Data controller: BetBright, Heather House 2nd Floor, Heather Road, Sandyford Business Park, Dublin 18, D18 X2P7.
Data Protection Officer: firstname.lastname@example.org
As part of the recruitment process, BetBright collects and processes personal data relating to job applicants. BetBright is committed to being transparent about how it collects and uses that data and to meeting its data protection and GDPR obligations.
What information does BetBright collect?
Certain information will be mandatory in order to process your application. This may include:
- Name, Address, Contact Details
- Qualifications, skills, experience and employment history
- LinkedIn profile information (if provided by applicant)
- Information about the applicant’s entitlement to work in Ireland (i.e. Visa permit information)
- Earliest start date
- Where the applicant saw the position advertised
BetBright may collect this information in a variety of ways. For example, data might be contained in application forms, CVs, or collected through interviews or other forms of assessment, including online tests.
BetBright may also collect personal data about the applicant from other third parties, specifically references supplied by former employers. BetBright will seek information from third parties only once a job offer to the applicant has been made and will inform the applicant that it is doing so.
Where a candidate has been submitted via a recruitment agency, it is the responsibility of the recruitment agency to collect and process the applicant’s data as per data protection and GDPR requirements before the candidate is submitted to BetBright.
Maintenance of Information
The application and the personal information submitted with it are stored on an applicant tracking system database which is maintained by an external service provider. This service provider is bound to Data Protection Legislation and is GDPR-compliant. Data may also be stored on other IT systems including email and an internal server (access restricted).
Why does BetBright process personal data?
BetBright needs to process data to enter into a contract with the applicant should they be successful in the recruitment process.
In some cases, BetBright needs to process data to ensure that it is complying with its legal obligations. For example, to check an applicant’s eligibility to work in Ireland before employment starts.
Processing data from job applicants allows BetBright to manage the recruitment process, assess and confirm a candidate’s suitability for employment and decide to whom to offer a job. BetBright may also need to process data from job applicants to respond to and defend against legal claims.
Who has access to data?
The applicant’s information may be shared internally for the purposes of the recruitment process. This includes members of HR and the recruitment team, interviewers involved in the recruitment process and hiring managers
BetBright will not share the applicant’s data with third parties. In addition, the applicant’s data will not be transferred outside the European Economic Area.
How does BetBright protect data?
BetBright ensures that all personal information is not used for any other purposes other than the application process. It has internal policies and controls in place to ensure that applicant’s data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by the afore-mentioned BetBright members who each have restricted access.
For how long does BetBright keep data?
If an application is unsuccessful, BetBright will ask for the applicant’s consent before it retains their data in relation to future employment opportunities for which the candidate may be suited. The applicant’s data will be held on BetBright’s Applicant Tracking System for up to 1 year after the end of the recruitment process.
If the applicant does not wish for BetBright to retain their data, they must request that it is deleted and they can withdraw their consent at any time during the retention period. In addition, the applicant can request to see what data BetBright holds on them. BetBright will respond to such a request within 30 days of receipt. At the end of the retention period (or once the applicant withdraws their consent), the applicant’s data is deleted or destroyed.
If BetBright receives a candidate from a recruitment agency, we will obtain consent to retain the candidate’s data within 30 days of receipt.
If an application for employment is successful, personal data gathered during the recruitment process will be transferred to the applicant’s personnel file and retained during their employment. The periods for which the new hire’s data will be held will be provided to them in a privacy notice.
Unsolicited Personal Data
Where BetBright receives unsolicited personal data, e.g. speculative CVs at a time when we are not recruiting for a particular role, we will request the consent of the candidate to keep their data on file for a period of up to 1 year for any future employment opportunities.
As a data subject, you have a number of rights. You can:
- Access and obtain a copy of your data on request
- Require the organisation to change incorrect or incomplete data
- Require the organisation to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing
- Object to the processing of your data where the organisation is relying on its legitimate interests as the legal ground for processing.
If you believe that BetBright has not complied with your data protection rights, you can make a complaint to the Data Protection Commissioner.
What if you do not provide personal data?
You are under no statutory or contractual obligation to provide data to BetBright during the recruitment process. However, if you do not provide the information, this may prevent BetBright processing your application to completion.