Yell Privacy Policy
Important notice
Yell Limited is committed to the privacy and security of your personal data. This Privacy Policy describes how we obtain and use personal data about you in accordance with the General Data Protection Regulation (GDPR). You are being given a copy of this Privacy Policy because you are applying for work with us (whether as an employee, worker or contractor). Please review it carefully so that you are aware of how and why we are using such information, namely for the purposes of this recruitment process.
About us
We are Yell Limited, a private limited company incorporated in (and subject to the laws of) England and Wales with registration number 4205228. Our registered address is at 3 Forbury Place, Forbury Road, Reading, Berkshire RG1 3YL.
Yell Limited is a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this Privacy Policy.
What personal data we collect and why
Personal data is any information which identifies you personally whether directly (for example, your name) or indirectly (for example, in combination with reference to an [identifier including identification number or online identifier]). It does not include data where the identity has been removed (anonymous data).
There are “special categories” of more sensitive personal data which require a higher level of protection.
In connection with your application for work with us, we will collect, store, and use the following personal data from you:
- CV / Covering Letter: The information you have provided to us in your curriculum vitae and covering letter.
- Application Form: your name, surname, title / marital status, nationality, addresses, telephone numbers, email addresses, date of birth, gender, employment history, educational and professional qualifications, previous employers, resignation information and any other information you have provided on our application form.
- Interview: Any information you provide to us during the interview, including as an output from any psychometric, personality and/or behavioural tests.
We may also collect, store and use the following “special categories” of more sensitive personal data:
- Information about your race or ethnicity, religious or philosophical beliefs, political opinions and sexual orientation.
- Information about your health, including any medical condition, health and sickness records.
- Information about criminal convictions and offences.
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal data changes during your recruitment process with us.
We also obtain information about you from other sources:
Third Parties: We obtain personal data from third parties through the application and recruitment process, from an employment agency or background check provider. We may sometimes collect additional information from third parties including former employers (including your named referees), credit reference agencies, the Disclosure and Barring Service in respect of criminal convictions, or other background check agencies.
How we use your personal data and legal grounds for processing
We use your personal data for the following purposes, to:
- Assess your skills, qualifications and suitability for the role.
- Carry out background and reference checks, where applicable.
- Communicate with you about the recruitment process.
- Keep records relating to our recruitment processes.
- Comply with a legal obligation.
We may also use your personal data in the following situations, which are likely to be rare:
- Where we need to protect your interests (or someone else’s interests).
- Where it is needed in the public interest.
We need all the categories of data in the list above primarily as it is in our legitimate interests to decide whether to appoint you to the role. We also need to process your personal data to decide whether to enter into a contract of employment with you.
- The situations in which we will process your personal data are listed below:
- Checking you are legally entitled to work in the UK.
- Assessing qualifications for a particular job or task.
- Making a decision about your recruitment or appointment.
- Determining the terms on which you work for us.
- Making decisions about salary.
- Equal opportunities monitoring.
If you fail to provide certain information when requested, which is necessary for us to consider your application (such as evidence of qualifications or work history), we will not be able to process your application successfully. For example, if we require a credit check or references for the role and you fail to provide us with relevant details, we will not be able to take you application further.
How we use your sensitive personal data
”Special categories” of particularly sensitive personal data require higher levels of protection. We need to have further justification for collecting, storing and using this type of personal data. We have in place safeguards which we are required by law to maintain when processing such data. We may process your special category personal data in the following ways:
- We will use information about your disability status to consider whether we need to provide appropriate adjustments during he recruitment process, for example whether adjustments need to be made during an interview or test process.
- We will use information about your race or national or ethnic origin, religious, philosophical or moral beliefs, or your sexual orientation for equal opportunities monitoring and reporting.
Information about criminal convictions
We envisage that we will process information about your criminal convictions.
We will collect information about criminal convictions if we would like to offer you the role (conditional on checks and any other conditions, such as references, being satisfactory. We may carry out a criminal records check in order to satisfy ourselves that there is nothing in your criminal convictions history which makes you unsuitable for the role.
