This notice is provided by Oaxaca LTD (client), (company number 05836870), 5 Little Portland Street, W1W 7JD (“we”, “us” or “our”) and is addressed to all applicants for jobs with us through the website https://burritomama.ats.emea1.fourth.com (the “Site”). It applies until you formally accept an offer of employment from us (if applicable) at which point our privacy notice found at https://wahaca.co.uk/staff-privacy-policy will apply instead of this notice. Our data protection officer can be reached at email@example.com (client). You have the right to lodge a complaint with the Information Commissioner’s Office in relation to how your data is handled.
This notice relates to the personal data about you (and from which you can be identified) which you provide when you register for job vacancy alerts, create an account and/or apply for a job, through the Site. Your personal data belongs to you and it is your choice whether to provide this to us. In order to process your personal data we rely on your consent; you may withdraw this at any time (through the “account settings” section of the Site). However, please be aware that if you do this then (a) your account for the Site will be deleted; and (b) your data will be removed from any job applications of yours which are currently in process. If you have only registered your mobile number for job vacancies on the Site, you may withdraw your consent by contacting our Data Protection Officer at the email address in the first paragraph above.
We may obtain personal data about you including but not limited to:
We will use and process this data for the purposes of (1) creating your account and profile for the Site; (2) contacting you about any job which you have applied for through the Site; (3) evaluating your application for any job which you have applied for through the Site; (4) contacting you about vacancies (where you have signed up for these on the Site); (5) where you specifically consent to this, adding your CV to our Talent Pool (see below for more details about what this involves). We will share the personal data which you disclose to us with our chosen third party subprocessors who process data on our behalf to allow us to review and evaluate your job applications including performing right to work checks and creating and sending contracts for signature; these include hosting providers, site software providers, providers of electronic signature functionality and providers of right to work checks. Our subprocessors include Fourth Limited, who provide the software associated with the Site, and TrustID Limited, who assist with right to work checks. Where our subprocessors are based outside the European Union we will transfer your data in accordance with the provisions of applicable privacy law (including the GDPR 2016/679 and the Data Protection Act 2018). Please contact our Data Protection officer for details of the appropriate safeguards applied in each case.
We will keep your account data for so long as your account is active, and for 6 months after the date of your last login. Where you submit a CV, we will keep this for up to 6 months after the date of your application, irrespective of whether you are successful (and may keep for longer if you elect to be part of our Talent Pool, see below). Data subject requests (including a request to delete your account) may be submitted through the “account settings” section of your account.
Where you sign up for text alerts about job vacancies, we will keep the details of your phone number for 3 months, after which time such data will be deleted. If you would like your phone number to be deleted prior to the end of the standard 3 month period (or for any other data subject requests in relation to such data) please contact our Data Protection Officer at the email address in the first paragraph above.
Once data is deleted it will cycle through our usual backup processes for a period.
Where you have elected to join our Talent Pool:
Note that the data retention for Talent Pool data described above is separate from, and independent of, the data retention policies which apply to your data which you submit to the Site (see above under “Retention of Data on the Site” for more detail on those retention periods).