This Specific Privacy Notice has been created to make it easier for you to understand what personal data Kent Police processes about you, how and why it will be used in connection with your employment. It is a requirement of the General Data Protection Regulation (UK GDPR).
It is subordinate to, and should be read in conjunction with, the appropriate high-level Privacy Notice for Kent Police.
The high-level Privacy Notice provides you with complete details of the rights you have relating to the personal data we hold about you now and any personal data we might collect about you in the future.
If you require this Specific Privacy Notice in Braille or in another language, please contact the Force’s Data Protection Officer (contact details below).
Who is the Controller (the person who determines the purpose and means by which your personal data is processed) and what are their contact details?
The Controller for Kent Police is:
Chief Constable of Kent Police Kent Police Headquarters Sutton Road Maidstone Kent ME15 9BZ
UK GDPR Article 13(1)(a) and Article 14(1)(a)
The DPO for Kent Police is:
Data Protection Officer Coldharbour London Road Maidstone Kent ME20 7SL
To manage your employment, and all activities in respect of your employment with either of the forces.
UK GDPR Article 13(1)(c)
The development and delivery of human resource management is achieved collaboratively across Kent Police and Essex Police. We will manage the personal data of those who apply to work within either force in any capacity and equally those who have subsequently left our organisation:
contractors or consultants
Kent Police will collect personal information about you to enable us to discharge our responsibilities as an employer. Types of personal data that we will collect and use includes, but is not limited to:
your contact details and date of birth
the contact details for your emergency contacts
your marital status and family details (for tax allowance purposes and the assignment of pension benefits in the event of death in service)
information relating to your contract of employment, performance and behaviour at work
Special Category data:
racial or ethnic origin
physical or mental health or condition
offences (including alleged offences)
criminal proceedings, outcomes and sentences
physical identifiers including DNA, fingerprints and other genetic samples
UK GDPR Article 14(1)(d)
The lawful basis for processing personal data is that it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject on entering into a contract (Article 6(b) UK GDPR) and processing is necessary for the purposes of the legitimate interests pursued by the controller (Article 6(f) UK GDPR), namely managing employment and resourcing.
The lawful basis for processing special category personal data is that you, the data subject, have given explicit consent to the processing of those personal data for one or more specified purposes, namely employment (Article 9(2)(a) UK GDPR) and processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment (Article 9(2)(b) UK GDPR), as well as processing is necessary for reasons of substantial public interest (Article 9(2)(g) UK GDPR) (DPA 2018, Sch.1, Part 1 and Sch.2, S.6, S.9-11, and S.21).
UK GDPR Article 13(1)(c) and Article 14(1)(c)
Kent Police obtains through recruitment and the HR process, personal information is supplied by you. In addition as part of the recruitment and vetting process, personal information relating to creditworthiness is obtained from credit reference agencies for vetting purposes, reference information is provided by referees identified by you or previous employers. Personal information relating to criminality (alleged or otherwise) is provided by other law enforcement agencies, and from existing Kent Police held information.
The personal information obtained through the HR process and subsequent activity is handled in accordance with the data protection legislation. In particular we ensure that personal information is handled fairly and lawfully with appropriate justification. We strive to ensure that any personal information used by us or on our behalf is of the highest quality in terms of accuracy, relevance, adequacy and non-excessiveness, is kept as up-to-date as required, is protected appropriately, and is reviewed, retained and securely destroyed when no longer required. All associated data rights are respected.
In order to carry out the purposes described under section 1 above, we may disclose some personal information provided by applicants to other police forces and credit reference agencies for vetting purposes, and to individuals providing references in support of any application.
In certain cases, the forces will use third parties to provide education services. Where you have provided your personal data to us for the purposes of the police constable recruitment process, we will provide your name, email address, and candidate ID to the third party to enable the confirmation of your identity.
We will also disclose personal information to other bodies or individuals when required to do so by, or under, any act of legislation, by any rule of law, and by court order.
UK GDPR Article 13(1)(e) and Article 14(1)(e)
No, all personal data remains within the UK.
UK GDPR Article 13(1)(f) and Article 14(1)(f)
UK GDPR Article 13(1)(f) and Article 14(1)(f)
Your personal data will form part of your personnel record with Kent Police and will be retained by the force for a minimum of six years after you leave our employment.
You may wish to initially raise any concerns with the Data Protection Officer.
UK GDPR Article 13(2)(d) and Article 14(2)(e)
If you choose not to provide us with certain personal data you should be aware that we may not be able to fulfil our legal obligations, or provide the necessary HR functions to/for you. For example, if you do not provide us with your bank account details we may not be able to pay you. It might also stop us from complying with certain legal obligations and duties which we have, such as to pay the right amount of tax to HMRC or to make reasonable adjustments in relation to any disability you may have.
UK GDPR Article 13(2)(e)
Kent Police do not generally utilise a fully ‘automated decision’ in the recruitment process; with the exception of the following three situations which can result in automated de-selection:
if required to be over 18 years old and the answer is ‘No’
the applicant states they are a member of a political party, terrorist group or organisation banned under UK law
if the requirement for a particular job is to hold a full UK driving licence with fewer than six penalty points and the applicant does not possess this
All other application criteria are physically checked given the variables involved.
UK GDPR Article 13(2)(f) and Article 14(2)(g)
Where an application is de-selected in this way the applicant will be notified and offered the opportunity to contact the relevant force in order to provide any further information or discuss the decision further.