Automated decision-making
Automated decision-making takes place when an electronic system uses personal data to make a decision without human intervention.
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.
Who we share your personal data with and where it is stored by them
We will only share your personal data with other entities in our group, and the following third parties for the purposes of processing your application:
| Name of recipient | Why your personal data | Location of processing | Safeguards used to protect personal data processed outside the EEA |
|---|---|---|---|
| Hibu Inc (“Hibu”) | USA | There is no adequacy decision by the European Commission in respect of transfers of personal data to the locations specified in the column to the left. This means that the European Commission does not consider the laws in these locations to protect personal data to the same extent as in the EEA. Consequently, we have entered into standard data protection clauses (known ascontroller-processor model clauses) with Hibu pursuant to Article 46(2) of the GDPR. Such clauses provide adequate safeguards with respect to the protection of the privacy and fundamental rights and freedoms of individuals when personal data is transferred to locations for which there is no adequacy decision. |
|
| 3D MarComms Ltd | [Hosts Yell’s applicant tracking database which integrates with Yell’s candidate facing website]. | EEA | N/A |
We require third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
How long we keep your personal data for
Where you application is unsuccessful, we will retain your personal data for a period of 12 months after we have communicated to you our decision about whether to appoint you to a role. We retain your personal data for that period so that we can:
inform you when a further opportunity may arise in future which we may wish to consider you for; and/or
show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way.
After this period, we will securely destroy your personal data in accordance with applicable laws and regulations.
Where your application is successful, and you become an employee, worker or contractor, we will retain your personal data in accordance with the terms set out in the ‘Yell Privacy Policy – Employees, Workers and Contractors’.
Your rights
Under certain circumstances you have the following rights regarding your personal data:
| Rights | What does this mean? |
|---|---|
| 1. Right to be informed | You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we are providing you with the information in this Privacy Policy. |
| 2. Right of access | You have the right to request access to your personal data (if we are processing it) (commonly known as a “data subject access request”). This is so you are aware and can check that we are using your personal data in accordance with data protection law. |
| 3. Right to rectification | You are entitled to have the personal data we hold about you corrected if it is inaccurate or incomplete. |
| 4. Right to erasure | This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there is no good reason for us to keep using it. This is not a general right to erasure; there are exceptions. |
| 5. Right to restrict processing | You have the right ask us to suspend the processing of your personal data in certain circumstances, for example if you want us to establish the accuracy or the reason for processing it. We can still store your personal data but may not use it further. |
| 6. Right to data portability | You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party. |
| 7. Right to object to processing | You have the right to object to us processing your personal data for our legitimate business interests (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. |
| 8. Right to withdraw consent to processing | When you applied for this role, you provided consent to us processing your personal data for the purposes of the recruitment exercise. You have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact mark.cull@yell.com. Once we have received notification that you have withdrawn your consent, we will no longer process your application and, subject to our retention policy, we will dispose of your personal data securely. |
| 9.Right to make a complaint to the data protection authorities | You have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data or believe our processing of your personal data does not comply with data protection law. |
For more information about your rights or if you would like to exercise any of your rights, you are welcome to contact us at the contact details set out below under How you can contact us.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
How you can contact us
If you would like to exercise your data protection rights or if you are unhappy with how we have handled your personal data, you may contact us by:
- emailing: dpo@yell.com;
- writing to: Yell Limited, 3 Forbury Place, Forbury Road, Reading, Berkshire RG1 3YL;
- calling: 0800 777 445.
If you would like to contact our data protection officer, you may do so by emailing dpo@yell.com.
If you’re not satisfied with our response to any enquiry or complaint or believe our processing of your personal data does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO) by:
- writing to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF;
- calling: 0303 123 1113; or
- submitting a message through the ICO’s website at: www.ico.org.uk.
Changes to this Privacy Policy
This Privacy Policy was last updated on [26 April] 2018.
This Privacy Policy may be updated from time to time so you may wish to check it each time you provide personal data to us. We won’t alert you to minor changes, but if there are any major changes we will let you know and where appropriate ask for your consent.
Thank you for completing this assessment