LOCH LOMOND GROUP CANDIDATE PRIVACY NOTICE

Loch Lomond Distillers Limited (“Loch Lomond Group”, “we”, “us” and “our”) is committed to protecting your privacy. This Notice explains how we collect, use and share personal data relating to those individuals who apply to work at the Loch Lomond Group in any capacity, whether directly or indirectly (for example, via a recruitment agency).

• personal details, including your name, maiden name and surname, personal e-mail, home telephone number, mobile telephone number, home address, date of birth, city and country of birth, national identification number and/or passport number, gender, marital status, social security number, signature and photograph;
• immigration information, including ID card, passport data, details of residency status and work permit or visa;
• information collected through the use of CCTV, including images;
• recruitment information, including job application, resume/CV and interview notes, previous employment background and all background checks (including criminal record checks where applicable);

We collect your personal data during the course of our recruitment process, for example through material submitted as part of your application, or records generated when you engage with us. Otherwise, we gather personal data about you when you provide it to us.

We use your personal data for the following purposes:

• recruitment: to manage our recruitment application process and to enter into an employment or other working relationship with you if your application is successful;
• communications and emergencies: to facilitate communication with candidates, to protect the health and safety of candidates, existing Loch Lomond Group personnel and others and to facilitate communication in an emergency;

We use your personal data on the following basis:

• to enable us to take steps prior to entering into an employment relationship with you;
• for the legitimate interests of Loch Lomond Group, being the purposes set out in the “How do we use your personal data?” section above; and
• to comply with certain legal and regulatory obligations of Loch Lomond Group.

Due to the nature of our business, we need to be able to share your personal data across the Loch Lomond Group. This means that we may share certain of your personal data with:

• members of the Loch Lomond Group of companies;
• your interviewer and others in your prospective management team; and
• personnel and other functions throughout Loch Lomond Group including HR, Finance, Governance, Legal and IT.

Your personal data may be processed by Loch Lomond Group, its affiliated companies and those other parties described above, outside the European Economic Area. Where the European Commission has not issued an adequacy decision in relation to the jurisdiction where your personal data is processed, we will ensure that there are adequate mechanisms in place to protect your personal data in accordance with applicable data protection and privacy law. We will do this through use of data transfer agreements implementing standard data protection clauses.

We adopt a variety of internal information security measures to keep your personal data safe, including to protect it from unauthorised access, use, disclosure, alteration or distribution. In addition, our IT providers have adopted high information security standards. Where Loch Lomond Group retains a third-party service provider, that provider will be carefully selected in accordance with Loch Lomond Group’s policies and procedures.

We will always keep your personal data for the period required by law. We will also keep your personal data where we need to do so in connection with legal action or an investigation involving Loch Lomond Group. Otherwise, we will only keep your personal data for the period necessary to fulfill the purposes outlined above which will usually require us to keep your personal data for the duration of the recruitment process plus an additional six months thereafter. If you become an employee of Loch Lomond Group your personal data will be retained in accordance with our Employee Privacy Notice.

You may be entitled to:

• request the correction of your personal data;
• request the deletion of your personal data in certain circumstances, for example where your personal data is no longer required for the purposes set out in the “How do we use your personal data?” section above;
• request the restriction of the processing of your personal data in certain circumstances;
• object to the processing of your personal data. In this case, we will no longer process your personal data unless there are compelling legitimate grounds for doing so or where it is necessary in relation to a legal claim;
• ask Loch Lomond Group about the processing of your personal data and to be provided with a copy of your personal data; and
• request receipt or transmission to another organisation, in a machine-readable form, of the personal data that you have provided to Loch Lomond Group.

If you have questions about the processing of your personal data, or need additional information, please contact the HR team dealing with your application or email payroll@lochlomondgroup.com or dataprotection@lochlomondgroup.com.

Loch Lomond Distillers Limited (and where applicable) the local Loch Lomond company which you have applied to work for are the controllers of your personal data. To identify the entity you have applied to work for, please contact please contact us via the method set out in the “Contact us” section of this Notice above.