Employment Candidate Privacy Notice

Glenveagh Properties plc and its subsidiaries, (together “Glenveagh”, “the Group”, “us” “we” or “our”) operates Glenveagh websites, and has created this privacy notice to demonstrate our firm commitment to privacy and it sets out how we collect and use candidate’s personal data in the recruitment processes.

Who is the Data Controller?

We, Glenveagh, are the Data Controller. Our registered office is located at Block C, Maynooth Business Campus, Maynooth, Co. Kildare.

How do I Contact the Data Controller?

If you have any queries in relation to this data protection notice, or if you have any concerns as to how your data is processed, please contact our Company Secretary at the address below:

The Company Secretary

Glenveagh Properties plc

Block C, Maynooth Business Campus

Straffan Road

Maynooth

Co. Kildare

We may also be contacted by email at dataprivacy@glenveagh.ie. We ask that you insert ‘Employment Candidate Privacy Notice’ into the subject line to ensure prioritised attention and we will respond free of charge within 30 days.

What Personal Data is Collected about You?

When you apply for a job to work with Glenveagh, we collect the personal data directly from you:

  1. Full name
  2. Email address
  3. Phone number
  4. The data you provide us in your curriculum vitae (CV) or resume
  5. The data you provide us during interviews

We may also collect, hold and process personal data on you that we obtain indirectly from other sources. This includes information that is publicly available (e.g. social media profiles, articles published about you) and information that is privately held by others and provided to us (e.g. tax details provided by Revenue, previous employment references from your named referees).

Purpose and legal basis for processing your data

We collect and process your personal data in accordance with the Data Protection Act 2018 and the General Data Protection Regulation 2016/679 (GDPR) and the e-Privacy Regulations where amended (the “Applicable Law”).

Purpose(s) for Processing

Legal Basis

  • Assessing your skills, qualifications, and suitability for the role;

  • Setting up and conducting interviews;

  • Pre-employment screening including background and reference checks, and fitness to work confirmation, where applicable;

  • Communication with you about the interview outcomes;

  • Keeping records related to our hiring processes.

  • This processing of your data is necessary to process job applications submitted by, or on your behalf, and you have consented to the processing of your data for this purpose.

  • Managing health and safety at work and incident reporting;

  • Administration of work authorisation documents and visas;

  • Compliance with your information rights;

  • Compliance with our regulatory (for example disclosing tax data to the office of the revenue commissioners); and

  • Exercising our right to defend legal proceedings.

  • This processing of your data is necessary in order for us to comply with any legal or regulatory obligations.

  • Monitoring use of IT and communications in accordance with our IT, email and internet policy;

  • Provision of references;

  • Quality control purposes;

  • The prevention and detection of crime, to the extent necessary for its legitimate business interests;

  • Monitoring and promotion of equal opportunities, including the review of gender breakdown and progression;

  • Running events and initiatives;

  • Investigating and responding to complaints

  • This processing of your data is necessary for our legitimate interest in managing our activities including legal, personnel, administrative and management purposes and for the prevention and detection of crime, provided our interest is not overridden by your interest.

Your right to object

Please note that you have a right to object to the processing of your personal data where that processing is carried out for our legitimate interests.

Where there is a need to process your data for a purpose other than those set out in this section or otherwise outlined to you, we will inform you of this.

Sharing personal data

We may disclose your personal data to third parties or agents, including, but not limited to the following:

  1. Entities within the Group;
  2. Regulatory bodies to whom we are obliged or required to disclose information;
  3. Relevant Government departments and agencies; and

Data retention periods

As a general rule, unsuccessful applicants' personal data will be stored for 12 months before being deleted. Successful applicants’ data resulting in subsequent employment will be retained for 7 years following the termination of your employment with us, to enable us to comply with any legal obligations or for the exercise or defence of legal claims.

Your data rights

Your Right

What this Means

Right to Withdraw Consent

If we are processing your personal data on the legal basis of consent, you are entitled to withdraw your consent at any time (see How do I Contact the Data Controller). However, the withdrawal of your consent will not invalidate any processing we carried out prior to your withdrawal and based on your consent.

Right of Access

You can request a copy of the personal data we hold about you.

Right to Rectification

You have the right to request that we correct any inaccuracies in the personal data we hold about you and complete any personal data where this is incomplete.

Right to Erasure (‘Right to be Forgotten’)

You have the right to request that your personal data be deleted in certain circumstances including:

  • The personal data are no longer needed for the purpose for which they were collected;

  • You withdraw your consent (where the processing was based on consent);

  • You object to the processing and there are no overriding legitimate grounds justifying us processing the personal data (see Right to Object below); and

  • The personal data have been unlawfully processed.

However, this right does not apply where, for example, the processing is necessary:

  • To comply with a legal obligation; or

For the establishment, exercise or defence of legal claims.

Right to Restriction of Processing

You can ask that we restrict processing of your personal data (i.e., keep but not use) where:

  • The accuracy of the personal data is contested;

  • The processing is unlawful but you do not want it erased;

  • We no longer need the personal data but you require it for the establishment, exercise or defence of legal claims; or

You have objected to the processing and verification as to our overriding legitimate grounds is pending.

We can continue to use your personal data:

  • Where we have your consent to do so;

  • For the establishment, exercise or defence of legal claims;

  • To protect the rights of another; or

For reasons of important public interest.

Right to Data Portability

Where you have provided personal data to us, you have a right to receive such personal data back in a structured, commonly-used and machine-readable format, and to have those data transmitted to a third-party data controller without hindrance but in each case only where:

  • The processing is carried out by automated means; and

The processing is based on your consent or on the performance of a contract with you.

Right to Object

You have a right to object to the processing of your personal data in those cases where we are processing your personal data in reliance on our legitimate interests, for the performance of a task carried out in the public interest or in the exercise of our official authority. In such a case we will stop processing your personal data unless we can demonstrate compelling legitimate grounds which override your interests and you have a right to request information on the balancing test we have carried out. You also have the right to object where we are processing your personal data for direct marketing purposes.

Right to Complain

You have the right to lodge a complaint with the Data Protection Authority, in particular in the Member State of your residence, place of work or place of an alleged infringement, if you consider that the processing of your personal data infringes the GDPR. The contact details for the Irish Data Protection Authority:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland

Phone: 01 7650 100 / 1800437 737

E-Mail: info@dataprotection.ie

Website: www.dataprotection.ie

Details of this policy

Data protection compliance is reviewed and updated by the Group Audit & Risk Committee and may be changed from time to time to comply with amended regulation, legislation or Applicable Laws.

This policy was last amended on 25 May 2023

Privacy Notice Changes

Glenveagh reserves the right to change this Privacy Notice at any time and without advance notice. Therefore, we encourage you to review this Privacy Notice from time to time to review any changes.