Legal

Privacy Notice for Job Candidates

Last updated: September 2026

This notice informs you, in accordance with Articles 13 and 14 of the UK GDPR and the EU GDPR, about how we process your personal data when you apply for a position with Engivolt or are considered as a candidate. It supplements our Privacy Policy. In this notice, "GDPR" means the UK GDPR or the EU GDPR, whichever applies to you.

1. Controller

Engivolt
Email: info@engivolt.net

2. What data do we process?

We process the personal data you provide to us as part of your application, in particular:

  • identity data (surname, first name and, where provided, date of birth);
  • contact details (address, email address, telephone number);
  • application documents (cover letter, CV, references, certificates and proof of qualifications);
  • information needed to check your right to work, where relevant;
  • the content of our communication with you and, where applicable, interview notes.

If you apply through a recruitment agency or are referred to us by a third party, we receive your data from that source. Special categories of personal data (Art. 9 GDPR, for example health data) are processed only if you provide them of your own accord or where the law requires it, for example to make reasonable adjustments to the recruitment process; in these cases we rely on Art. 9(2)(b) GDPR together with Schedule 1 of the Data Protection Act 2018 (United Kingdom) or section 46 of the Data Protection Act 2018 (Ireland).

3. Purposes and legal bases

We process your data to carry out the recruitment procedure, that is, to decide whether to establish an employment relationship with you. The legal bases are:

  • Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract);
  • Art. 6(1)(c) GDPR (compliance with legal obligations, for example checking your right to work);
  • Art. 6(1)(f) GDPR (our legitimate interest in running an efficient recruitment process and in establishing, exercising or defending legal claims, for example under the Equality Act 2010 in the United Kingdom or the Employment Equality Acts in Ireland);
  • Art. 6(1)(a) GDPR (your consent, for example for retention in our talent pool; see our Explicit Consent Declaration for Job Applicants).

4. Recipients of your data

Within our organisation, only those involved in the decision on your application have access to your data (human resources, the relevant department and management). Where a position concerns another company of our group, that company may receive your data for the purpose of the decision. IT and email service providers engaged under data processing agreements (Art. 28 GDPR) may have technical access to the data. We do not sell your data.

5. Transfers outside the UK and the EEA

If your application data is transferred to a country outside the United Kingdom and the European Economic Area, for example within our group, we do so only in accordance with Chapter V of the GDPR: to countries covered by UK adequacy regulations or an EU adequacy decision, or subject to appropriate safeguards, in particular the European Commission's standard contractual clauses (supplemented, for transfers from the United Kingdom, by the UK International Data Transfer Addendum) or the ICO's International Data Transfer Agreement (IDTA). You can request a copy of the safeguards using the contact details above.

6. Retention period

If you are hired, your application data will be transferred to your personnel file. Otherwise, we generally retain your data for six months after the conclusion of the recruitment procedure so that we can respond to any legal claims; after that it is deleted or destroyed. Longer retention, for example in our talent pool for future vacancies, takes place only with your consent.

7. Your rights

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
  • Right to withdraw your consent at any time, with effect for the future (Art. 7(3) GDPR)

To exercise your rights, simply email info@engivolt.net. We will respond within one month.

If you are unhappy with how we have handled your data, please contact us first; we will acknowledge your complaint within 30 days. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR): in the United Kingdom, the Information Commissioner's Office (ico.org.uk); in Ireland, the Data Protection Commission (dataprotection.ie); elsewhere in the EEA, the supervisory authority of the country where you live or work.

8. Necessity of providing your data

Providing your data is necessary for carrying out the recruitment procedure. Without this data we cannot consider your application.

9. No automated decision-making

No automated individual decision-making, including profiling, within the meaning of Art. 22 GDPR takes place in the recruitment procedure.