This Privacy Notice is a guide to our use of the personal information we have about you.
The Hoist Finance AB (publ) UK Branch is part of the Hoist Finance AB (publ) (referred to as “Hoist Finance” or “Hoist Group”) and is responsible for processing your personal data.
This Privacy Notice outlines the different processing activities we as data controller perform with your personal data.
When you apply for a job at Hoist Finance AB UK Branch or any other company within the Hoist Group, either directly via our website or through external recruitment agencies we are required to process your personal data. The purpose of the processing of your personal data is the administration of received job applications and the selection of suitable candidates for open positions at Hoist Finance or any other company within the Hoist Group.
In order to properly fulfil the aforementioned purposes, the following categories of personal data will be processed:
Type of information |
Reason for processing |
Legal basis for processing |
How long we keep your information for |
|---|---|---|---|
| Contact information, such as name, title, home address, telephone number, personal email address, contact information to referees CV data, such as employment history, date of birth, gender, qualifications, nationality, profession, professional memberships, educational achievements, diplomas, transcripts, languages, computer skills, identification number, cover letter. | The administration of received job applications and the selection of suitable candidates for open positions at Hoist Finance. | Performance of a contract. | 6 years post end of employment (successful candidates), 6 months post end of recruitment (unsuccessful candidates). |
| Referee data, i.e. any data provided to us by your referees. | To ensure that the job applicant is suitable for the applied position. | Performance of a contract. | 9 months post end of recruitment or when an employee’s probation is completed. |
| Background check data, such as passport number, CV-verification, information from the national insurance, internet searches, credit information, criminal record (DBS check), information about your entitlement to work in the UK. | To ensure that the job applicant is suitable for the applied position. | Performance of a contract, legal obligation. | Right to work in the UK – 2 years post end of employment DBS checks and financial records – up to 6 years after the employment ends. |
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal data on our specific instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable authority of a suspected breach where we are legally required to do so.
Right to access: You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please contact us. We will respond to your request within one month.
Right to rectification: We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate. We may ask that you provide reasonable proof to verify your request.
Right to restrict processing: If you believe the personal information we hold is inaccurate, unlawful, or that we do not have a legitimate interest to process it, you can request that we restrict any processing until this is rectified.
Right to object to processing: Where your particular situation merits that we no longer process your information for the performance of a task carried out in the public interest or based on our legitimate interest, you have the right to object to the processing.
Right to data portability: This right allows you to obtain in a structured, commonly used format, and to reuse the information you have provided to us for your own purpose and have it transmitted directly to different services. This applies only to information we use based on your consent or on a contractual basis.
Rights related to automated decision making and profiling: You have the right to safeguards against the risk of potentially damaging decisions being taken without human intervention. This right applies where a decision is based solely on automated processing and produces a legal effect or similar significant effect. If this is the case, we must ensure you are able to obtain human intervention, to express your point of view, and to have the opportunity to challenge it. We will also explain the logic behind the decision.
Profiling is defined as any form of automated processing intended to evaluate certain personal aspects of an individual in order to analyse or predict aspects of their personal circumstances, behaviours or abilities. Processing must be fair and transparent, use appropriate mathematical or statistical procedures, use appropriate controls to minimise inaccuracies and secure personal data.
We do not use any such automated individual decision making.
Right to erasure (“right to be forgotten”): You may ask us to delete the information we hold on you where it is no longer necessary for the purpose for which it was collected; where you withdraw any consent you provided for its processing; where you object to our processing of it (see above); or where our processing is unlawful. Please note, however, that we are also subject to certain legal obligations that prevent us from immediately deleting all of your information. For example, we are legally obliged to keep certain data for anti-money laundering purposes for at least five years. However, any data we are prohibited from deleting will be blocked and, when we are no longer obliged to keep it, erased.
Right to lodge a complaint: You have the right to lodge a complaint with the UK data protection supervisory authority, the Information Commissioner’s Office: https://ico.org.uk/
We keep our privacy notice under regular review and we may change or update this privacy notice at any time. Should we change our approach to data protection, you will be informed of these changes or made aware that we have updated the privacy notice so that you know which information we process and how we use this information.
This privacy policy was last updated: 27 October 2023.
Please contact us if you have any questions about our privacy policy or information we hold about you or the basis upon which we process such information:
Address:
Hoist Finance AB (publ) UK Branch
Att: Data Protection Officer
6th Floor
White Tower, suite 7
MediaCityUK
Salford M50 2NT
E-mail: uk_compliance@hoistfinance.com