British Gymnastics Privacy Notice – Recruitment
This Privacy Notice takes effect on 25 May 2018.
Your privacy is extremely important to British Gymnastics and we are fully committed to providing you with clear and transparent information about how we use your personal information. We value the trust you give us when sharing your personal information. We will ensure robust measures are in place to keep your information secure and will only use it for the purposes outlined in this policy.
British Gymnastics is the data controller of your personal data. This notice explains what personal information we collect and how we use it as part of the recruitment process. If you are recruited, information about how we used your information during your employment and after it ends is provided in our Employment Privacy Notice. We are required to provide this information under data protection law.
You can contact our Data Protection Officer (DPO) at data.protection@british-gymnastics.org or Lilleshall NSC, Newport, Shropshire, TF10 9NB if you have any questions.
About us
British Gymnastics (BG) is a not-for-profit membership organisation and is the central body that governs the sport of gymnastics across the UK. We have a wholly BG-owned subsidiary company, namely Gymnastics Enterprises Limited (GEL) that provides BG merchandise, awards and resources and ticketing for some BG events and we also support The British Gymnastics Foundation (BGF); a registered charity that provides grants and supports community gymnastics and activity. British Gymnastics is the employer for individual who work in GEL or the BGF so this notice is applicable to GEL or BFT employees and workers and BGF non-executive directors.
Our employee privacy notice explains:
What information we collect about you
We do not collect more information than we need to fulfil our stated purposes and will not retain it for longer than is necessary. The information we ask for is used to assess your suitability for employment. You don’t have to provide what we ask for but it might affect your application if you don’t. We collect the following personal information:
We collect most of this information using our online application system, which is provided on our behalf by Cascade.
How we use your information and associated legal reasons
Exactly how we use your personal data will depend on whether you an external contractor or you are British Gymnastics member who is contracted to provided services to British Gymnastics. We process your personal data with the view to entering into a contract with you and to comply with associated legal obligations.
If we make a conditional offer of employment we will ask you for information so that we can carry out pre-employment checks. You must successfully complete these checks before employment can commence. We have a legal obligation to confirm your identity and that you have a right to work in the United Kingdom and to seek references to verify your trustworthiness, integrity and reliability.
For certain positions, we have a legal obligation to carry out criminal records checks to ensure that you are suitable to undertake the role in question. The Safeguarding Vulnerable Groups Act 2006 or Safeguarding Vulnerable Groups (Northern Ireland) Order 2007 provides the legal framework for preventing people who are deemed unsuitable to work with children and/or adults at risk from gaining access to them through their work or voluntary activities. The Act, amended by the Protection of Freedoms Act 2012, provides the legal definition of regulated activity with children and adults (i.e. work that a person who has been barred must not do). Our Use of Criminal Records Checks Policy [embed link] outlines the specific roles where a check is required as a condition of membership.
In England and Wales criminal record checks and barring decisions are the responsibility of the Disclosure and Barring Service (DBS). These services are provided by Access NI in Northern Ireland.
Click here for the DBS Privacy notice
Click here for the Access NI Privacy notice.
When you apply for a criminal record check, it is necessary to verify your identity. This verification is usually carried out by a designated club official. Access NI requires us to retain copies of your ID documents e.g. your passport, birth certificate, driving licence, utility bill etc. for 90 days after the date of issue of the certificate. After this period, these copies are securely destroyed. The DBS does not require copies of ID documents to be retained. British Gymnastics provides a paper-based application service but contracts the services of GBG to provide an electronic DBS service on our behalf.
We will receive confirmation that the check is clear and will be provided with the disclosure number and date of issue. If the disclosure is not clear, we will ask you to provide a copy of your disclosure certificate and we will assess the risk that you may pose to others and whether we can implement controls to minimise any risk. This can require us to contact other agencies to obtain further information such as probation services, which we will only do so with your consent. You will be consulted as part of any assessment. Any criminal records information and other information obtained in connection with an assessment of the disclosed content will be deleted within six months of the date of the check unless the assessment and decision has not been concluded in this time period.
Special categories of personal data
Special categories or personal data are data that is more sensitive and includes health and medical information and some information relating to your equality profile such as information about your sexual orientation, race, disabilities, religion and beliefs and gender reassignment.
We ask you to provide information about any relevant disabilities and medical conditions as we have a legal obligation under the Equality Act 2010 to make any reasonable adjustment for individuals with disabilities who need this to be able to participate in the recruitment and selection process.
Where we process special categories of personal data, such as information about ethnic origin, sexual orientation, health or religion or belief, this is done for the purposes of equal opportunities monitoring to help as assess whether we are an inclusive employer and to ensure we comply with responsibilities under the Equality Act 2010. We understand that not everyone is comfortable to provide this information so this information is not mandatory. You have a choice to select ‘prefer not to say’ in response to each monitoring question and it will not affect your application if you do not wish to answer. This information allows us monitor whether our employment practices are fair and to obtain statistical information as required to inform equality impact assessments. We will never be made available to anyone involved in shortlisting or making recruitment decisions and it will never be used in a way which could identify you.
