Privacy policy
About us
We are SafeLives, the UK-wide charity dedicated to ending domestic abuse, for everyone and for good.
SafeLives is a charity registered in England and Wales with Charity No. 1106864 and our registered address is: Suite 2a, Whitefriars, Lewins Mead, Bristol BS1 2NT. SafeLives is the ‘Data Controller’ for the purposes of the General Data Protection Regulations 2016/679 and the Data Protection Act 2018.
About this Privacy Notice
This Privacy Notice explains how we will process any personal data that we collect from you, or that you provide to us via the application process. When we refer to “personal data” in this notice it means any information that relates to you from which you can be identified either directly or indirectly.
We appreciate the trust you place in us when sharing your personal data. The security of that data is very important to us. In this notice, we explain how we collect, use and protect your personal data.
We also explain your rights regarding your personal data and how you can exercise those rights.
What personal data are we collecting and why?
We collect, store, and use the following categories of personal information about you:
· Key personal data: name, date of birth, job history
· Contact data: address, email address, contact phone number
· Special category data: gender, ethnicity, information regarding any disability, criminal conviction data, sexual orientation, right to work info
SafeLives collects this data as part of the application process to ensure our commitment to equal opportunities, and as part of this commitment we monitor diversity in the recruitment and selection process to determine that it is fair to all.
What is the lawful basis?
In order to process your personal data, we rely on the following lawful basis according to Article 6 of the General Data Protection Regulations 2016/679:
Consent: the individual has given clear consent for you to process their personal data for a specific purpose.
Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law
In order to process your special category data we use the following Article 9 exemptions:
· Explicit consent
· Public Interest condition: Equality of opportunity or treatment
Disclosure of your personal data
We do not share your data with any other organisations, this data is accessible only to members of the HR team and equality data is not shared with hiring managers.
Storage of personal data
The application data will be stored in our HR Management system, all data is stored within the UK and is not transferred internationally.
How long will we store your data?
Applicant data will be stored for 6-12 months following closure of the recruitment campaign. After this the personal data will be anonymised and used for statistical purposes.
Security measures
We have physical, electronic, and managerial procedures to safeguard and secure the information we collect. We do not, however, have any control over what happens between your device and the boundary of our information infrastructure. You should be aware of the many information security risks that exist and take appropriate steps to safeguard your own information. We accept no liability in respect of breaches that occur beyond our sphere of control.
Your rights as a data subject
· The right to be informed
As a data controller, we are obliged to provide clear and transparent information about our data processing activities. This is provided by this privacy notice and any related communications we may send you.
· The right of access
You may request a copy of the personal data we hold about you free of charge. Once we have verified your identity and, if relevant, the authority of any third-party requestor, we will provide access to the personal data we hold about you as well as the following information:
a) The purposes of the processing.
b) The categories of personal data concerned.
c) The recipients to whom the personal data has been disclosed.
d) The retention period or envisioned retention period for that personal data.
e) When personal data has been collected from a third party, the source of the personal data
If there are exceptional circumstances that mean we can refuse to provide the information, we will explain them. If requests are f rivolous or vexatious, we reserve the right to refuse them. If answering requests is likely to require additional time or unreasonable expense (which you may have to meet), we will inform you.
· The right to rectification
If you believe we hold inaccurate or incomplete personal information about you, you may exercise your right to correct or complete this data. This may be used with the right to restrict p rocessing to make sure that incorrect/incomplete information is not processed until it is corrected.
· The right to erasure (the ‘right to be forgotten’)
Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data. This includes personal data that may have been unlawfully processed. We will take all reasonable steps to ensure erasure.
· The right to restrict processing
You may ask us to stop processing your personal data. We will still hold the data but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies, you may exercise the right to restrict processing:
a) The accuracy of the personal data is contested.
b) Processing of the personal data is unlawful.
c) We no longer need the personal data for processing, but the personal data is required for part of a legal process.
d) The right to object has been exercised and processing is restricted pending a decision on the status of the processing.
· The right to data portability
You may request your set of personal data be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing is by automated means and if the processing is based on the fulf ilment of a contractual obligation.
· The right to object
You have the right to object to our processing of your data under one of the following conditions:
a) Processing is based on legitimate interest.
b) Processing is for the purpose of direct marketing.
c) Processing is for the purposes of scientific or historic research.
d) Processing involves automated decision-making and profiling.
Contact Us
If you have questions about how we process personal data, or would like to exercise your data subject rights, please email our Data Protection Officer [email protected] or call 0117 4033 225. For any other queries relating to your application contact [email protected]
Complaints
Should you feel unsatisfied with our handling of your data, or about any complaint that you have made to us about our handling of your data, you are entitled to escalate your complaint to a supervisory authority within the EU. For the UK, this is the ICO (Information Commissioner’s Office), which is also our lead supervisory authority. Its contact information can be found at https://ico.org.uk/global/contact- us/.