Information for individuals who apply to work for, or who attend a recruitment event or undertake an assessment with Shell.
What does this Privacy Notice cover?
This Privacy Notice– Shell Group Recruitment provides information about personal data which is processed by a company or companies within Shell in relation to individuals who apply to work for, or who attend a recruitment event or undertake an assessment with a company or companies within the Shell group of companies (‘Shell’). This includes prospective employees, interns and contractors.
This notice explains what personal data is processed, for which purposes, how long we hold the personal data for, how to access and update your personal data and where to go for further information.
For individuals who are successful in their application for employment, internship or engagement as a contractor, the Privacy Notice- Shell Group Employee, Contractor and Dependents’ Personal Data will apply.
Who is responsible for any personal data collected?
Hankook Shell Oil Company Limited, a company registered in The Republic of Korea whose office is at 250, Shinseon-Ro, Nam-Gu, Busan, Republic of Korea is responsible for processing your personal data on behalf of itself or the relevant employing or engaging company within Shell.
Notice – if you are under 14 years old and wish to apply for a Shell sponsored education or innovation event or program
If you are under 14 years’ old (or older if set out in any local privacy notice) please do not send us your personal data (for example, your name, address and email address). If you wish to contact Shell in a way which requires you to submit your personal data (such as for education or innovation events) please get your parent or guardian to do so on your behalf.
What personal data do we process?
We process personal information relating to individuals who apply to work for, or who attend a recruitment event and/or undertake an assessment (‘Applicants’) only for legitimate purposes. Personal information so processed includes full name, photo, gender, date of birth, address, home telephone number, mobile phone number, e-mail address, educational background (name and location of the school, major, year of entrance and year of graduation, graduation status, GPA, status of scholarship, etc.), work experience (company, title, responsible area, date of commencement of employment and last date of employment, service period, evaluation on work attitude and performance results, etc.), history of military service, history of awards and sanctions, any personal information that is described in any document which is submitted to us, including letter of self-introduction, transcript, or similar, etc. In sum, personal information processed can be classified in the following categories:
Human Resources and personnel management
- Applications for employment, results of interviews and assessments:
- Personal contact details;
- Management reporting and analysis including statistical analysis and surveys regarding the quality of the recruitment process;
- Internal audits and investigations;
Pre- screening of Applicants
We carry out screening of all Applicants who we intend to make an offer of employment, engagement or internship (as the case may be) and prior to any offer being confirmed for the purposes of:
- verifying the information that an Applicant provides during the screening/interview process. This will include verifying information with current/previous employers and educational institutions. No steps will be taken in this respect until the Applicant confirms the verification can take place.
- screening Applicants against publicly available or government issued sanctions lists and media sources. This is to comply with legal and regulatory obligations, to protect Shell’s assets and employees/contractors and specifically to ensure that Shell can comply with trade control, anti-money laundering and/or bribery and corruption laws and other regulatory requirements.
Personal data regarding suspected and actual criminal behaviour, criminal records or proceedings regarding criminal or unlawful behaviour may be processed as part of the pre-employment/pre-engagement screening but only for the purposes of ensuring compliance with legal and regulatory obligations and/or to the extent permitted or required by local law in particular, separate consent will be obtained.
Automated decision making
All applicants must answer questions which are necessary to ensure that individuals can lawfully enter a contract with a Shell company if they are successful in their application. In addition, for graduate hires, we utilize an online assessment tool which scores individuals on their suitability for employment, based on automated decision making to ensure objectivity. In those cases, you will be notified of this and you will have the opportunity to have such automated decisions reviewed by or on behalf of a member of the Shell recruitment team. Save as specifically notified to you during the recruitment process, no other automated decision making will take place to determine suitability or eligibility for employment or engagement as a contractor.
Special categories of data (‘sensitive personal data’)
For the purposes of recruitment, personal data regarding health data may be processed only as strictly required and as permitted or required by local law, in particular, separate consent will be obtained, for the purposes of making adjustments to the recruitment process, for assessing eligibility for positions and fitness to work and provision of facilities in the workplace to accommodate health problems.
In addition, in order to ensure equal employment opportunities as permitted or required by local law we may also gather data regarding Applicants, including their nationality, racial and/or ethnic origin.
For what purposes do we process personal data of Applicants?
Personal data of Applicants is only processed with the explicit consent of the Applicant::
- in order to take steps at the request of the Applicant prior to entering into a contract;
- where it is necessary to comply with a legal obligation to which the relevant Shell company/companies is subject to ensure compliance with local employment, social security laws and regulations; or
- where it is necessary for the legitimate interests of Shell (such as ensuring compliance with legal obligations other than those related to employment or social security, the protection of Shell assets, reputation and Shell employees and contractors) except where such interests are overridden by the interests or fundamental rights and freedoms of the Applicant; or
In those cases where processing is based on consent, and subject to applicable local law which provides otherwise, you have the right to withdraw your consent at any time. This will not affect the validity of the processing prior to the withdrawal of consent.
