Job Applicant Privacy Notice

Dana Petroleum Limited is a "data controller". This means that we are responsible for deciding how we hold and use personal information about you.

You are being sent a copy of this privacy notice because you are applying for work with Dana Petroleum Limited or one of our subsidiary companies (whether as an employee, worker or contractor). It makes you aware of how and why your personal data will be used, namely for the purposes of the recruitment exercise, and how long it will usually be retained for. It provides you with certain information that must be provided under the General Data Protection Regulation ((EU) 2016/679) (“GDPR”).

If the position for which you are applying is based in the Netherlands, the information which you provide to us may be passed to our subsidiary company in the Netherlands, Dana Petroleum Netherlands B.V., which shall then become the “data controller” in respect of your personal information.

The information we hold about you

In connection with your application for work with us, we will collect, store, and use the following categories of personal information about you:

The information which you provide to us in your initial application, during an interview or during the application process.
Any information provided to us by your named referees.

We may also collect, store and use the following "special categories" of more sensitive personal information:

Information about your race, nationality or ethnicity, or your religious beliefs.
Information about your health, information regarding any medical condition and any information provided to us by our occupational health providers in the event that the nature of the role for which you are applying means that a pre-employment medical examination is required.

We will use the personal information we collect about you to:

Assess your skills, qualifications and suitability for the role.
Carry out background and reference checks, where applicable.
Communicate with you about the recruitment process.
Keep records related to the recruitment process.
Comply with legal or regulatory requirements and deal with any disputes that may arise.
In the case of the information about your race, nationality or ethnicity, or your religious beliefs, to ensure meaningful equal opportunity monitoring and reporting.
In the case of information about your health, in order to assess your working capacity on health grounds. We will also use any information about disability status to consider whether we need to make appropriate adjustments during the recruitment process, for example whether adjustments need to be made during a test or interview.

We consider that it is in our legitimate interests to collect and process the information referred to above in order to decide whether to appoint you to a role within our business. We also require to process the information to decide whether to enter into a contract with you and, if an offer is made, to decide upon the terms of any offer which is made.

If you fail to provide personal information

If you fail to provide information which is requested, and which is necessary for us to consider your application (such as evidence of your qualifications or work history), we will not be able to process your application successfully. For example, if we require references for the role and you fail to provide us with relevant details, we will not be able to take your application further.

Automated decision-making

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.

Data sharing – subsidiary companies of Dana Petroleum Limited

We may require to share your personal information with subsidiary companies of Dana Petroleum Limited for the purposes of processing your application. In the event that your personal information requires to be transferred outwith the European Economic Area (“EEA”), we will ensure that appropriate technical and organisational safeguards are in place in accordance with relevant data protection legislation, or that a specific derogation applies under relevant data protection legislation, for the transfer of personal information outside the EEA. If you require any further information in this regard, please contact our Head of Ethics and Compliance at the following e-mail address – general.info@dana-petroleum.com.

Data sharing – third parties

We may require to share your personal information with our occupational health providers for the purposes of processing your application, in the event that the nature of the role for which you are applying means that a pre-employment medical examination is required. All of our third party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We only permit our third party service providers to process your personal data for specified purposes and in accordance with our instructions.

Data security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who require access to the information for legitimate business purposes. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

Data retention - how long will your information be used for?

In the event that your application is not successful, we will retain your personal information for a period of six months after we have communicated to you our decision not to appoint you to the role. If the position for which you are applying is based in the Netherlands, we will retain your personal information for a period of four weeks after we have communicated to you our decision not to appoint you to the role, in order to comply with the guidance of the Dutch Data Protection Authority.

We retain your personal information for those periods so that we can show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way. After those periods have expired, we will securely delete or destroy your personal information in accordance with our Data Retention Schedule.

If we wish to retain your personal information on file for a longer period for the purposes of future job opportunities, we will write to you separately seeking your explicit consent to retain your personal information on that basis. If the position for which you are applying is based in the Netherlands, the maximum period for which we will retain your personal information with your consent for such purposes shall be one year, in compliance with the guidance of the Dutch Data Protection Authority

In the event that your application is successful, and you commence work for us, you will be provided with a copy of our Data Protection Policy, and any personal data will be processed in accordance with the terms of the Data Protection Policy.

Your rights in connection with personal information

Under data protection legislation, you have the following rights in connection with your personal data, which can be exercised at any time. These rights may be exercised in accordance with, and subject to, applicable data protection legislation:

Right of access: you can request a copy of the personal information we hold about you and check we are processing it lawfully;
Right to rectification: you can request that any incomplete or inaccurate information we hold about you is corrected;
Right to erasure: you can request that we delete your personal information where there is no good reason for us to continue to process it. You must provide valid reasoning for your request. This can be exercised in conjunction with the right to object (see below);
Right to object: you can object to our processing of your personal information where we are processing on the basis of our ‘legitimate interest’ or that of a third party. We shall cease processing your personal data unless there are compelling and legitimate grounds for processing which override your interests;
Right to restrict processing: you can request that we restrict our processing of your personal information. Information will be retained but not further processed;
Right to data portability: where processing of personal data is carried out by automated means, you can request the transfer of your personal information to another party;
Right to withdraw consent: where we are processing your personal data on the basis of consent, you have the right to withdraw your consent at any time;
Right to not be subject to decision making based on automated processing: you shall have the right to not be subject to decision making based solely on automated means including profiling; and
Right to complain: you have a right to lodge a complaint with a Supervisory Authority, which is an independent public authority established in each EU member state in accordance with Data Protection Legislation. The Supervisory Authority for data protection issues in the United Kingdom is the Information Commissioner’s Office. The Supervisory Authority for data protection issues in the Netherlands is the Dutch Data Protection Authority.

If you would like to exercise any of your rights, please use the contact details listed below or, in the case of the right to complain, please contact the relevant Supervisory Authority. In the United Kingdom, the Information Commissioner’s Office can be contacted via their website – www.ico.gov.uk. In the Netherlands, the Dutch Data Protection Authority can be contacted via their website - www.autoriteitpersoonsgegevens.nl.

Further information

If you have any questions about this privacy notice or how we handle your personal information, please contact our Head of Ethics and Compliance, Dana Petroleum Limited, King’s Close, 62 Huntly Street, Aberdeen AB10 1RS. The Head of Ethics and Compliance can also be contacted at general.info@dana-petroleum.com