Yell Privacy Policy for Candidates
- Important notice
- About us
- What personal data we collect and why
- How we use your personal data and legal grounds for processing
- How we use your sensitive personal data
- Who we share your personal data with and where it is stored by them
- How long we keep your personal data for
- Your rights
- How you can contact us
- Changes to this Privacy Policy
1.
Important notice
Yell Limited is committed to the privacy and security of your personal data. This Privacy Policy describes how we obtain and use personal data about you in accordance with the General Data Protection Regulation (GDPR). You are being given a copy of this Privacy Policy because you are applying for work with us (whether as an employee, worker, or contractor). Please review it carefully so that you are aware of how and why we are using such information, namely for the purposes of this recruitment process.
2.
About us
We are Yell Limited, a private limited company incorporated in (and subject to the laws of) England and Wales with registration number 4205228. Our registered address is at Davidson House, The Forbury, Reading, Berkshire, RG1 3EU.
Yell Limited is a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this Privacy Policy.
3. What personal data we collect and why
Personal data is any information that identifies you personally whether directly (for example, your name) or indirectly (for example, in combination with reference to an identifier including identification number or online identifier). It does not include data where the identity has been removed (anonymous data).
There are “special categories” of more sensitive personal data that require a higher level of protection.
In connection with your application for work with us, we will collect, store, and use the following personal data from you:
- CV / Covering Letter: The information you have provided to us in your curriculum vitae and covering letter.
- Application Form: your name, surname, title / marital status, nationality, addresses, telephone numbers, email addresses, date of birth, gender, employment history, educational and professional qualifications, previous employers, resignation information and any other information you have provided on our application form.
- Interview: Any information you provide to us during the interview, including as an output from any psychometric, personality and/or behavioural tests.
We may also collect, store, and use the following “special categories” of more sensitive personal data:
- Information about your ethnicity and religious beliefs.
- Information about your health, including any medical condition, health, and sickness records.
- Information about criminal convictions and offences.
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal data changes during your recruitment process with us.
We also obtain personal data about you from other sources including:
Third parties through the application and recruitment process, from an employment agency and / or background check provider. We may sometimes collect additional information from third parties including former employers (including your named referees), credit reference agencies, the Disclosure and Barring Service in respect of criminal convictions, or other background check agencies.
4. How we use your personal data and legal grounds for processing
We use your personal data for the following purposes, to:
- Assess your skills, qualifications, and suitability for the role.
- Carry out background and reference checks, where applicable.
- Communicate with you about the recruitment process.
- Keep records relating to our recruitment processes.
- Comply with a legal obligation.
We may also use your personal data in the following situations, which are likely to be rare:
- Where we need to protect your interests (or someone else’s interests).
- Where it is needed in the public interest.
We need all the categories of data in the list above primarily as it is in our legitimate interests to decide whether to appoint you to the role. We also need to process your personal data to decide whether to enter into a contract of employment with you.
The situations in which we will process your personal data are:
- Checking you are legally entitled to work in the UK
- Assessing qualifications for a particular job or task
- Making a decision about your recruitment or appointment
- Determining the terms on which you work for us
- Making decisions about salary
- Equal opportunities monitoring
If you fail to provide certain information when requested that is necessary for us to consider your application (such as evidence of qualifications or work history), we will not be able to process your application successfully. For example, if we require a credit check or references for the role and you fail to provide us with relevant details, we will not be able to take your application further.
Automated decision-making takes place when an electronic system uses personal data to make a decision without human intervention. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.
5. How we use your sensitive personal data
“Special categories” of particularly sensitive personal data require higher levels of protection. We need to have further justification for collecting, storing, and using this type of personal data. We have in place safeguards that we are required by law to maintain when processing such data. We may process your special category personal data in the following ways:
- We will use information about your disability status to consider whether we need to provide appropriate adjustments during the recruitment process, for example whether adjustments need to be made during an interview or test process.
- We will use information about your race or national or ethnic origin and / or religious beliefs for equal opportunities and fair treatment monitoring and reporting.
- We will collect information about criminal convictions if we would like to offer you the role conditional on checks and any other conditions, such as references, being satisfactory. We may carry out a criminal record check in order to satisfy ourselves that there is nothing in your criminal convictions history that makes you unsuitable for the role.
