This Privacy Notice tells you how Kentucky Fried Chicken (Great Britain) Limited ("KFC", "we" or "us") processes your personal data when you apply for a position with KFC. It also describes your data protection rights, including a right to object to some of the processing which KFC carries out. More information about your rights, and how to exercise them, is set out in the Your Choices and Rights section.
We also may provide you with additional information when we collect personal data, where we feel it would be helpful to provide relevant and timely information.
What Personal Data We Collect
We process the following types of personal data when you apply for a position with us.
Why We Collect, Use and Store this Personal Data
We collect, use and store your personal data for the reasons set out below:
Relying on our legitimate interests
We have carried out balancing tests for all the data processing we carry out on the basis of our legitimate interests, which we have described above. You can obtain information on any of our balancing tests by contacting us using the details set out later in this notice.
How We Share Your Personal Data
We share some of your personal data with other members of the KFC and Yum! Brands group to administer and manage group functions or to refer you for other open positions (including with franchisees who may then contact you directly).
Your personal data will also be shared with companies providing services under contract to KFC, such as training providers, help desk providers and IT hosting and/or IT maintenance providers.
Personal data will also be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the protection of our legitimate interests in compliance with applicable laws.
In the event that a KFC business is sold or integrated with another business (in part or whole), your details may be disclosed to our advisers and any prospective purchaser's adviser and will be passed to the new owners of the business / business unit.
Your Choices and Rights
You have the right to ask KFC for a copy of your personal data; to correct, delete or restrict processing of your personal data; and to obtain the personal data you provide in a structured, machine readable format. In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement or compelling interest). Where we have asked for your consent, you may withdraw consent at any time. If you ask to withdraw your consent to KFC processing your data, this will not affect any processing which has already taken place at that time.
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you have unresolved concerns, you have the right to complain to the data protection authority in the country you reside, where you work or where we are located.
To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch with us using the details set out below.
We will retain your personal data only for the duration of the recruitment process and, if you are unsuccessful or choose not to accept an employment offer, for a period of 12 months, unless we notify of a different retention period, so that we can keep you in mind for future roles. If you accept employment with us, we will retain your personal data throughout your employment in accordance with a separate notice we provide to you upon your acceptance of employment.
Your personal data will be processed in or accessed from jurisdictions outside the European Economic Area ("EEA") by us and by some of the third parties to whom we share your personal data. We rely on the EU-U.S. Privacy Shield Framework to transfer your personal data to Yum! Brands, Inc. in the United States. When we transfer your data to organisations outside the KFC and Yum! Brands, Inc. group we use European Commission-approved standard contractual clauses to safeguard the transfer. Where we transfer personal data to a third party that has implemented Binding Corporate Rules, we may rely on them to safeguard the transfer. For further information, including to obtain a copy of the documents used to protect your information, please contact us as described in the Contact Us section below.
The data controller for your personal data will be KFC.
If you have questions about this Notice or wish to contact us for any reason in relation to our personal data processing, please contact us at firstname.lastname@example.org.
25 May 2018