Welcome to the Müller Candidate Privacy Notice

This privacy notice applies to those applying to work for Müller UK & Ireland Group which comprises Müller UK and Ireland Group LLP (being Müller Yogurt and Desserts and Müller Milk and Ingredients), TM Telford Dairy Limited, Müller Service Limited and Philpot Dairy Products Limited (together referred to as “Müller”).

This information has been produced to help you understand everything you need to know about the way Müller collects, uses, and shares personal data, what your legal rights are and how to exercise them.

We hope you’ll take some time to read this document; we’ve tried to keep it all as simple as possible and to avoid jargon, and we’ll make our best efforts to keep you informed if there are any changes to the way we process your personal data in the future.

Müller takes its responsibility for protecting your data very seriously and we do advise you get to know our practices. If there’s anything here you don’t understand, or if you want to ask any questions, please feel free to contact us.

If you are successful in your application and become an employee of Müller, your personal data will be processed in accordance with the Müller Employee Privacy Notice, a copy of which will be provided to you on commencement of employment.

Who is the Data Controller?

The Müller group company which is the Data Controller of your personal data is the one to which you have submitted an application.

Registered address: Tern Valley Business Park, Shrewsbury Road, Market Drayton, Shropshire, TF9 3SQ

Müller UK and Ireland Group LLP

OC384928

TM Telford Dairy Limited

06338801

Müller Service Limited

07822538

Philpot Dairy Products Limited

09914960

Registration number:

In this document Müller may be referred to as “we”, “us”, or “our”.

The term “Controller” means that we are responsible for deciding how we hold and use personal information about you.

What kinds of personal data does Müller process?

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the person's identity has been removed (anonymous data). Müller collects personal data for various purposes and follows the principle of data minimisation, ensuring that personal data collected is adequate, relevant, and limited to what is necessary for those purposes; with that in mind we have created a list of the types of personal data that we may collect, either directly from yourself or from other sources, in order to achieve those purposes.

The kinds of personal data we may collect include:

Applicant

The information you provide to us in your curriculum vitae and covering letter, or application form (whether in paper form, via our careers website or via a social media platform such as LinkedIn), including: name, title, address, telephone number, personal email address, date of birth, gender, work and education history.

If you apply for a job online, your IP address and username.

Any information you provide to us during an interview.

Any information you provide to document your right to work in the UK, including but not necessarily limited to passport details, visa/sponsorship details, immigration share code etc.

If you attend Müller’s premises during the application process, images or audio and/or visual recordings taken via “Video Surveillance Systems” (meaning any devices or systems designed to monitor or record images and/or audio of individuals or information relating to individuals, whether at Müller premises or on Müller vehicles or worn by Müller personnel in the course of conducting their duties; and includes CCTV systems, body worn cameras, automatic number plate recognition (ANPR), as well as any future technology that may be introduced by Müller for surveillance purposes, such as unmanned aerial systems and any other systems that capture information of identifiable individuals or information relating to identifiable individuals). Personal data which may be recorded via video surveillance systems generally includes video images, and may also include static pictures such as printed screen shots and audio recordings.

Special categories of personal data including: race or ethnicity, religious beliefs, sexual orientation, information about your health (including any medical condition and whether you consider yourself to have a disability), information about criminal convictions and offences.

What are the reasons Müller collects Personal Data?

Legitimate Interests

Müller may process personal data for any of the following purposes, which are considered to be within our legitimate business interests:

to process your application;

• to recognise when people re-engage with our organisation;
• to assess your eligibility and determine on what terms you work for us;
• for equal opportunities monitoring;
• to improve our careers website and recruitment process;
• to keep in contact with you about your application;
• to ensure network and information security; and
• to detect fraud.

Special Category Personal Data

Special categories of particularly sensitive personal information, such as information about your health, require higher levels of protection. We may collect Special Categories of personal data when you apply for a job with us for the purpose of considering and implementing reasonable adjustments for you (if necessary), and for anonymised aggregated diversity and inclusion data reporting and analysis.

Legal Obligations

Müller will only use your personal information when the law allows us to. We are required by law to process personal data for purposes relating to our legal obligations, these include:

• to comply with regulatory requirements and any self-regulatory schemes;
• to carry out required right to work checks and due diligence;
• to cooperate with relevant authorities for reporting criminal activity, or to detect and prevent fraud; and
• to investigate any claims of any kind of discrimination, or any other claim whereby the organisation may have to defend itself.

Consent

We may process your personal data for the purpose of notifying you of new and upcoming job opportunities if you give your consent for us to do so. You may withdraw this consent at any time.

