B11 Education Ltd (part of Premier Education Group plc) | Consultant applications privacy notice

The Purpose of this privacy notice is to explain how B11 Education Ltd (B11) processes personal data to fulfil its data protection responsibilities with respect to applications to join our consultant database.

The Role of B11 in data protection terms is that of a data controller where it determines the purpose and use of personal data collected. Once received it becomes the responsibility of the B11 privacy officer (PO) to ensure that it is processed in accordance with the latest UK and EU data protection legislation.

The PO can be contacted by email using [email protected] or by writing to the head office at B11 Education, The Old Apple Store, Church Road, Shropham, Norfolk, NR17 1EJ.

The personal data being processed by B11 will be enough to process your application and to ensure that B11 can fulfil its obligations to you. As such B11 will collect contact details, information about your qualifications and experience and employment data to enable us to decide whether to offer you a position with us.

We also require personal data about two referees and assume you have their permission to share their contact details with us. We will issue a privacy notice to those individuals when we receive their contact details.

Please note that if you decline to provide the information we ask for, it may not be possible to fulfil all aspects of our contractual obligations to you.

B11’s duty of confidentiality means that B11 staff will treat applicants’ personal data with due respect and in confidence. It is only disclosed to colleagues that need to know it. B11 uses reasonable organisational and technical measures to ensure personal data is kept secure. B11 also expects the same duty of confidentiality of all third parties with whom it shares personal data, including contractors. Sharing is kept to a minimum and the list of organisations that might receive your personal data is reviewed regularly.

The processing of personal data by B11 shall be processed in accordance with the six principles of data protection and always against a lawful basis. Such instances are described below:

• To respond to your general enquiries or to direct your activities not specifically set out in your contract (as applicable), we will use our legitimate interests
• To comply with our legal obligations including but not limited to confirming your right to work in the UK and your security status and to provide the relevant pay and tax information to the HMRC
• When it is necessary for the performance of your contract and its prior preparation and
• When processing a pre-defined purpose for which your consent has been sought and recorded prior to that processing commencing

It should be noted that where consent has been requested and given, you may notify us when you wish to withdraw it at any time.

B11 will only process special categories of data where required in order to meet a legal obligation or in the performance of our consultancy agreement. Special categories of data include data related to information such as your health, sexual orientation, race, ethnic origin, political opinion, religion, trade union membership, genetic and biometric data

We only carry out processing activities using special category data in circumstances where we are obliged to, such as:

• for the purposes of equal opportunities monitoring
• for the management of sickness / absence procedures
• to determine reasonable adjustments

Most commonly, we will process special categories of data when the following applies:

• you have given explicit consent to the processing
• we must process the data in order to carry out our legal obligations
• we must process data for reasons of substantial public interest
• you have already made the data public.

B11 will share personal data, but only when absolutely necessary, with some or all of the following third parties:

• Premier Education, our parent company, that provide support service functions to B11 including financial, HR, IT and marketing services.
• people you have indicated are available to provide references

B11 will process your data within the European Economic Area (EEA). First line personal data processing takes place in the UK, but it is backed up using reputable cloud service providers in the USA.

B11 follows a retention schedule to determine the length of time it holds different types of personal data. Whilst your application is being processed by B11, all routine correspondence and contact data will be retained.

A separate privacy notice will be provided during the onboarding process once your engagement has been confirmed.

At the end of the retention period, B11 will either return, destroy or delete your personal data and any associated emails or relevant documentation for which B11 has no lawful basis to retain. If it is technically impractical to delete electronic copies of personal data, it will put it beyond operational use. It should be noted that B11 allows up to three months after the retention period has ended, to complete the action.

The General Data Protection Regulation defines the rights that you have (although these do not apply in all situations), For convenience, these rights are shown below:

• Right to be informed as to how your personal data is being processed by B11 – this is done through this privacy notice
• Right to access your personal data held by B11 which is done by making a ‘Data Subject Access Request’ (DSAR) to the B11 privacy officer
• Right to rectification of your personal data if you believe B11 has collected it incorrectly or it needs to be updated
• Right to erasure of your personal data for which B11 no longer has a legitimate purpose to process
• Right to restrict processing under certain circumstances, during which time your personal data but will be out of operational use until the related matter is resolved
• Right to data portability of your personal data in a machine-readable version, as you have provided but only applicable to data provided with your consent or under contract
• Right to object to B11 processing your personal data for which it does not have a legal or contractual obligation
• Rights related to automated decision making and profiling (however B11 does not use these techniques in its decision making)

Further details on data subjects’ rights can be found on the Information Commissioner’s Office (ICO) website: https://ico.org.uk.

Raising concerns, exercising rights or making queries about B11’s processing of your personal data can be done by contacting the B11 privacy officer. Please be aware that B11 will need to verify your identity before responding fully to your request. Alternatively, you may wish to contact the ICO directly, using the details provided above.

 

V1.3

May 2022