WENDY’S RESTAURANTS OF U.K. LIMITED
NOTICE TO APPLICANTS
REGARDING THE PROCESSING OF PERSONAL DATA
Wendy’s Restaurants of U.K. Limited (“the Company” or “we”) is committed to protecting the privacy and security of personal data and/or special category data (“Personal Data”) of prospective employees (“Applicants” or “you”). The Company collects, processes, and transfers personal data of Applicants in connection with its human resources recruitment, selection and security vetting activities. The Company is committed to complying with the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR) and all data protection laws, employment and labour laws, and collective agreements in the countries in which it employs employees and does business.
The contact information for the Company’s main establishment and representative in the United Kingdom is:
COMPANY: Wendy’s Restaurants of U.K. Limited
ADDRESS: Rutland House, 148 Edmund Street, Birmingham B3 2JR (c/o Squire Patton Boggs (UK) LLP)
The contact information for the Company’s principal contact for Data Protection issues is Brigette Guyer, Director of Data Governance at GDPRPrivacy@wendys.com.
Personal Data Processed
The Company collects, processes, and stores Personal Data regarding Applicants for the purposes detailed below in connection with its human resources recruitment, selection and security vetting activities. The Company will keep and use the information to enable it to hire suitable personnel and manage its relationship with you effectively, lawfully and appropriately during the recruitment, selection and onboarding process, whilst you are working for the Company, at the time when your employment ends and after you have left. This includes using information to enable the Company to comply with the employment contract, to comply with any legal requirements, pursue the legitimate interests of the Company and protect the Company’s legal position in the event of legal proceedings. Further information on why we process your Personal Data is set out below. If you do not provide this data, the Company may be unable in some circumstances to comply with its obligations and will tell you about the implications of that decision.
RECIPIENTS OF YOUR PERSONAL DATA
Your Personal Data will be disclosed to:
The Company and its affiliated companies in the United States have implemented appropriate safeguards for the transfer of your Personal Data to the U.S. as permitted through standard contract clauses under Article 46 (2) of GDPR and the UK Data Protection Act 2018. Further information regarding these safeguards can be obtained from your HR representative.
To the extent that such third party processors are located outside of the UK or the EU, the Company has implemented appropriate safeguards for the transfer of your Personal Data to these countries through standard contract clauses. Further information regarding these safeguards can be obtained from your HR representative.
RETENTION OF YOUR PERSONAL DATA
The Company, its affiliates, and any applicable third party processors will retain your Personal Data for (1) the period of time that it is necessary to process your Personal Data for the purposes for which it was collected and processed, (2) the period required under record retention laws, (3) the applicable statute of limitations for employment or discrimination claims, or (4) the necessary period of time to establish, exercise, or defend legal claims. Please refer to the Company’s Data Retention Policy for more information. Generally, for unsuccessful applicants, the Company and applicable third party processors will delete your Personal Data upon completion of the application and employment decision process in accordance with our data retention policies unless you specifically request the Company to retain your Personal Data for further consideration.
YOUR RIGHTS REGARDING YOUR PERSONAL DATA
As a data subject, you have the following rights regarding your Personal Data:
To make a subject access request or other request related to your individual rights, you should complete the webform here. The Company may need to ask for proof of identification before the request can be processed. The Company will inform you if it needs to verify your identity and the documents it requires.
The Company normally will respond to a request within a period of one month from the date it is received. In some cases, such as where the Company processes large amounts of an individual’s personal data, it may respond within three months of the date the request is received. The Company will write to you within one month of receiving the original request to tell you if this is the case.
If an access request is manifestly unfounded or excessive, the Company is not required to comply with it. Alternatively, the Company can agree to respond but will charge a fee, which will be based on the administrative cost of responding to the request. An access request is likely to be manifestly unfounded or excessive where it repeats a request to which the Company has already responded. If a request is unfounded or excessive, the Company will notify you that this is the case and whether or not it will respond to it.
Questions And Complaints
Questions or complaints regarding the processing of your Personal Data should be directed to your hiring contact at the Company in the first instance. If the enquiry cannot be answered or the complaint is not resolved locally, please direct the matter to the Company by letter, telephone or email to the Company’s principal contact for Data Protection issues whose contact details are set out above.
You have the right to lodge a complaint with the Information Commissioner’s Office which is situated at:
Wycliffe HouseWater LaneWilmslowCheshireSK9 5AF
Or by telephone on 0303 123 1113, or find more details at www.ico.org.uk.
If in the future the Company intends to process your Personal Data for a purpose other than that which it was collected the Company will provide you with information on that purpose and any other relevant information.