Where does Müller obtain Personal Data from?

We will collect personal data directly from you in various ways. This could include when you complete an application online, or if you provide the data directly to a representative of Müller.

We may also gather personal data from:

• recruitment agencies and online platforms;
• technical functionality that gathers data automatically from computer equipment when candidates use our platforms;
• former employers, credit reference agencies or other background check agencies; or
• current employees through referrals.

Who will Müller share your Personal Data with?

As Müller is part of the wider group Unternehmensgruppe Theo Müller (UTM), we may share your personal data with our employees or those of other members of our group who are involved in the recruitment process and as part of our regular reporting activities on recruitment activities, for system maintenance support and hosting of data, or for any other purpose in connection with your application to Müller.

We may also have to share your personal data with certain third parties to manage and provide for your prospective employment at Müller. We will share candidate personal data with any third party organisation where we are legally obligated to do so where it is within our legitimate business interests to do so.

We shall make all reasonable efforts to ensure that any third-party we share your personal data with is also compliant with data protection law.

The kinds of third parties we may share your personal data with include:

• recruitment service providers;
• IT service providers;
• driver and vehicle service providers (to conduct licence checks where this is a requirement of the job); and
• HMRC or other government bodies or regulators.

Where will Müller store your Personal Data?

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Additionally, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know.

Müller will not transfer your personal data to any country other than those that have been granted an adequacy decision under, or with whom we have entered into standard contractual clauses in accordance with, the General Data Protection Regulation.

We may however share your personal data with third-party organisations who then transfer the data. We shall take all reasonable measures to ensure those third parties are also compliant with data protection law.

How long will Müller keep your Personal Data?

If you are successful in your application and become an officer, director, employee, consultant, secondee, apprentice, worker or contractor of Müller, your personal data will continue to be processed in accordance with the Müller Employee Privacy Notice.

If you are unsuccessful in your application, we will keep your personal data only for as long as required to achieve the purposes for which it was collected, in line with this privacy notice. The following criteria are what determine the period for which we will keep your personal data:

• until the expiry of 12 months from the date of your last login to your account on the Müller Careers site (this is to enable us to consider you for future job vacancies);
• until we are no longer required to do so to comply with regulatory requirements or financial obligations;
• until we are no longer required to do so by any law we are subject to;
• until all purposes for which the data was originally gathered have become irrelevant or obsolete; or
• until it has been requested that we no longer process the data and that it is erased; in some cases, where there is a remaining relevant or legal reason why we are required to keep this data, we may opt to restrict the amount of processing being conducted to what is absolute necessary rather than erase it.

After the retention period ends, we will securely delete or anonymize your personal data in accordance with our data deletion protocols.

Your Rights, Our Responsibility

There are several rights granted to you immediately upon providing us with your personal data; some of these are mentioned above. We’d like you to know that at Müller we take your rights seriously and will always conduct ourselves in a way that is considerate of our responsibility to serve your legal rights.

The Right of Access

This grants you the right to confirm whether or not your personal data is being processed, and to be provided with relevant details of what those processing operations are and what personal data of yours is being processed.

If you would like access to the personal data we have about you, we ask that you contact us using the details below.

The Right to Rectification

This one is fairly straight forward; if you notice that the data we have about you is inaccurate or incomplete, you may request we rectify the mistake. We will make every effort to respond to requests of this type immediately.

The Right to Erasure

Otherwise known as the ‘right to be forgotten’, this given you the right to request your personal data be deleted.

This is not an absolute right; if you were to request that we erase your personal data, we would erase as much of that data as we could but may have to retain some information if it is necessary.

Where we have received a request for personal data to be erased, if it is necessary for us to retain some of that information we shall ensure that the remaining data is used only when and where it is absolutely necessary.

The Right to Objection

The right to object is a basic freedom all democracies enjoy. If you wish to object to the way we use, or have used, your personal data you may do so freely.

The Right to Complain

We will always try to maintain the highest standards and encourage the confidence our candidates have in us as an organisation. To achieve this, we request that any complaints be first brought to our attention so we can properly investigate matters. If you would like to complain about Müller to a regulatory body, you may do so by contacting the Information Commissioner's Office (ICO).

Changes to this Privacy Notice

We reserve the right to update this Privacy Notice at any time, and any changes we may make to this Privacy Notice in the future will be posted on our careers page or other careers platform used from time to time (or by such other method we consider appropriate). Please check back frequently to see any updates or changes to our Privacy Notice.

Müller Contact Details

We have appointed a Group Data Protection Officer (DPO) to oversee compliance with this privacy notice, who can be contacted by email at: privacy@muellergroup.com.