Recruitment Privacy Policy

How we collect, use, share and protect the personal data of job applicants.

Process Owner

Head of Human Resources and Culture

Effective Date

18 July 2019

Last Updated

12 June 2026

On this page


Introduction

MTS is aware of its obligations under the General Data Protection Regulation (GDPR) and applicable UK data protection legislation and is committed to processing all MTS job applicant's data securely and transparently. This privacy notice sets out, in line with data protection obligations, the types of personal data that we collect and hold for a job applicant. It also sets out how we use that information, how long we keep it for and other relevant information about the data.


Data Protection Officer at MTS

Our Data Protection Officer is the CEO, Michal Mazanek, who may be reached at:


The job applicant's rights in relation to their data

The law on data protection gives certain rights in relation to the personal data we hold on to a job applicant. These are:

  • The right to be informed. This means that we must tell the job applicant how we use their data, and this is the purpose of this privacy notice.
  • The right of access. The job applicant has the right to access the data that we hold on to them. To do so, they should make a Data Subject Access Request.
  • The right for any inaccuracies to be corrected. If any data that we hold about the job applicant is incomplete or inaccurate, they can require us to correct it.
  • The right to have information deleted. If the job applicant would like us to stop processing their data, they have the right to ask us to delete it from our systems where they believe there is no reason for us to continue processing it.
  • The right to restrict the processing of the data. For example, if the job applicant believes the data we hold is incorrect, we will stop processing the data (whilst still holding it) until we have ensured that the data is correct.
  • The right to portability. The job applicant may request a transfer of the data that we hold on to them for their own purposes.
  • The right to object to the inclusion of any information. The job applicant has the right to object to the way we use their data where we are using it for our legitimate interests.
  • The right to regulate any automated decision-making and profiling of personal data. The job applicant has a right not to be subject to automated decision making in way that adversely affects their legal rights.

If an employee wishes to exercise any of the rights explained above, please contact the HR team on gdpr@mtsglobal.uk.com.


Types of data we process

We may hold many types of data about a job applicant, including:

  • personal details including name, address, date of birth, email address, phone numbers
  • photographs
  • gender
  • marital status
  • information relating to disability status where relevant
  • information included on their CV including references, education history, employment and financial history
  • documentation relating to the right to work in the UK
  • copies of documents such as a driving licence, passport, etc
  • CCTV footage

We may also process special categories of data such as health, race, ethnic origin, religion, belief, etc for the purposes of equal opportunities monitoring. However, we will only be able to process these special categories of data upon the explicit consent given by the job applicant.

Due to the nature of the business and to meet our key exams partners' safeguarding and compliance requirements as we work with children and vulnerable adults, we will also collect criminal conviction data for the job applicant. This data will usually be collected at the recruitment stage, however, may also be collected during the employment should the job applicant be successful in obtaining employment.

Personal data is kept in personnel files and/or within our HR and IT systems.


Sharing of the job applicant's data

The job applicant's data will be shared with colleagues within MTS where it is necessary for them to undertake their duties regarding recruitment. This includes, for example, the HR department, the hiring panel, the IT department where the job applicant requires access to our systems to complete assessments or recruitment activities involving MTS systems or equipment, the Finance department for payment and as well as to any third parties e.g. exams partners if they are successful in their job application.


Protecting the job applicant's data

MTS recognises the obligations to ensure the data is protected against accidental loss or disclosure, destruction and abuse. Where we need to share the data with third parties, we will provide written instructions to them to ensure that the data are held securely and in line with data protection requirements. Third parties must implement appropriate technical and organisational measures to ensure the security of the data.


How long we will keep the job applicant's data

In line with data protection principles, we only keep the data for as long as we require it and this will depend on whether the job applicant is successful in securing employment with us.

If the application is not successful

We will keep the application for 1 year from application in case for potential future openings or to protect against bias or discrimination claims.

If the application is successful

We will keep the application for the period of employment and for 6 years thereafter, for compliance with employment law and audit requirements. At the end of this period, we will delete or destroy the data.

The job applicant also has the right to withdraw the consent for us to cease retaining their data at any time before the end of the retention period.

If a job applicant or new employee wishes to exercise any of the rights explained above, please contact the HR team on gdpr@mtsglobal.uk.com.


Making a complaint

The supervisory authority in the UK for data protection matters is the Information Commissioner's Office (ICO). If a job applicant thinks their data protection rights have been breached in any way by us and they have not received a satisfactory resolution from us, they are able to make a complaint to the ICO, and equivalent bodies cover territories outside the UK.