PRIVACY NOTICE
This Privacy Notice tells you how Kentucky Fried Chicken (Great Britain) Limited ("KFC", "we" or "us") processes your personal data when you apply for a position with KFC. It also describes your data protection rights, including a right to object to some of the processing which KFC carries out. More information about your rights, and how to exercise them, is set out in the Your Choices and Rights section.
We also may provide you with additional information when we collect personal data, where we feel it would be helpful to provide relevant and timely information.
What Personal Data We Collect
We process the following types of personal data when you apply for a position with us.
• Data you provide to us: We collect and store any data you provide us through your application on our recruitment portal, including your first and last name; contact details; email address and telephone number; your user account information; your application materials (CV, cover letter, current and/or previous work experience and affiliations including work address and location, education, qualifications and skills, and transcripts, and our notes from any interviews with you); your desired salary, job title role, type and location of employment sought and date available; your identification documents (passport number, national insurance number and/or government identification numbers where permitted, immigration status); your signature; and any other data you submit to us, including any correspondences you may have with us during the application process. We may also collect, store and use more sensitive types of personal information such as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs; trade-union membership; genetic data, biometric data processed solely to identify a human being; health-related data; criminal history in accordance with local laws.
• Data from other sources: We obtain data about you from other sources, including recruiters, employment research firms, identity verification services, the references you provide to us, websites and other publicly accessible data on the Internet. We may also receive data you submit to us through third-party websites. In certain countries, where permitted, we collect details of professional registrations, and sanctions with professional bodies, financial checks or criminal convictions where you have consented to background checks.
• Information we collect automatically: When you make an application through our online portal, we may collect information sent to us by your computer, mobile phone or other access device. For example, this includes the pages you access, your computer IP address, device identifiers, the type of operating system you are using, your location, mobile network information, standard web log data and other information, your browser type and traffic to and from our site.
Why We Collect, Use and Store this Personal Data
We collect, use and store your personal data for the reasons set out below:
• Where this is necessary for KFC to review and assess your application for employment.
o This includes assessing your skills and interest in career opportunities at KFC, processing your application, analyzing your qualifications, verifying your identity and your eligibility for employment, and communicating with you about your application to respond to your inquiries and schedule interviews.
• Where necessary for KFC's legitimate interests, as listed below, and where our interests are not overridden by your data protection rights.
o Protecting our legitimate business interests. This includes, but is not limited to, making a decision about your recruitment or appointment and determining the terms on which you work for us.
o Maintaining the security and integrity of our facilities, equipment and electronic platforms. This includes administering access rights, monitoring compliance with company protocols, and where permitted by local law and in accordance with relevant policies, for investigations and disciplinary actions.
• Where necessary to comply with a legal obligation.
o Disclosures to law enforcement agencies or in connection with legal claims, or regulatory purposes (including disclosure of such information in connection with legal process or litigation).
o Protecting our legal rights. This includes, but is not limited to, use in connection with legal claims, compliance, regulatory, auditing, investigative and disciplinary purposes (including disclosure of such information in connection with legal process or litigation) and other ethics and compliance reporting requirements.
o To analyse and monitor the diversity of the workforce in accordance with applicable laws. This includes, for example, compliance with equal opportunity employment laws.
• Where you have given consent.
o For example, we may ask for your permission to conduct a criminal background check.
Relying on our legitimate interests
We have carried out balancing tests for all the data processing we carry out on the basis of our legitimate interests, which we have described above. You can obtain information on any of our balancing tests by contacting us using the details set out later in this notice.
How We Share Your Personal Data
We share some of your personal data with other members of the KFC and Yum! Brands group to administer and manage group functions or to refer you for other open positions (including with franchisees who may then contact you directly).
Your personal data will also be shared with companies providing services under contract to KFC, such as training providers, help desk providers and IT hosting and/or IT maintenance providers.
Personal data will also be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the protection of our legitimate interests in compliance with applicable laws.
In the event that a KFC business is sold or integrated with another business (in part or whole), your details may be disclosed to our advisers and any prospective purchaser's adviser and will be passed to the new owners of the business / business unit.
Your Choices and Rights
You have the right to ask KFC for a copy of your personal data; to correct, delete or restrict processing of your personal data; and to obtain the personal data you provide in a structured, machine readable format. In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement or compelling interest). Where we have asked for your consent, you may withdraw consent at any time. If you ask to withdraw your consent to KFC processing your data, this will not affect any processing which has already taken place at that time.
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you have unresolved concerns, you have the right to complain to the data protection authority in the country you reside, where you work or where we are located.
To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch with us using the details set out below.
We will retain your personal data only for the duration of the recruitment process and, if you are unsuccessful or choose not to accept an employment offer, for a period of 12 months, unless we notify of a different retention period, so that we can keep you in mind for future roles. If you accept employment with us, we will retain your personal data throughout your employment in accordance with a separate notice we provide to you upon your acceptance of employment.
International Transfers
Your personal data will be processed in or accessed from jurisdictions outside the UK and/or European Economic Area ("EEA") by us and by some of the third parties to whom we share your personal data. We rely on international data transfer mechanisms, such as European Commission-approved standard contractual clauses and the ICO-approved UK Addendum, to transfer your personal data to Yum! Brands, Inc. in the United States. When we transfer your data to organisations outside the KFC and Yum! Brands, Inc. group we use European Commission-approved standard contractual clauses and the ICO-approved UK Addendum to safeguard the transfer. Where we transfer personal data to a third party that has implemented Binding Corporate Rules, we may rely on them to safeguard the transfer. For further information, including to obtain a copy of the documents used to protect your information, please contact us as described in the Contact Us section below.
Contact Us
The data controller for your personal data will be KFC. If you have questions about this Notice or wish to contact us for any reason in relation to our personal data processing, please contact us at globalprivacy@yum.com.