Seafront Board application privacy notice

Read our privacy notice for information on how we collect, store and process your data.

The data controller for your data

Brighton & Hove City Council is the data controller for purposes of the Data Protection Act (2018) and The General Data Protection Regulation (EU) 2016/679 ("GDPR") and is registered as a data controller with the Information Commissioner’s Office (ICO) under registration number Z5840053.

Brighton & Hove City Council are committed to protecting your personal information. As a data controller, we have a responsibility to make sure you know why and how your personal information is being collected in accordance with relevant data protection law.

Why we’re collecting your data

  • We are collecting your data to conduct a recruitment exercise to assess and confirm your suitability.
  • We will not use your data for any purpose other than the recruitment exercise you have applied for.
  • In some cases, we need to process data to ensure we are complying with our legal obligations.
  • We process health information to make reasonable adjustments to the recruitment process for candidates who have a disability. 
  • We may also need to process your data to respond to and defend against legal claims.

What is the legal basis for collecting your data

We have a legal basis for processing this data to:

  • successfully carry out the performance of a contract
  • comply with legal obligations and exercise specific rights in relation to employment
  • it is considered necessary to enable us to carry out our tasks, functions, duties or powers or to perform a task carried out in the public interest
  • elective special category data is collected for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes which shall be proportionate to the aim pursued

The data we may collect

We collect the following information from application forms, CVs or resumes, obtained from your passport or other identity documents, or collected through interviews or other forms of assessment.

We also collect personal data and special category data from third parties, such as references supplied by former employers, information from employment background check providers and information from criminal records checks.

The type of information collected from you is as follows:

Personal data

  • Your full name and title.
  • Contact details including email address, phone number, and home address.
  • Date of birth
  • Gender
  • National Insurance number
  • Bank account details
  • Details of your employment and training history.
  • Education history, qualifications and professional memberships
  • Any information you supply about how you meet the essential/desirable criteria for a role or apprenticeship.
  • Declarations about any disciplinary action, resignation in the face of dismissal, disqualifications or unspent convictions.
  • Health declarations
  • Marital status, next of kin and emergency contacts.
  • Nationality and eligibility to work in the UK
  • Equal opportunities monitoring data.
  • Details of referees

Special category data

We may also collect Special Category (sensitive data) of personal data that may include:

  • Physical or mental health details
  • Racial or ethnic origin
  • Gender identity
  • Sexual orientation
  • Offences (including alleged offences)
  • Religious views or beliefs
  • Criminal proceedings, outcomes and sentences

Who we’ll share your data with

We may share your data with:

  • External interviewers

We will not share your data with any additional third parties. We may share your data with:

  • Disclosure and Barring Service for criminal records checks (if applicable to the role applied for)
  • In exceptional circumstances, we may share your information for the purposes of detection and prevention of crime or fraud.  

How long we’ll keep data for and why

If your application is unsuccessful, we will keep your data for a minimum of twelve months, and as long as your account remains active – we automatically close accounts (and delete content) after 12 months of inactivity. This period is inclusive of the Limitation Act 2010 and provides additional time to enable you to re-access your application to apply for additional roles.

Unless an exemption applies, you have the right to request deletion of your data.

If you go on to work with us, we will transfer your data to your personnel file and keep it for the duration of your employment.

How your data will be stored

  • We will only make your information available to those who have a right to see them. Example of the security measures we used are:
  • Training for our staff allows us to make them aware of how to handle information and how and when to report when something goes wrong
  • We use encryption meaning that information is hidden so that it cannot be read without special knowledge (such as a password). This is done with a secret code. The hidden information is said to then be ‘encrypted’.
  • Pseudonymisation meaning that we’ll use a different name so we can hide parts of your personal information from view. This means that someone outside of the council could work on your information for us without ever knowing it was yours.
  • Controlling access to systems and networks allows us to stop people who are not allowed to view your personal information from getting access to it.
  • Regular testing of our technology and ways of working including keeping up to date on the latest security updates (commonly called patches).

Transferring data outside the European Economic Area

We will not transfer your data outside the European Economic Area.

Your rights

You have the following rights:

  • A right to a copy of data held about you, an explanation for its processing and who it has been shared with
  • A right to rectification (correction) of data which is demonstrably wrong
  • A right to erasure
  • A right to object to automated decision making

Please visit our Data Subject Rights webpage for further details on this. Should you have any further queries on the uses of your information, please speak to the Human Resources team or email data.protection@brighton-hove.gov.uk

How to get advice or make a complaint 

Data Protection Officer 

If you have a concern about how we collect or use your personal data you can contact the Council’s Data Protection Officer.  

How to make a complaint 

We aim to resolve all complaints about how we handle personal information. You also have the right to make a complaint about data protection to the Information Commissioner's Office.  

Contact them by post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or phone 0303 1231 113. 

You can also make a complaint or find out more information on the Commissioner's Office website. 

If your complaint is not about data protection, find details on how to make a complaint about a council service.