The Whitehall and Industry Group (WIG) ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This privacy notice describes how we collect and use personal information about you during and after your application process, in accordance with the General Data Protection Regulation (GDPR).

**Data Controller**

The Whitehall and Industry Group (WIG) is the data controller responsible for your personal data. Our contact details are: The Whitehall and Industry Group (WIG) 80 Petty France, London, SW1H 9EX United Kingdom. dataprotection@wig.co.uk 020 7222 1166

**What Information Do We Collect?**

We collect a range of information about you, including:

•  Your name, address, and contact details, including email address and telephone number.
• Details of your qualifications, skills, experience, and employment history.
• Information about your current level of remuneration, including benefit entitlements.
• Whether or not you have a disability for which the organisation needs to make reasonable adjustments during the recruitment process.
• Information about your entitlement to work in the UK.
• Equal opportunities monitoring information, including information about your ethnic origin, sexual orientation, health, and religion or belief.

**How Do We Collect Your Data?**

We collect this information in a variety of ways, such as:

• Data contained in application forms, CVs, or resumes.
• Information obtained from your passport or other identity documents.
• Data collected through interviews or other forms of assessment, including online tests.
• Information from third parties, such as references supplied by former employers, employment background check providers, and criminal records checks.

**Why Do We Process Your Data?**

We process your data for several reasons:

• To take steps at your request prior to entering into a contract with you.
• To enter into a contract with you.
• To ensure compliance with legal obligations, such as checking your eligibility to work in the UK.
• To manage the recruitment process, assess and confirm your suitability for employment, and decide to whom to offer a job.
• To respond to and defend against legal claims.

**Legal Basis for Processing Your Data**

We rely on the following legal bases to process your personal data:

• Contractual necessity: Processing is necessary to take steps at your request before entering into a contract.
• Legal obligation: Processing is necessary to comply with legal obligations.
• Legitimate interests: Processing is necessary for our legitimate interests, provided these are not overridden by your rights and interests.

**Data Sharing**

We may share your personal data with third parties where required by law, where it is necessary to administer the recruitment process, or where we have another legitimate interest in doing so. This includes:

• Employment background check providers.
• Former employers for references.
• Government agencies for legal compliance.

**Data Security**

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

**Data Retention**

We will retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. If your application is unsuccessful, we will retain your data for 6 months after the end of the relevant recruitment process, unless requested to do retain the information for longer by yourself.

**Your Rights**

Under the GDPR, you have the following rights:

• Access: You can request access to your personal data.
• Rectification: You can request correction of any inaccurate or incomplete data.
• Erasure: You can request deletion of your personal data.
• Restriction: You can request restriction of processing your personal data.
• Objection: You can object to the processing of your personal data.
• Data Portability: You can request the transfer of your personal data to another party.

**Contact Us**

If you have any questions about this privacy notice or how we handle your personal data, please contact us at: WIG, 80 Petty France, London, SW1H 9EX United Kingdom | dataprotection@wig.co.uk | 020 7222 1166