In other cases, we have a legitimate interest in processing personal data before, during and after the end of the employment relationship. Processing employee data allows the organisation to:
Other lawful reasons for using information about you
We may need to process information about you to comply with a legal or statutory obligation. This includes but is not limited to:
Where the information we are processing is a special category of data, in addition to processing this information to comply with employment or social security or social protection law we may process this type of information if one of the following applies:
Why we share information about you
We may need to share limited personal information with the following third party organisations:
Statutory/regulatory authorities and other organisations
On occasion, it may be necessary to share information with bodies such as the Health & Safety Executive (HSE), Information Commissioner’s Office (ICO), Disclosure and Barring Service (DBS) or Access NI.
Professional and legal advisors including our insurers
Funding Agencies e.g. UK Sport, Sport England and Sport NI
We will need to share information with our funding partners in line with the conditions of funding. This information will usually be anonymised unless they are part of the recruitment panel.
External service providers who are contracted to provide specific services on our behalf
Our HR Management system where much of the information about you is stored is provided by Cascade. We use the services of other third-party providers to help us in areas such as:
We will limit any of your personal data that we share with third party providers to the minimum required to provide the service and the provider will only be able to use personal data for the specific purposes for which it was shared and must deleted or return any information to us once the service has been provided.
How long we keep information about you
We will only keep your personal information for any no longer than is necessary for the recruitment and selection purposes.
If you are successful, the information you provide during the application process will generally be retained by us as part of your employee record for the duration of your employment plus 6 years following the end of your employment. If you are unsuccessful at any stage of the process, the information you have provided will be retained for 6 months taking account of limitation periods for potential claims such as discrimination. After this period, and subject to the conclusion of any legal claims, your records will be destroyed securely unless there is a clear business reason for keeping these records for longer. Should this situation arise, we will only retain the records with your consent, which you can withdraw at any time.
Please contact the DPO if you require any further information on specific retention periods.
Transfers of data out of the EEA
We may transfer your personal information to third-party data processors who are based in the countries outside the European Economic Area (EEA). We use some US-based companies that provide services such as IT services. We only use US-based organisations that are self-certified as adhering to the EU-US Privacy Shield.
We will not transfer your information to any processors based in other countries outside the EEA unless there is a European Commission adequacy decision for the specific country to which the data is transferred or where we can be certain that there are adequate safeguards provided for your information and individual rights standards that meet the requirements of data protection law. Please contact our DPO if you require any further information relating to international transfers.
Your rights in respect of your personal information
You have important rights under data protection law. In summary these include:
To be informed about how your information is processed
We hope that the information in our privacy notice has achieved this but please contact our Data Protection Officer (DPO) if there is any additional information you require.
To access any personal data held about you
You have the right to see the personal information we hold about you. This is called a Data Subject Access Request. You can log into your Cascade online recruitment account and view the details you have provided and can also request a copy of any other personal information that we hold by writing to our DPO.
If we do hold information about you, we will:
Alternatively, if you request is straight forward, you can just ask HR for with the information you require and if appropriate, we will try to deal with this informally.
To have your data rectified if it is inaccurate
Prior to submitting your application, you can log into you Cascade Online account and amend any information in responses to the questions. You can also amend your response to the equality profile questions at any time. You can ask us to correct or amend any inaccurate or incomplete information by contacting us in writing at the address below. We will either make the requested amendments or provide an explanation as to why we are not making changes.
To have your data deleted (except if there is a valid lawful reason to retain it)
You have a right to request the deletion of your information in advance of the above retention periods. We will delete this information unless there is a lawful reason for the information to be retained.
Where you have given us your consent for your personal information to be used for a particular purpose, you have the right to withdraw this consent at any time, which you may do by contacting HR or the DPO using the contact details below. Your withdrawal of consent will not affect any use of the data that was made before you withdrew your consent.
To have your information restricted or blocked from processing
If you object to processing, we will restrict the processing of your information for the purpose to which you are objecting whilst we review your objection.
To portability
This means that you request that the information you have provided is moved or transferred to any alternative provider.
To object to:
Click her to learn more about your rights
To exercise any of these rights or if you have any questions about our website privacy notice please contact our DPO on the contact details provided below.
While we hope to be able to resolve any concerns you have about the way that we are processing your personal data, you have the right to lodge a complaint with the Information Commissioners Office (ICO) if you believe your data has been processed in a way that does not comply with the GDPR or have any wider concerns about our compliance with data protection law. You can do so by calling the ICO helpline on 0303 123 1113 or via their website.
Changes to our privacy notices
We keep our privacy notices under regular review. This notice was last updated on 24th May 2018.
How to contact us
We hope that you have found this information helpful but if you have any questions or concerns, please contact our Data Protection Officer (DPO) who will be pleased to help you.
Data Protection Officer
British Gymnastics
Lilleshall NSC
Nr Newport
Shropshire
TF10 9NB
Data.protection@british-gymnastics.org