The Chartered Banker Institute is a professional Institute incorporated under Royal Charter, which is registered as a charity in Scotland (number SC013927) and having its principal office at Drumsheugh House, 38b Drumsheugh Gardens, Edinburgh EH3 7SW, United Kingdom.
This Privacy Notice sets out the Institute’s policy on the protection of information relating to job applicants. Protecting the confidentiality and integrity of personal data is a critical responsibility that the Institute takes seriously at all times. The Institute will ensure that data is always processed in accordance with the provisions of relevant data protection legislation, including the General Data Protection Regulation (GDPR).
- Data processing
Data processing is any activity that involves the use of personal data. It includes obtaining, recording or holding the data, or carrying out any operation or set of operations on the data including organising, amending, retrieving, using, disclosing, erasing or destroying it. Processing also includes transmitting or transferring personal data to third parties.
- Personal data
Personal data is any information identifying a data subject (a living person to whom the data relates). It includes information relating to a data subject that can be identified (directly or indirectly) from that data alone or in combination with other identifiers the Institute possesses or can reasonably access. Personal data can be factual (for example, a name, email address, location or date of birth) or an opinion about that person’s actions or behaviour.
- Sensitive personal data
Sensitive personal data is a special category of information which relates to a data subject’s racial or ethnic origin, political opinions, religious or similar beliefs, trade union membership, physical or mental health conditions, sexual life, sexual orientation, biometric or genetic data. It also includes personal data relating to criminal offences and convictions.
This policy, together with the information contained in the table of applicant data appended to the policy, constitutes a privacy notice setting out the information the Institute holds about applicants, the purpose for which this data is held and the lawful basis on which it is held. The Institute may process personal information without applicants’ knowledge or consent, in compliance with this policy, where this is required or permitted by law.
If the purpose for processing any piece of data about applicants should change, the Institute will update the table of applicant data with the new purpose and the lawful basis for processing the data and will notify applicants.
FAIR PROCESSING OF DATA
COLLECTION AND RETENTION OF DATA
DATA SECURITY AND SHARING
STAFF MEMBER RIGHTS AND OBLIGATIONS
COMPLIANCE WITH THIS POLICY