Who will we share the personal data with?
Your personal data is exclusively processed for the purposes referred to above (or for a secondary purpose where it is closely related, for example such as storing it) and will only be shared on a strict need to know basis with:
- Other companies within the Shell group of companies, including to those which may be located outside of your location and/or the Economic European Area (“EEA”), specifically we provide the personal information as stated in each item below:
- Authorized third party agents, service providers and/or subcontractors of Shell in particular authorised third parties who carry out reference and background checks on behalf of Shell;
- A competent public authority, government, regulatory or fiscal agency where it is necessary to comply with a legal or regulatory obligation to which the relevant Shell company/companies is subject to or as permitted by applicable local law.
Transfers of personal data
Where the personal data is transferred to companies within Shell and/or to authorized third parties located outside of your country (including outside of the European Economic Area) we take organizational, contractual and legal measures to ensure that the personal data is exclusively processed for the purposes mentioned above and that adequate levels of protection have been implemented in order to safeguard the personal data. These measures include Binding Corporate Rules for transfers among the Shell Group and European Commission approved transfer mechanisms for transfers to third parties in countries which have not been deemed to provide an adequate level of data protection as well as any additional local legal requirements. You can request a copy of these by contacting our Data Privacy Officer at firstname.lastname@example.org
Security of your personal data
Given the nature of the Shell Group your personal data may be transferred to countries outside of your location which may include countries outside of the European Economic Area. Where that happens, we take steps to ensure that your privacy rights continue to be protected in line with Shell internal rules and applicable law. Only if required by local law we will seek your consent to such transfer.
We have implemented technology and policies with the objective of protecting your privacy from unauthorised access and improper use and will update these measures as new technology becomes available, as appropriate.
We shall take the following technical, administrative and physical actions required to ensure the safety of personal information:
- Minimize the number of employees handling personal information and provide training for them.
- Conduct a periodic self-audit.
- Establish and implement an internal management plan.
- Encrypt personal information.
- Take technical measures against hacking, etc.
- Control access to personal information.
- Retain log-in records and prohibit forgery and alteration of log-in records.
- Adopt locking system for document security.
- Control access from unauthorized persons.
How long do you hold my personal data for?
We hold personal data of unsuccessful Applicants for no longer than two years after the recruitment process or assessment has completed.
In all cases information may be held for a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate purpose to retain it.
We will destroy the personal information within [five] days from the expiration date of the retention period. If the personal information becomes no longer needed as the purpose of processing such information has been achieved or our business has been closed, we will destroy such information within [five] days from the date on which the processing of such information is deemed unnecessary.
Any printout, document, etc. containing personal information will be destroyed by incinerating or shredding such into pieces, and personal information in the form of electronic file will be destroyed by permanently deleting it in an irrevocable manner.
If you are successful in your application, the personal data gathered through the recruitment process will be retained in line with the Privacy Notice- Employees’, Dependants’ and Contractors’ Personal Data which you will be provided access to or a copy of upon commencement of employment, engagement or internship.
What are the consequences of not providing my data?
Personal data requested and provided by Applicants is required in order to fulfil legal requirements and/or which is required for entering into a contract with you (or in the case of a contractor your employer/service provider). Failure to provide us with the information requested which is limited to that required for these purposes will negatively affect your chances of being selected for any potential employment, engagement or internship.
We aim to keep our information about you as accurate as possible. Applicants can access their personal data, request correction, or deletion of the personal data (but only where it is no longer required for a legitimate business purpose) or request that the processing of their data is restricted. Please contact http://www.shell.com/careers/contact-us.html
Who can I contact for more information?
If you have any issues, queries or complaints regarding the processing of your personal data please contact us at email@example.com or Shell Group Chief Privacy Officer at Shell International B.V. The Hague, The Netherlands - Trade Register, No. 27155369 Correspondence: PO Box 162, 2501 AN, The Hague.
If you are unsatisfied with the handling of your personal data by Shell, then you have the right to lodge a complaint to the Personal Information Protection Commission whose address whose address is 4th floor, Government Complex, (03171) 209, Sejong-daero, Jongno-gu, Seoul, Korea. Please visit http://www.pipc.go.kr for more information.
Cookies and similar technologies
Changes to this Privacy Notice
This Privacy Notice may be changed over time. Should there be any inconsistency between the English version and the Korean version of this notice, the former shall prevail.
This Privacy Notice was last updated in September 2018.