Dana Petroleum Limited is a "data controller". This means that we are responsible for deciding how we hold and use personal information about you.
You are being sent a copy of this privacy notice because you are applying for work with Dana Petroleum Limited or one of our subsidiary companies (whether as an employee, worker or contractor). It makes you aware of how and why your personal data will be used, namely for the purposes of the recruitment exercise, and how long it will usually be retained for. It provides you with certain information that must be provided under the General Data Protection Regulation ((EU) 2016/679) (“GDPR”).
If the position for which you are applying is based in the Netherlands, the information which you provide to us may be passed to our subsidiary company in the Netherlands, Dana Petroleum Netherlands B.V., which shall then become the “data controller” in respect of your personal information.
The information we hold about you
In connection with your application for work with us, we will collect, store, and use the following categories of personal information about you:
We may also collect, store and use the following "special categories" of more sensitive personal information:
We will use the personal information we collect about you to:
We consider that it is in our legitimate interests to collect and process the information referred to above in order to decide whether to appoint you to a role within our business. We also require to process the information to decide whether to enter into a contract with you and, if an offer is made, to decide upon the terms of any offer which is made.
If you fail to provide information which is requested, and which is necessary for us to consider your application (such as evidence of your qualifications or work history), we will not be able to process your application successfully. For example, if we require references for the role and you fail to provide us with relevant details, we will not be able to take your application further.
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.
We may require to share your personal information with subsidiary companies of Dana Petroleum Limited for the purposes of processing your application. In the event that your personal information requires to be transferred outwith the European Economic Area (“EEA”), we will ensure that appropriate technical and organisational safeguards are in place in accordance with relevant data protection legislation, or that a specific derogation applies under relevant data protection legislation, for the transfer of personal information outside the EEA. If you require any further information in this regard, please contact our Head of Ethics and Compliance at the following e-mail address – firstname.lastname@example.org.
We may require to share your personal information with our occupational health providers for the purposes of processing your application, in the event that the nature of the role for which you are applying means that a pre-employment medical examination is required. All of our third party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We only permit our third party service providers to process your personal data for specified purposes and in accordance with our instructions.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who require access to the information for legitimate business purposes. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
In the event that your application is not successful, we will retain your personal information for a period of six months after we have communicated to you our decision not to appoint you to the role. If the position for which you are applying is based in the Netherlands, we will retain your personal information for a period of four weeks after we have communicated to you our decision not to appoint you to the role, in order to comply with the guidance of the Dutch Data Protection Authority.
We retain your personal information for those periods so that we can show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way. After those periods have expired, we will securely delete or destroy your personal information in accordance with our Data Retention Schedule.
If we wish to retain your personal information on file for a longer period for the purposes of future job opportunities, we will write to you separately seeking your explicit consent to retain your personal information on that basis. If the position for which you are applying is based in the Netherlands, the maximum period for which we will retain your personal information with your consent for such purposes shall be one year, in compliance with the guidance of the Dutch Data Protection Authority
In the event that your application is successful, and you commence work for us, you will be provided with a copy of our Data Protection Policy, and any personal data will be processed in accordance with the terms of the Data Protection Policy.
Under data protection legislation, you have the following rights in connection with your personal data, which can be exercised at any time. These rights may be exercised in accordance with, and subject to, applicable data protection legislation:
If you would like to exercise any of your rights, please use the contact details listed below or, in the case of the right to complain, please contact the relevant Supervisory Authority. In the United Kingdom, the Information Commissioner’s Office can be contacted via their website – www.ico.gov.uk. In the Netherlands, the Dutch Data Protection Authority can be contacted via their website - www.autoriteitpersoonsgegevens.nl.
If you have any questions about this privacy notice or how we handle your personal information, please contact our Head of Ethics and Compliance, Dana Petroleum Limited, King’s Close, 62 Huntly Street, Aberdeen AB10 1RS. The Head of Ethics and Compliance can also be contacted at email@example.com