Recruitment Privacy Notice

Stannah Lifts Holdings Ltd, and all related entities in the Stannah Group (collectively, “Stannah” or “we” or “us”) hereby informs its candidates (hereinafter “you” or “your”) that your personal data processed during our recruitment process will be processed in compliance with the applicable privacy and personal data protection laws for the purposes and with the modalities indicated here below.

1. Data Controller and Data Protection Team

Responsible entity for the processing of personal data when applying for a job opening at Stannah, i.e. the Data Controller is – the Stannah entity that is recruiting. Please refer to this list for information on the relevant Stannah entity and contact details https://corporate.stannah.com/change-country/.

In case you have any data protection queries and wish to contact the Data Protection Team, please reach out to:

Data Protection Team

Stannah
Watt Close
East Portway
Andover
SP10 3SD

Tel: 01264 364311

Email:

EU/EAA and all countries outside of the UK: eu.dataprotection@stannah.co.uk

UK: dataprotection@stannah.co.uk

2. Types of Personal Data

Personal data means any information about an individual from which that person can be identified. Depending on your jurisdiction and to the extent permissible by applicable privacy and data protection law, we will collect, store and use some or all of the following categories of personal data about you:

• Identification details (e.g., name, date of birth, gender, marital status and dependents, title, passport references and nationality – if required by the job);
• Contact details (postal address, telephone number and personal email address, beneficiary and emergency contact information);
• Professional details (e.g., resume or CV, cover letter, letters of recommendation, work permit/visa application information, recruitment process and date, accomplishments and honors, diplomas, certificates and attestations, position applied, any information you provide to us during the application process or the interview);
• Assessment and evaluation data (e.g., results of any tests undertaken as part of the application process, including technical assessments, cognitive or behavioral evaluations, and other job-related assessments);
• Technical and usage data (e.g., cookies and other trackers, usage activity, IP address, device information, unique identifiers for advertising, crash reports, and data transmitted while using the service).

To the extent required or permissible by the applicable law, we will also process the  following  sensitive personal data:

• Health details (e.g., documents, data or reports related to disability for mandatory employment).
• Disciplinary actions and/or criminal proceedings and/or sanctions (e.g., criminal convictions, offences, warning issued, correspondence).
• Diversity-related information (e.g., race, ethnicity, religious and political beliefs, sexual orientation, military/veteran status).

Should you apply to more than one location or should the role to which you apply be available in more than one country, the types of personal data we request from you and the ways that we process it are determined by the requirements of all the countries in which the position is located.

3. Sources of Personal Data

We collect personal data about you through the application form and interviews during the recruitment process directly from candidates. We will sometimes collect additional information from third parties including employment agencies, named referees, former employers, publicly available professional networking profiles e.g., LinkedIn, credit reference agencies or other background check agencies.

4. Purposes & Legal Grounds for Data Processing

We will process your personal data to:

• assess your skills, qualifications, and suitability for potential employment.
• communicate with you about the recruitment and hiring process.
• keep records related to our hiring processes.
• carry out background and reference checks, where applicable.
• prevent fraud and comply with legal or regulatory requirements.
• administer our recruitment process via SmartRecruiters, a third-party service provider.
• maintain security, support system functionality, and support analytics.
• ensure compliance with anti-discrimination laws and promote workplace diversity and inclusion.

We will also analyse your personal data or aggregated/anonymised data to improve our recruitment and hiring process and augment our ability to attract successful candidates.

Our practices for collecting and using your personal data are based on the following:

• Consent – you have given your consent for the processing to take place, e.g., contacting and disclosing information to a referee or for pre-employment screening where applicable;
• Legitimate interests – the processing is necessary for our legitimate interests or the legitimate interests of a third party, e.g., to process and assess your application for employment with us;
• Legal obligation – the processing is necessary to comply with legal or regulatory requirements, e.g., for immigration compliance purposes; and

Where we have relied on your consent, you have the right to withdraw your consent at any time.

5. Sharing and Disclosure of Personal Data

Access to your personal data is restricted to authorized personnel within Stannah on a “need to know” basis according to their job role and responsibilities (i.e., HR managers; relevant Business Function).

