(compliant with GDPR)
As part of the recruitment process, Stream UK Media Services Limited (hereinafter: Stream UK) gathers and processes personal data of candidates. We are committed to being transparent about how we collect and use that data and to meeting its data protection obligations.
What personal data do we gather?
Stream UK gathers different types of information about you, including:
- name and surname, address, contact details;
- information regarding candidates’ education and work experience;
- information regarding salary expectations and current salary;
- information regarding any disability that the candidate might have;
- information about the candidate’s eligibility to work in the UK.
This information is gathered in multiple ways – through documents such as CVs, passports or other identity documents, or through interviews or other forms of assessment.
We also gather personal data about candidates through references given by former employers, after informing the candidates of the intention to do so.
Information regarding candidates will be stored in Recruitment files and on other IT systems (including email).
Why do we process personal data?
We process candidates’ data prior to making a contract, in order to ensure that we are complying with its legal obligations. For example, we may check candidate’s eligibility to work in the UK.
We have a legitimate interest in processing personal data during the recruitment process and for record keeping. This enables us to manage the recruitment process and assess the candidate’s suitability for the job. We may also need to process data from job applicants to respond to and defend against legal claims.
Stream UK may process special categories of data, such as information about ethnic origin, sexual orientation or religion or belief, to monitor recruitment statistics. We may also collect information about whether or not applicants are disabled to make reasonable adjustments for candidates who have a disability. We process such information to carry out its obligations and exercise specific rights in relation to employment.
If the candidate’s application is unsuccessful, we may keep their personal data on file in case there are future opportunities for which they might be suitable. Candidate’s consent will be asked for before we store the data on file for this purpose and they are free to withdraw the consent at any moment.
Who has access to personal data?
Your information may be shared internally for the purposes of the recruitment process. This includes members of the HR and recruitment team, interviewers involved in the recruitment process, Finance staff involved in the payroll process and IT staff if access to the data is necessary for the performance of their roles.
We will share your data with third parties in case when your application for employment is successful and want to obtain references from previous employers.
Furthermore, our subsidiary, Stream Malta, will share the data with the appointed payroll administration agency.
How do we protect personal data?
Our internal policies and controls are in place to ensure that your data is not lost, destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.
For how long do we keep personal data?
If your application for employment is unsuccessful, the organisation will hold your data on file for 6 (six) months after the end of the relevant recruitment process. If you agree to allow us to keep your personal data on file, we will hold your data on file for a further 6 (six) months for consideration for future employment opportunities. At the end of that period, or once you withdraw your consent, your data is deleted or destroyed.
If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your Human Resources file (electronic and paper based) and retained during your employment. The periods for which your data will be held will be provided to you in a new privacy notice.
Candidates (data subjects) have the following rights:
- gaining access to the copy of personal data on request;
- requesting to change incorrect or incomplete data;
- requiring the organisation to delete or stop processing your data,
- objecting to the processing of data.
If you would like to exercise any of these rights, please contact us at email@example.com.
If you believe that the organisation has not complied with your data protection rights, you can complain to the Information Commissioner.