checks for all candidates who are offered employment, and we have policies in place to ensure that any information collected will be protected. For some roles we may also perform national security vetting.
We refer in this notice to the information about you that we hold as “personal data.”
Uses of your personal data
Your personal data may be stored and processed by us for the following purposes:
to consider your job application (including, in some cases, verifying your qualifications and references with third parties);
to notify you of relevant job vacancies with The Crown Estate in which you may be interested;
to comply with legal/regulatory requirements and to ensure diversity and equal opportunities within our recruitment practices.
We are entitled to use your personal data in these ways because:
we need to in order to consider you for a position at The Crown Estate for the purposes of entering into an employment contract;
we have legal and regulatory obligations that we must discharge; or
the use of your personal data as described is necessary for our legitimate business interests such as ensuring that we undertake appropriate checks on the qualifications and experience that applicants tell us they have.
In the instances of special categories of personal data collected, the data is collected for substantial public interest:
to ensure diversity and equal opportunities within our recruitment practices;
to protect the public against dishonesty in relation to criminal reference checks performed as part of our recruitment procedures.
Disclosure of your information to third parties
We may share your personal data:
to our service providers (for example, the providers of our HR system and recruitment service and the parties used to make checks on qualifications and experience for the purposes of providing services to us. These third parties will be subject to confidentiality requirements and they will only use your personal data as described in this notice;
to the extent required by law, for example if we are under a duty to disclose your personal data in order to comply with any legal obligation or to establish, exercise or defend our legal rights;
to sell, make ready for sale or dispose of our business in whole or in part including to any potential buyer or their advisers;
where we are required to do so by law, court order or other legal process;
where, acting in good faith, we believe disclosure is necessary to assist in the investigation or reporting of suspected illegal or other wrongful activity. This may include exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
International transfers of personal data
The Crown Estate has in place administrative, technical and physical measures designed to guard against and minimise the risk of loss, misuse or unauthorised processing or disclosure of the personal information that The Crown Estate holds, which includes an Information Security Management System certified to ISO27001. We place similar obligations on our third parties and risk assess their security based on the sensitivity of the personal data that they hold.
If The Crown Estate or one of its service providers transfers your personal information outside of the EEA, it will continue to be subject to one or more appropriate safeguards set out in the law. These might be the use of model contracts in a form approved by regulators, or having our suppliers sign up to an independent privacy scheme approved by regulators.
Retention of personal data
How long we hold your personal data for will vary. The retention period will be determined by various criteria including:
the purpose for which we are using it – we will need to keep the data for as long as is necessary for that purpose; and
legal obligations – laws or regulation may set a minimum period for which we have to keep your personal data.
Generally, we will look to keep your details within our system for 12 months to update you on any other relevant positions that you may be interested in. Should you become an employee, different retention periods will apply.
Your rights
You have the right to opt out of receiving any marketing information which we send you. If our processing of personal data is based on your consent, you have the right to withdraw consent for future processing at any time by contacting us. Please note, however, that we may still be entitled to process your personal data if we have another legitimate reason (other than consent) for doing so;
You have the right to obtain information regarding the processing of your personal data and access to the personal data which we hold about you;
In some circumstances, the right to receive some personal data ta in a structured, commonly used and machine-readable format and/or request that we transmit those data to a third party where this is technically feasible. Please note that this right only applies to personal data which you have provided to us;
You have the right to request that we correct your personal data if it is inaccurate or incomplete;
You have the right to request that we erase your personal data in certain circumstances. Please note that there may be circumstances where you ask us to erase your personal data but we are legally entitled to retain it;
You have the right to object and/or request that we restrict our processing of your personal data in certain circumstances. Again, there may be circumstances where you ask us to restrict our processing of your personal data but we are legally entitled to refuse that request; and
You can also contact the Information Commissioner's Office via https://ico.org.uk/ for information, advice or to make a complaint.
If you want more information or wish to exercise a right, please contact the data protection officer at enquiries@thecrownestate.co.uk
Changes to this privacy notice
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
This Privacy Notice was last updated on 01 February 2020.