This policy was last updated on 25th June 2021
Chevron Group of Companies is committed to protecting and respecting your privacy. We take our
This Policy comprises the Core Policy and Annex 1 Supplementary information. The Core Policy contains key information, about the way Chevron use your personal data. Annex 1 -Supplementary information contains additional information.
- what personal data we hold and why we process it;
- the legal grounds that allow us to process your personal data;
- where the data comes from, who gets to see it and how long we keep it;
- how to access your personal data and other rights;
- how to contact us
We hold various types of data about the individuals who apply to work for us, including their personal details and work history.
We process this data for the purposes of our business, including management, administrative, employment and legal purposes. For more information see the section Personal data we process and our purposes.
Under data protection legislation, there are various grounds on which we can rely when processing your personal data. In some contexts, more than one ground applies. We have summarised these grounds as Contract, Legal Obligation, Legitimate Interests and Consent. For more information see the ‘Glossary’ and ‘Further information – Legal grounds for processing personal data’ section.
When you apply to work for us the initial personal data about you that we process is likely to come from you, or third-party recruiters, agents and similar organisations. This data includes for example, contact details, employment history and information on your immigration status and whether you can lawfully work. The recruitment agency might ask you to complete a work preference questionnaire which is used to assess your suitability for the role you have applied for, the results of which are assessed by recruiters.
We may also require references and information to carry out background checks. If you have concerns about this, you should speak to your recruiter or our HR department.
Your personal data may be disclosed to managers, HR and administrators for the purposes of considering your application as mentioned in this document. If you are applying for a general position within Chevron then your details may be passed to relevant Chevron company. If you are applying for a specific role with a Chevron company your details maybe passed to another Chevron company, if we feel there may be a suitable position.
We will only disclose your personal data outside Chevron if disclosure is consistent with one or more of our legal grounds for processing and if doing so is lawful and fair to you.
We may disclose your personal data if it is necessary for our legitimate interests as an organisation or the interests of a third party, such as if we use a recruitment portal managed by a third-party provider we may send your personal data on to that third party (but we will not do this if these interests are over-ridden by your interests and rights in particular to privacy).
We may also disclose your personal data outside Chevron:
- if you consent to the disclosure;
- where we are required to do so by law;
- in connection with criminal or regulatory investigations. Specific circumstances in which your personal data may be disclosed include:
- Disclosure to organisations that process data on our behalf such as: our payroll service; insurers and other benefit providers; our bank; organisations that host our IT systems and data; professional service providers such as legal advice. This would normally occur if you accept an offer from us and would be carried out as part of the on-boarding process;
- To third party recruitment consultants and similar businesses (including online recruitment portals) as a part of the recruitment process.
We will retain your personal information for a period of 12 months after we have communicated to you our decision about whether to appoint you. We retain your personal information for that period so that we can:
- Show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way.
- Let you know about any further opportunities, that may arise in the future, that we think may be of interest to you based on your personal information and that we may wish to consider you for. After this period, we will securely destroy your personal information in accordance with applicable laws and regulations.
If you become employed by us, we will keep your personal data for the duration of your employment and for a period afterwards. Our Data Retention and Deletion Policy contains details of the retention period of employment records.
If your data is only useful for a short period (e.g. CCTV footage data) we will delete it.
In connection with our business and for employment, administrative, management and legal purposes, we may transfer your personal data outside the EEA if required. We will ensure that the transfer is lawful and that there are appropriate security arrangements.
Where we need to transfer your information outside of the European Economic Area we only do so to countries which have been determined by the European Commission to have an adequate level of data protection or by using a variety of legal mechanisms, including Standard Contractual Clauses, to help ensure your rights and protections.
You have specific rights connected to provision of your personal information to Chevron, although in some cases these rights are subject to certain conditions and limitations. To exercise any of these rights please contact us using the contact details in the section Contact details on page 4.
You can request a copy of the information held relating to you. Please ensure that you include your name and clear instructions on what you would like us to do. If you require us to supply you with details of the personal information that we hold about you, then we will provide this information free of charge and we will provide this information to you within one month of your request unless the request is complex or is numerous requests. If this is the case, we will inform you within one month of your request about the reason for the extension of time.
You have the right to have your personally identifiable data deleted.
Right of rectification If you believe the records that Chevron keep are inaccurate, you have the right to ask for these to be updated.
You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the ‘unsubscribe’ or ‘opt-out’ link in the marketing e-mails we send you. You can also opt out of other forms of marketing (such as postal marketing or telemarketing), by contacting us.
If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
If you have complaints relating to our processing of your personal data, you should raise these with the Chevron compliance department; see section Contact details or you can raise directly with the relevant supervisory authority.
In the UK: Information Commissioner’s Office (ICO). They can be contacted via their website
Chevron Group (UK office), ATTN: Compliance Department
Unit J2, Sharston Road, Sharston Industrial Estate
Manchester M22 4SN
ANNEX 1: Supplementary information
‘Data Protection Legislation’ means all applicable legislation, local laws and regulations relating to
data protection and privacy, including the EU General Data Protection Regulation (EU GDPR) and the
UK General Data Protection Regulation (UK GDPR), together with any national implementing laws in
any Member State of the European Union or, to the extent applicable, in any other country, each of
the foregoing as amended, repealed, consolidated or replaced from time to time.
‘Personal data’ is information relating to you (or from which you may be identified) which is
processed by automatic means or which is (or is intended to be) part of a structured manual filing
system. It includes not only facts about you, but also intentions and opinions about you.