We will also share your personal data with trusted third parties to manage recruitment, such as SmartRecruiters (our recruitment platform provider), and recruiting agencies to assist us in recruiting talent, administering, DBS checks, evaluating pre-employment health screening  and testing and improving our recruiting practices.

Use of WhatsApp and SMS for Recruitment Communications

We may use WhatsApp and SMS to communicate with candidates during the recruitment process. This includes confirming interview arrangements, answering queries, and providing updates on your application. By choosing to communicate with us via WhatsApp, you acknowledge that your personal data (such as your phone number, messages, and any shared documents) will be processed through WhatsApp’s platform, which has its own privacy terms. We advise you to   review WhatsApp’s Privacy Policy for more information on how your data is processed.

Stannah maintains processes designed to ensure that any processing of personal data by third party service providers is consistent with applicable data protection laws.

Where Stannah transfers your personal data outside the country of your residence, which may not provide the same level of data protection, Stannah will implement reasonable and appropriate legal, technical and organizational security measures with the aim to ensure the security of the processing, for example for transfer outside EU and UK, we rely on EU and UK Standard Contractual Clauses respectively. Stannah ensures that all our third-party service providers maintain equivalent safeguards for international data transfers. Stannah does not sell your data.

6. Your rights

Depending upon your jurisdiction and to the extent permissible by the applicable privacy and data protection law, you have certain rights in relation to the personal data that Stannah processes about you. For example, you might have the right to:

• Request access to your personal data: This enables you to obtain information on the processing of your personal data and to receive a copy of such information.
• Request correction of the personal data that we hold about you: This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your personal data: This enables you to ask us to delete or remove personal data, where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing.
• Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about a particular situation, which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes
• Request the restriction of processing of your personal data: This enables you to ask us to suspend the processing of personal data about you (e.g. if you want us to establish its accuracy or the reason for processing it)
• Request the transfer of your personal data to another party: This enables you to ask us to send your personal data in a structured, common, and machine-readable format to another entity
• Right to withdraw: In the limited circumstances where you have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time
• Opt-out of the “sale” or “sharing”: This enables you to opt-out of the “sale” or “sharing” of your personal data, if, applicable. These terms have the meaning assigned to them by applicable data privacy laws.

To exercise these rights, please contact dataprotection@stannah.co.uk if you are in the UK or eu.dataprotection@stannah.co.uk if you are based in Europe. If we do not satisfy your request, you also have the right to lodge a complaint in relation to the processing of your personal data with the competent supervisory authority of your place of residence or work.

• If you are based in the UK, you may contact ICO here.
• If you are based in the EU/EEA, the competent Data Protection Authority’s contact details may be found here.

7. Profiling & Automated Decision Making

We will use third-party service providers’ technology to select appropriate candidates for us to consider based on criteria expressly identified by us, or typical in relation to the role for which you have applied. The process of finding suitable candidates is automatic, however, any decision as to who we will engage to fill the job opening will be made by our staff.

8. Data Security & Retention

Stannah has internal policies and controls in place to try to ensure that your personal data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by its employees in the performance of their duties or from duly authorized third-party providers.

If your application is unsuccessful, regardless of whether you have applied directly for an open position, or an application has been sourced by us, we will keep your personal data for recruitment purposes for a period up to 12 months from the date you are rejected/withdrawn/removed from a job or hired, unless longer retention is required by applicable laws. We will retain your personal data for that period so that we can show, in the event of a legal claim, that we have not discriminated against candidates on prohibited grounds and that we have conducted the recruitment exercise in a fair and transparent way and to consider you for potential future roles and employment opportunities. After this period, we will securely destroy your personal information in accordance with our data retention and disposal procedures. If we wish to retain your personal data on file for a longer period than the one stated above, on the basis that a further opportunity may arise in future and we may wish to consider you for that, we will write to you separately, seeking your consent to retain your personal information for a fixed period on that basis.

9. Amendments

Our Recruitment Privacy Notice may change from time to time and any changes will be posted on this page.

This Recruitment Privacy Notice is effective as of 25/10/25.