Why we are providing this notice to you
Cardiff Capital Region’s (CCR) Graduate Scheme aims to provide you with employment, qualification and networking opportunities.
CCR Graduate Scheme is owned and supported by the City of Cardiff Council who acts as the Data Controller when processing your personal information therefore, your data will be processed in line with the Data Protection Act 2018 and Cardiff Council’s Data Protection Policies.
CCR Graduate Scheme relies on your consent to process your personal data in order to provide you with the services you have chosen to receive.
This notice is therefore designed to give you information about the data we hold about you, how we use it, your rights in relation to it and the safeguards that are in place to protect it.
What personal data we hold and how we obtain it
We collect information about you in order to provide you with the recruitment services that are available through the Website. The personal data we collect about you can include but is not limited to;
- Personal identifiers such as Name and Address
- Contact details such as E-mail and Telephone Number.
- Application information including Work experience, Education, Supporting Information and Reference Information
- Disability Data – this is to accommodate you during assessment centres and interviews if required.
How we will use your personal data
We will use your personal data to aid us in providing the service you have consented to receiving. This can include processing your personal data for all or any of the following purposes;
- To provide you with our recruitment and networking services
- To contact you about opportunities, assessment centres and interviews.
- To check your progress during and after the scheme
- To asses eligibility for our services
- For statistical purposes
- For marketing purposes (if we have obtained your consent only).
Organisations we may share your information with
The information you provide will be shared on a consensual basis with relevant Organisations who participate in the CCR Graduate Scheme. This allows us to support organisations with their recruitment process and assist you in your employment journey.
Information will also be shared with organisations who assist with conducting the assessment centres you may be attending to help you to progress to the next stage in the process.
Organisations who participate in CCR Graduate Scheme change on a regular basis, however your personal data will only be shared where applicable and necessary based on your consent therefore you will be aware of who your personal data will be shared with before this happens.
How long we keep your data for
CCR Graduate Scheme will retain your data as long as necessary to fulfil any legislative requirements and provide any service commitments to you. This includes when you are no longer receiving the service to assist us with any future queries.
For candidates who have secured a position with one of CCR Graduate Scheme employers, we will hold your data for a period of one year in order to capture information of your progression in the placement. After this time, your personal data will be anonymised for statistical purposes.
For candidates who have consented to be matched to new roles, we will hold your personal data for a period of 6 months.
All Personal Data is destroyed securely in line with the Data Protection Act 2018.
As a data subject, you have many rights regarding your personal data. This includes;
- Right of access
- Right to rectification
- Right to erasure
- Right to the withdrawal of consent
If you wish to exercise any of these rights or have any queries or concerns regarding the processing of your personal data, please contact the Data Protection officer as indicated below. You also have the right to lodge a complaint in relation to our processing activities with the Information Commissioner’s Office which you can do through the website below or their telephone helpline.
You can obtain further information about your rights from the Information Commissioner’s Office or via their telephone helpline 03031231113.
For further information on how we process your data, please contact the Data Protection Officer on the details below for further information.
Data Protection Officer
Information Governance Team
You have the right to withdraw your consent to the processing at any time by notifying the Data Protection Officer in writing.
Updating this notice
We may update this notice periodically. Where we do this we will inform you of the changes and the date on which the changes take effect.