Recruitment Privacy Policy

Gravity Media Group Limited, trading as Gravity Media (“We“, “Us”, “Our”) are committed to protecting and respecting your privacy. Gravity Media Holdings Limited issues this notice on behalf of its group of companies that trade under Gravity Media.

This privacy notice lets you know what happens to any personal data that you give to us, or any that we may collect from or about you. It also contains useful information about who to contact in the event you have a question or query.

As appropriate, We may disclose your information to any of group of companies that trade under Gravity Media for the purposes of supporting an applicable for a role with Us.

For the purpose of the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, and other relevant legislation, the data controller is Gravity Media Group Limited of 32-34 Greenhill Crescent, Watford Business Park, Watford, Herts WD18 8JU, company number 03879766. If you have any queries relating to Our use of your personal data or any other related data protection questions, please contact Our data protection team by using the following email address: grp-uk-data_protect@gravitymedia.com.

What data will we process

We may collect personal data (including special categories of personal data and personal data relating to criminal convictions and offences) that you submit to us in support of an application for a role with us.

Types of personal data collected as part of the recruitment process include:

Name
Address
contact details (email address and phone number)
Date of birth
Gender
Previous employment details
Education history
Qualifications and skills; and
anything else that is contained in your CV, together with your cover letter
Information from third parties such as references supplied by your former employer
Evidence of entitlement to work
Salary history and expectations
D&I Data (Ethnicity and Disabilities – this is optional for candidates to complete)

We need your personal data so that we can consider you for the role you have applied for with us. We may also share your personal data with other people within Gravity Media for the same reasons.

If we decide to offer you a role with us, we may process your personal data so that we can hire you to work at Gravity Media. We process your data so that we can raise and offer you a contract of employment.

If we don’t offer you a role, we’ll of course stop processing your data. However, we may ask that we do keep your data for a time so that we can re-consider you for other roles with us. If that is ok with you, we would only process your data for these reasons.

We might also use your data to understand more about the demographics of people applying to work with us. This would be aggregated and anonymised so this information stops being personal data as we wouldn’t be able to identify you, and it wouldn’t be used to inform any decisions made about you.

With your consent we also collect ‘special category’ data to support the Gravity Media’s Ethnicity, Diversity, and Inclusion Strategy. This includes race, ethnic origin, and disability data and is anonymised once collected.

An individual’s rights under data protection law

You have the following rights in relation to your personal data:

A right to access your personal data held by us.
A right to receive certain personal data in machine-readable format.
A right to have inaccurate personal data rectified.
A right to object to processing where lawful basis is that it is in our legitimate interests, but please note that we may still process your personal data where there are other relevant lawful bases. This also comes into play where we have compelling grounds to continue processing your personal data in our interests which are not overridden by your rights, interests, or freedoms.
A right to have certain personal data erased where it is no longer necessary for us to process it, where you have withdrawn your consent (see paragraph below), where you have objected to the paragraph above, where your personal data has been unlawfully processed, or where erasing your personal data is required in accordance with a legal obligation.
A right to request an explanation of the logic involved where we make decisions about you solely through automated means.
A right to complain to a data protection supervisory authority in respect of our processing of your personal data.
Where we have specifically requested your consent to process your personal data and have no other lawful conditions to rely on you have the right to withdraw this consent.

If you’re not sure about your rights let us know or refer to published guidance from your data protection supervisory authority.

If you’d like to exercise any of your rights, then you can do so by contacting us. Note that whilst we’ll try to accommodate any request you make in respect of your rights, they are not absolute rights. This means that we may have to refuse your request or may only be able to comply with it in part.

Where you make a request in respect of your rights, we’ll require proof of identification. We may also ask that you clarify your request. If we receive repeated requests or have reason to believe requests are being made unreasonably, we may not be required to respond.

Keeping your personal data secure

We have appropriate security measures in place including policies and procedures to protect personal data.

Disclosing your personal data

As we’ve already mentioned, we might share some of your data with other colleagues within Gravity Media.

We will in some circumstances have to share your data with third parties, including third-party service providers. We will conduct third party due diligence and always ensure appropriate contracts are in place and we require all third parties to respect the security of your data and to treat it in accordance with the law. We will in some circumstances transfer your personal information outside the UK and EEA. If we do, you can expect a similar degree of protection in respect of your personal information.

We will share your personal information with third parties where required by law, where it is necessary administer the working relationship with you, or where it is necessary for the performance of our contract.

This will, in some circumstances, involve sharing special categories of personal data and, where relevant, data about criminal convictions/allegations. “Third parties” includes third-party service providers (including contractors and designated agents) and other entities within Gravity Media.

We may also share your information with third parties in the following situations:

Where we’re required to do so by law, court order or governmental authority.
If we believe doing so is necessary to protect the rights, property, security, or safety of us, our colleagues, or the public.
Where required to defend ourselves legally.
Where necessary to investigate and defend ourselves against any claims or allegations.
While negotiating or in relation to a business transaction, such as a merger, change of control, sale of assets, or bankruptcy.

Retaining your personal data

We’ll only hold on to your personal data for as long as is necessary so we can process it, as set out in this Privacy Notice. If you’re unsuccessful in your application and don’t want us to keep your personal data, then we’ll delete it within 12 months. If you’re successful, then we’ll continue to process your personal data in line with our employee privacy notice.

Please note that there may be legal or regulatory reasons which mean we need to hold on to your personal data for longer.

Contact Us

If you have any questions, please contact us.

We also have a Data Protection Officer who oversees data protection at Gravity Media. If you have got any queries regarding your personal data, you can contact the Data Protection Team by emailing grp-uk-data_protect@gravitymedia.com

Updates to this policy

This policy will be kept under continual review, and changes may be made from time to time.

Updated on: 05th April 2023