Purpose of this document
Bord Iascaigh Mhara (BIM), Crofton Road, Dun Laoghaire, County Dublin, as the Data Controller has created this notice to outline the manner in which personal data will be handled and processed in compliance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. This notice has been created to inform you of how your personal data will be processed for the purposes of recruitment.
Data protection principles
In line with the principles of data protection, we will take steps to ensure that personal is:
• Used lawfully, fairly and in a transparent way;
• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes;
• Relevant to the purposes we have told you about and limited only to those purposes.
• Accurate and kept up to date;
• Kept only as long as necessary for the purposes we have told you about;
• Kept securely; and
• Processed in accordance with the principle of accountability.
Categories of personal data
For the purposes of recruitment, you provide personal data directly to us, however, we also receive personal data about you from external sources, such as referees or recruiters.
In connection with your application for work with us, we will collect, store, and use the following information:
• Identification details
• Contact details
• Previous employment details
• Qualifications
• Right to work details
• Fitness to work details
• Application details
Purpose of data collection and lawful basis
We process your personal data for recruitment purposes. The information we process is used to assess eligibility for the role applied for. Your personal data is processed under the lawful basis of contract or the steps taken in order to enter into a contract. Where you provide consent to us, you have the right to withdraw this consent.
Third party sharing of personal data
We will not share your personal data with third parties unless required to do so by law.
Transfers of personal data
Your personal data is hosted within the EEA for the purposes of recruitment.
Data retention
We will retain all recruitment related data belonging to unsuccessful job applicants for a period of 12 months from the completion of the recruitment process.
Your rights as an individual
Your rights as an individual
Under the General Data Protection Regulation (GDPR) and The Data Protection Act 2018 (DPA2018) you have a number of rights with regard to your personal data:
1. The right to access your personal data
2. If your personal data is inaccurate or incomplete, you have the right to have the data rectified without undue delay
3. The erasure of your personal data or the right to be forgotten – the right to be forgotten is not an absolute right will not apply where processing is necessary for:
Compliance with a legal obligation.
Archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
Establishment, exercise or defence of legal claims.
4. The right to restrict processing, object to the processing as well as the right to data portability in certain circumstances.
5. If you have provided consent for the processing of your personal data, you have the right (in certain circumstances) to withdraw consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn.
6. If you believe that we have not complied with the requirements of the GDPR or DPA 18, you have the right to lodge a complaint with the Irish Data Protection Supervisory Authority.
If you wish to exercise any of your rights, please contact us. We will seek to deal with your request without undue delay, and in any event within one month (subject to any extensions to which we are lawfully entitled). Any request to access personal data will be dealt with free of charge unless it is considered excessive in which case, we may charge a reasonable fee.
Automated decision making
We do not engage in fully automated decision making which has significant or legal effects on you for the purposes of recruitment.
Data Protection Officer
If you have any queries you can write to us at dataprotection@bim.ie or Data Protection Officer, Bord Iascaigh Mhara, Crofton Road, Dun Laoghaire, Co. Dublin, A96 E5A0.
Data Protection Commissioner
If you believe that we have processed your data incorrectly, please contact the DPO in the first instance for assistance. If you require further support, you can contact the DPC through their online query support form or submit a complaint to the Data Protection Commission (DPC). The DPC can be contacted by email info@dataprotection.ie or by post 21 Fitzwilliams Square, Dublin 2, D02 RD28.
Changes to this Fair Processing Notice
We may update this notice from time to time. If we make any changes, we will post those changes here and update the ‘Last Updated’ date at the bottom of this Fair Processing Notice.
Last Updated: 28/01/2022
