First Issued: 19th May 2021
Last updated: 30 September 2022
This Privacy Notice is given by Kroo Bank Ltd (“we” “our” or “us” or “Kroo”). In this Notice “You” refers to applicants for permanent and temporary positions at Kroo.
We respect the privacy rights of individuals and are committed to handling personal information responsibly and in accordance with applicable law. It is important that you read all of this Notice carefully as it sets out how we handle your personal information when you apply for a job or other role with us and the rights you have in connection with that information. The term “applicants” is used in this Notice to refer to anyone who applies for a job role, or who otherwise seeks to carry out work with or for us (whether on a permanent or non-permanent basis).
If you are in any doubt, or have any comments or questions about this Notice, please contact us using the contact details set out at Section 9 below.
You can visit our website https://www.Kroo.com
These pages on our website will contain information about us. Our Cookie Notice on the website will tell you about how we collect certain information automatically from your device when you visit our website. Such information is not used in respect of recruitment.
Personal Information collected from you
The types of personal information we collect and process when you apply for a role with us includes (but is not limited to):
As a general rule, during the recruitment process, we try not to collect or process any of the following: information that reveals your racial or ethnic origin, religious, political or philosophical beliefs or trade union membership; genetic data; biometric data for the purposes of unique identification; or information concerning your health/sex life (“Sensitive Personal Information“), unless authorised by law or where necessary to comply with applicable laws.
However, in some circumstances, we may need to collect, or request on a voluntary disclosure basis, some Sensitive Personal Information for legitimate recruitment-related purposes: for example, information about your racial/ethnic origin, gender and disabilities for the purposes of equal opportunities monitoring, to comply with anti-discrimination laws and for government reporting obligations. Where we do process such information it will be for statistical purposes and will not identify you individually. Another example where we might request voluntary disclosure of Sensitive Personal Information is about your physical or mental condition so that we can consider how we might accommodate you during the recruitment process and/or subsequent job role if we do recruit you.
You may provide, on a voluntary basis, other Sensitive Personal Information during the recruitment process, for example your CV may state that your interests include activities involving a particular religious group or a group which espouses particular political or philosophical views.
Personal information collected from other sources
For each of the above personal information we only collect it where permissible and in accordance with applicable law.
Please note that we do not use information on social media or information widely available on the internet, such as material posted on Facebook or YouTube, to assess candidates as part of our selection process. We do, however, review potential candidate and candidate professional profiles and/or job profiles such as those published on Linkedin, job sites and job portals. For particular roles, we may review publicly available portfolios or examples of candidates work, for example, design portfolio websites for Product Designers or Gitlab profiles for Software Developers.
We collect and use this personal information primarily for recruitment purposes – in particular, to determine your qualifications for employment and to reach a hiring decision. This includes assessing your skills, qualifications and background for a particular role, verifying your information, carrying our reference checks or background checks (where applicable) and generally to manage the hiring process and communicate with you about it.
If you are accepted for a role at Kroo, the information collected during the recruitment process will form part of your ongoing staff member record and will be processed in accordance with our Employee Privacy Notice, a copy of which we will give you.
If you are not successful, we may still keep your application to allow us to consider you for other suitable openings within Kroo in the future unless you request that we delete your application. We will hold onto such information until we destroy it securely in accordance with our Data and Document Retention Policy. We do not hold such information indefinitely.
We will only allow access to personal information to those who require such access to perform their tasks and duties, and to third parties who have a legitimate purpose for accessing it. Whenever we permit a third party to access personal information, we will implement appropriate measures to ensure the information is used in a manner consistent with this Notice and that the security and confidentiality of the information is maintained.
Transfers to third party service providers
We may make certain personal information available to third parties who provide services relating to the recruitment process to us:
We may also disclose personal information to third parties on other lawful grounds, including:
In some cases, the sharing described above may result in your personal information being transferred internationally, including to a country outside the European Economic Area (“EEA”). These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).
However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Notice. These include implementing the European Commission’s Standard Contractual Clauses (under Article 46.2 of the General Data Protection Regulation) in the context of personal data we have agreed to transfer outside the EEA.
Under relevant data protection law, our legal basis for processing your personal information as part of the recruitment process is:
If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).
If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided in Section 9 below.
Personal information will be stored in accordance with applicable laws and kept as long as needed to carry out the purposes described in this Notice or as otherwise required by applicable law. Generally, this means your personal information will be retained as follows:
You may exercise the rights available to you under applicable data protection laws as follows:
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
Please address any questions or requests relating to this Notice to The Data Protection Officer: DataProtection@kroo.com