Personal data ‘processed automatically’ includes information held on, or relating to use of, a
computer, laptop, mobile phone or similar device. It covers data derived from equipment such as
access passes within a building, data on use of vehicles and sound and image data such as CCTV or
‘Processing’ means doing anything with the data. For example, it includes collecting it, holding it,
disclosing it and deleting it.
‘Sensitive personal data’ means personal data revealing racial or ethnic origin, political opinions,
religious or philosophical beliefs, health, sexual orientation, sex life, trade union membership and
genetic and biometric data. These types of data are subject to special protection under the law. In
the UK this also includes actual and alleged criminal convictions.
include any arrangement under which an individual works for us or provides services to us or applies
to provide services. This includes individuals who are our employees and also those who provide
services under a freelance or independent contractor arrangement. Similarly, when we mention an
‘employment contract’, this should be taken to include any contract with an employee, a freelancer
or a contractor; and when we refer to ending your potential ‘employment’, that includes
terminating a freelance engagement or a contract for services.
Further information – Legal grounds for processing personal data
What are the grounds for processing?
Under data protection legislation, there are various grounds on which we can rely when processing
your personal data. In some contexts, more than one ground applies. We have summarised these
grounds as Contract, Legal obligation, Legitimate Interests and Consent and outline what those
terms mean in the following table.
|Term||Ground for processing||Explanation|
|Contract||Processing necessary for performance of a contract with you or to take steps at your request to enter a contract.||This covers carrying out our contractual duties and exercising our contractual rights.|
|Legal Obligation||Processing necessary to comply with our legal obligations||Ensuring we perform our legal and regulatory obligations. For example, providing a safe place of work and avoiding unlawful discrimination.|
|Legitimate Interests||Processing necessary for our or a third party’s legitimate interests.||We (and third parties) have legitimate interests in carrying on, managing and administering our respective businesses. Part of managing businesses will involve the processing of your personal data. Your data will not be processed if, in processing your data, your interests, rights and freedoms related to the data override the businesses’ interests in processing the data for businesses purposes|
|Consent||You have given specific consent to processing your data.||In general processing of your data in connection with employment is not conditional on your consent. But there may be occasions where we do specific things such as provide a reference and rely on your consent to do so.|
Processing sensitive personal data
If we process sensitive personal data about you (for example (but without limitation), processing your health records to assist us in ensuring that we provide you with reasonable adjustments during any recruitment process), as well as ensuring that one of the grounds for processing mentioned above applies, we will make sure that one or more of the grounds for processing sensitive personal data applies. In outline, these include:
- Processing being necessary for the purposes of your or our obligations and rights in relation to employment in so far as it is authorised by law or collective agreement;
- Processing relating to data about you that you have made public (e.g. if you have told us you are ill);
- Processing being necessary for the purpose of establishing, making or defending legal claims;
- Processing being necessary to provide any necessary reasonable adjustments during the recruitment process.
Personal data we process and our purposes
The purposes for which we process your personal data, examples of the personal data that may be processed and the grounds on which we process it are set out in the table below.
The examples in the table cannot, of course, be exhaustive. For example, although the table does not mention personal data relating to criminal offences, if we were to find out that someone applying to work for us was suspected of committing a criminal offence, we might process that information if relevant for our purposes.
|Purpose||Examples of personal data that may be processed||Grounds for processing|
|Recruitment||Standard data related to your identity (e.g. your name, address, email address, ID information and documents, telephone numbers, place of birth, nationality, contact details, professional experience and education (including university degrees, academic records, professional licenses, memberships and certifications, awards and achievements, and current and previous employment details), financial information (including current salary information) language skills, and any other personal data that you present us with as part of your application related to the fulfilment of the role.
Information concerning your application and our assessment of it, your references, any checks we may make to verify information provided and any information connected with your right to work. If required for the role we may perform background checks with your consent. If appropriate we may also perform a criminal record search. Within the EU and the UK, we will only perform this if we are legally required to do so or have your explicit consent. If necessary, we will also process sensitive information concerning your health, any disability in connection with any adjustments to working arrangements. Please note also that we may process your personal data both in relation to an application for one job, and in relation to an application for another job for which we feel you may be suitable
|Administering our recruitment process||Evaluating your experience and qualifications against the requirements of the position you are applying for. Administering our online careers portal. Communicating with you in respect of any offer of employment we choose to make and providing you with information about our onboarding process||Contract
|Entering into a contract with you (if you are made an offer by us)||Information on your terms of employment from time to time including your hours and working patterns, your pay and benefits, such as your participation in pension arrangements, life and medical insurance; and any bonus or share schemes||Contract
|Contacting you or others on your behalf||For the purpose of gathering references.||Contract
|Financial planning and budgeting||Information such as your proposed salary and (if applicable) envisaged bonus levels.||Legitimate interests|
|Physical and system security||CCTV images upon attendance for interview at our premises||Legal obligation Legitimate interests|
|Providing information to third parties in connection with transactions that we contemplate or carry out||Information on any offer made to you and your proposed contract and other employment data that may be required by a party to a transaction such as a prospective purchaser, seller or outsourcer.||Legitimate interests|
|Monitoring of diversity and equal opportunities||Information on your nationality, racial and ethnic origin, gender, sexual orientation, religion, disability and age as part of diversity monitoring initiatives. Such data will be aggregated and used for equality of opportunity monitoring purposes. Please note we may share aggregated and anonymized diversity statistics with regulators if formally required / requested.||Consent
|Disputes and legal proceedings||Any information relevant or potentially relevant to a dispute or legal proceeding affecting us.||Legitimate interests Legal obligation|