6. Who we share your personal data with and where it is stored by them
We will share your personal data with other entities in our group, and the following third parties only for the purposes of processing your application:
| Name of recipient | Why your personal data is shared | Location of processing | Safeguards used to protect personal data processed outside of the UK |
|---|---|---|---|
| 3D MarComms Ltd (“3DMC”) | Host of Yell’s applicant tracking database that integrates with Yell’s candidate facing website | EEA | Adequacy decision |
| Brook Street (UK) Limited | Brook Street provide recruitment services | EEA | Adequacy decision |
| Brook Street (UK) Limited | Brook Street provide recruitment services | Outside of the EEA | Adequacy decision, EU Model Clauses, or Binding Corporate Rules |
| CV-Library Ltd | CV-Library provide CV database services | UK | N/A – processing occurs within the UK |
| Indeed Ireland Operations Ltd | Indeed provides recruitment services | EEA | Adequacy decision |
| RapidSwitch Ltd | Provides support to 3DMarComms that includes storage | EEA | Adequacy decision |
| RapidSwitch Ltd | Provides support to 3DMarComms that includes storage | Outside of the EEA | Adequate privacy safeguards, EU Model Clauses or Privacy Shield |
| Twilio Inc. | Provides support to 3DMarComms that includes storage | USA | Binding Corporate rules or other adequate levels of protection |
| Thomas International Limited | Online psychometric tests and assessments | EEA | Adequacy decision |
| Thomas International Limited | Online psychometric tests and assessments | Outside of the EEA | Adequacy decision, EU Model Clauses, or Binding Corporate Rules |
| Wildbit LLC (Postmark) | Provides support to 3DMarComms that includes storage | USA | All transfers between the UK and USA rely on Binding Corporate Rules or other adequate levels of protection |
We require third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow third-party service providers to use your personal data for their own purposes. We permit them to process your personal data only for specified purposes and in accordance with our instructions.
7. How long we keep your personal data for
Where your application is unsuccessful, we will retain your personal data for a period of 12 months after we have communicated to you, our decision. We retain your personal data for that period so that we can:
- inform you when a further opportunity may arise in future that we may wish to consider you for; and / or
- show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way.
After this period, we will securely destroy your personal data in accordance with applicable laws and regulations.
Where your application is successful, and you become an employee, worker, or contractor, we will retain your personal data in accordance with the terms set out in the ‘Yell Privacy Policy for Employees, Workers, and Contractors’.
8. Your rights
Under certain circumstances you have the following rights regarding your personal data:
| Rights | What does this mean? |
|---|---|
| 1. Right to be informed | You have the right to be provided with clear, transparent, and easily understandable information about how we use your personal data and your rights. This is why we are providing you with the information in this Privacy Policy. |
| 2. Right of access | You have the right to request access to your personal data (if we are processing it) (commonly known as a “data subject access request”). This is so you are aware and can check that we are using your personal data in accordance with data protection law. |
| 3. Right to rectification | You are entitled to have the personal data we hold about you corrected if it is inaccurate or incomplete. |
| 4. Right to erasure | This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there is no good reason for us to keep using it. This is not a general right to erasure; there are exceptions. |
| 5. Right to restrict processing | You have the right ask us to suspend the processing of your personal data in certain circumstances, for example if you want us to establish the accuracy or the reason for processing it. We can still store your personal data but may not use it further. |
| 6. Right to data portability | You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party. |
| 7. Right to object to processing | You have the right to object to us processing your personal data for our legitimate business interests (or those of a third party) and there is something about your particular situation that makes you want to object to processing on this ground. |
| 8. Right to withdraw consent to processing | If you have given your consent to us to process your personal data for a particular purpose (for example, direct marketing), you have the right to withdraw your consent at any time (although if you do so, it does not mean that any processing of your personal data up to that point is unlawful). |
| 9. Right to make a complaint to the data protection authorities | You have the right to make a complaint to the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal data or believe our processing of your personal data does not comply with data protection law. |
9. How you can contact us
If you would like more information about your rights, to exercise your data protection rights or if you are unhappy with how we have handled your personal data, you may contact our data protection officer by:
- emailing: dpo@yell.com;
- writing to: Yell Limited, Davidson House, The Forbury, Reading, Berkshire, RG1 3EU; or
- calling: 0800 777 445.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
If you’re not satisfied with our response to any enquiry or complaint or believe our processing of your personal data does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO) by:
- writing to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF;
- calling: 0303 123 1113; or
- submitting a message through the ICO’s website at: www.ico.org.uk.
10. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time so you may wish to check it each time you provide personal data to us. We won’t alert you to minor changes, but if there are any major changes, we will let you know and, where appropriate, ask for your consent.
This Privacy Policy was last updated on 4th November 2024.
