Atlantis Health RECRUITMENT Privacy Notice
Feb 2024
Atlantis Health respects your right to privacy. This Privacy Notice applies to individuals who participate in recruitment activities, and explains who we are, how we collect, share and use personal data about you, and how you exercise your privacy rights.
It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.
- Important information
- What personal information do we collect and why?
- How do we collect your personal information?
- How do we process your personal information?
- Who do we share your personal information with?
- How long is your personal information kept for?
- International transfers
- How does Atlantis Health keep my personal information secure?
- Your legal rights & obligations
Important Information
Who are we?
Atlantis Health is made up of different legal entities, details of which can be found here. This privacy notice is issued on behalf of the Atlantis Health Group of companies “Atlantis Health” so when we mention Atlantis Health, "we", "us" or "our" in this privacy notice, we are referring to the relevant company in the Atlantis Health Group responsible for processing your data.
If you are a candidate seeking employment at Atlantis Health, the Data Controller of your personal information will be the relevant Atlantis Health entity with whom you have engaged.
How to contact us
We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this privacy notice.
If you have any questions about this privacy notice, including any requests to exercise your legal rights or concerns about our use of your personal information, please email us at privacy@atlantishealth.com.
If you fail to provide personal information
If you fail to provide information when requested, which is necessary for us to consider your application, we will not be able to process your application successfully. For example, if we require a credit check or references for this role and you fail to provide us with relevant details, we will not be able to take your application further.
What information do we collect and why?
We collect the following personal information from and about candidates in connection with available employment opportunities at Atlantis Health:
- Name, address and other contact details;
- Details of skills, qualifications, experience and employment history;
- Information about your right to work.
We may also collect special categories of personal information from candidates where we have an employment law obligation to do so, the information is relevant to their future working environment at Atlantis Health or the future provision of employment benefits, or with the individual's explicit consent.
We use your personal information to match your skills, experience and education with the specific roles offered by us.
We may also need to conduct criminal background checks for some candidates, for example finance personnel, to assess their eligibility to work at Atlantis Health.
We may also ask you to provide diversity information about your race/ethnicity and sexual orientation for diversity monitoring purposes, although the provision of this information will be entirely voluntary.
We will not use your data for any purpose other than the recruitment exercise for which you have applied other than for equalities monitoring purposes as outlined above.
How do we collect your personal information?
We may collect information about candidates from the following sources:
- Directly from you – for example, information that you have provided directly to us when applying for a position;
- From recruitment agencies – for example, when a recruitment agency contacts us to identify you as a potential candidate;
- Through publicly available sources online – for example, where you have a professional profile posted online (e.g. on your current employer's website, or on a professional networking site like LinkedIn); and
- By reference or word of mouth – for example, through a referred from former employee/employer or from a referee you have identified.
If you receive an offer from us, we may also collect personal information about you from third parties, such as references supplied by former employers, information from employment background check providers and information from criminal record checks. We will seek information from third parties only once a job has been offered to you and we will notify you when we intend to request this information.
Why do we process your personal information?
We have a legitimate interest in processing personal data during the recruitment process and for keeping records of the process. Processing data for job applicants allows us to manage the recruitment process, assess and confirm a candidate’s suitability for employment and decide to who to offer a job.
We need to process data to ensure that it is complying with its legal obligations. For example, it is required to check a candidate’s eligibility to work before employment starts.
We need to process data prior to and when entering into an employment contract with you.
We may also need to process data from job applicants to respond to and defend against legal claims.
We may process special categories of data, for example we may need to collect information about a candidate's disabilities in order to provide a suitable working environment for that candidate if they are successful in their application.
For some roles, we are obliged to seek information about criminal convictions and offences. Where we seek this information, it does so because it is necessary for it to carry out its obligations and exercise specific rights in relation to employment.
We will not use your data for any purpose other than the recruitment exercise for which you have applied other than for equalities monitoring purposes as outlined above
Who do we share your personal information with?
We use a third-party service provider to provide a recruiting software system that may assist us in identifying and recruiting talent, administering and evaluating pre-employment screening and testing, and improving our recruiting practices.
We share your information internally with the relevant hiring managers and persons involved in the recruitment process to decide whether to invite you for interview.
We share your data with third parties in order to obtain pre-employment references from other employers, employment background checks from third-party providers and the necessary criminal records checks from the Disclosure and Barring Service (DBS).
How long is your personal information kept for?
If your application for employment is successful, personal information gathered during the recruitment process will be transferred to your personnel file and retained during your employment. The periods for which your data will be held will be provided to you in a new privacy notice at the point at which you are offered employment with us.
If your application for employment is unsuccessful, we will hold your data on file for 6 months after the end of the relevant recruitment process.
We may want to remain in contact with you and consider you for future employment opportunities. We will seek your consent to include you in our talent pool, either prior to or after you formally apply for a job opportunity. Participation in is entirely optional and you may withdraw your consent at any time.
If you fail to provide personal information
If you fail to provide information when requested, which is necessary for us to consider your application, we will not be able to process your application successfully. For example, if we require a credit check or references for this role and you fail to provide us with relevant details, we will not be able to take your application further.
International transfers
Atlantis Health operates in the UK, EU and around the world. This means that when we collect your personal information it may be processed in countries that may have data protection laws that are different to the laws of your country.
However, we have taken appropriate safeguards to require that the personal information we process will remain protected in accordance with this Privacy Notice when transferred internationally, including when processed internationally by our third party service providers and partners.
If you have questions about, or need further information concerning, international data transfers, please send an email to privacy@atlantishealth.com
How does Atlantis Health keep my personal information secure?
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Your legal rights
Under certain circumstances, by law you have the right to:
- Right to be informed about the processing of your personal data;
- Right to rectification if your personal data is inaccurate or incomplete;
- Right of access to your personal data and supplementary information, and the right to confirmation that your personal data is being processed;
- Right to be forgotten by having your personal data deleted or removed on request where there is no compelling reason for an organisation to continue to process it again;
- Right to restrict processing of your personal data, for example, if you consider that processing is unlawful, or the data is inaccurate;
- Right to data portability of your own personal data for your own purposes;
- Right to object to the processing of your personal data for direct marketing, scientific or historical research, or statistical purposes.
If you want to review, verify, correct or request erasure of your personal information, or object to the processing of your personal data, please click here.
To request that we transfer a copy of your personal information to another party, please email privacy@atlantishealth.com.
You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.
- Contact details for data protection authorities in the European Economic Area are available here
- Contact details for the data protection authority in the UK are available here
- Contact details for the data protection authority in New Zealand are available here
- Contact details for the data protection authority in Australia are available here
- The USA has no single national data protection authority. The FTC has jurisdiction over most commercial entities and has authority to issue and enforce privacy regulations in specific areas (for example telemarketing, commercial email, and children's privacy) and to take enforcement action to protect consumers against unfair or deceptive trade practices, including materially unfair privacy and data security practices. Many state attorneys general have similar enforcement authority over unfair and deceptive business practices, including failure to implement reasonable security measures and violations of consumer privacy rights that harm consumers in their states. The California Attorney General has the authority to enforce the CCPA and most California consumer privacy laws. In addition, a wide range of sector-specific regulators, particularly those in the Health, financial services, telecommunications and insurance sectors, have authority to issue and enforce privacy and security regulations, with respect to entities under their jurisdiction.
