If you apply for a role with us (regardless of whether this is for a direct role, which includes executive recruitment, or for a contractor or worker position) or register an interest in working for us, we use your personal information in connection with this application.
This notice should be read in conjunction with the Overview.
What processing activities do you undertake that include my personal information?
If you are successful in applying for a role, before your engagement with us begins, we undertake appropriate vetting.
This includes, where relevant and appropriate, credit checks, driving licence checks, identity fraud checks, criminal record checks (if and to the extent permitted by applicable laws), relevant employment history, relevant regulatory status and professional qualifications, social media checks on publicly available information and vetting planned business or personal travel to certain higher-risk destinations.
What categories of personal information are included in these processing activities?
To run the processes set out above, we process Staff related data, Data related to your engagement with the Company, Recruitment data, Vetting data, Regulatory data, Monitoring data (to the extent permitted by applicable laws) and Employment claims, complaints and disclosures data.
You may be asked to make disclosures to us of any conflicts of interests (in the form of connections to customers or competitors), as well as political affiliations (a special category of personal information and criminal convictions if relevant.
What is the reason for these processing activities?
We undertake vetting to protect our business, to protect the national security interests of the United Kingdom and other relevant jurisdictions in which we do business, to comply with security requirements of the government of the United Kingdom or of another relevant jurisdiction, and to ensure that only appropriately qualified and suitable individuals are employed by the Company.
What are the legal grounds you rely on to carry these out?
Depending on the vetting requirements for each role, the process is necessary:
- for the compliance with legal obligations to which the Company is subject; and/or
- to take steps at your request to enter a contract of employment; and/or
- for the purpose of the legitimate interests pursued by the Company.
(See “What are the legal grounds for processing personal information?” in the Overview section.)
What are the 'legitimate interests' referred to above?
The Company needs to make decisions relating to the future of its business in order to preserve its business operations or grow its business. These interests include the interests of the workforce as a whole and the BAE Systems customer base.
The Company considers that it has a legitimate interest in fully assessing applications for employment to ensure that only suitable and appropriate candidates are employed.
The Company has a legitimate interest in adhering to security requirements issued by the government of the United Kingdom or another relevant jurisdiction in which the Company operates.
The Company also considers that it has a legitimate interest in complying with all applicable laws it is subject to in other jurisdictions in which it does business.
As this processing may include special categories of personal information or information relating to my criminal record, in addition to the above, what are the additional legal grounds you rely on to justify this processing?
This processing is needed for carrying out our employment law obligations.
This processing is necessary for reasons of substantial public interest.
The processing relates to personal information manifestly made public by the data subject.
The processing is needed for legal claims.
(See “What are the legal grounds for processing special category personal information” in the Overview section.)
To the extent that you did not get this personal information from me, how did you collect this information?
Some personal information will be generated by internal sources, as set out in this Notice (see “Where do you get my personal information from?” in the Overview section). This will include from the relevant recruiter, HR and the hiring manager.
The results of these checks will come from the Company's external suppliers and partners. We may receive information from other sources as set out in this Notice (see “Where do you get my personal information from?” in the Overview section).
In addition, we may also gather some personal information from publicly available sources.
Who do you share this personal information with?
Your personal information is shared internally, as set out in this Notice (see “When do you share my personal information with others?” in the Overview section). This would usually include HR, the Security team and the relevant hiring manager.
In addition, some of your personal information will be shared with our suppliers as needed to carry out the checks, and as otherwise set out in this Notice (see “When do you share my personal information with others?” in the Overview section).