Candidate Privacy Policy
Last updated:March 24, 2023
- Introduction
Thanks for your interest in joining Whyte Nation!
This Candidate Privacy Policy (“Policy”) explains how we collect, use, share, and protect your personal information throughout our hiring process. It applies to anyone applying for opportunities at Whyte Nation, whether full-time, part-time, freelance, or collaborative.
The data controller responsible for your information is the Whyte Nation entity based in the country where you would work, if hired. Not sure who that is? Just reach out — we’re happy to clarify.
- Your Privacy Rights
At Whyte Nation, we believe privacy is a basic right. Depending on your location, you may be legally entitled to some or all of the following rights:
- Know what's collected
- You have the right to be informed about the personal data we collect and how we use it.
- Access your data
You can request a copy of your personal information we’ve gathered during the application process.
- Correct inaccuracies
If anything is incorrect or outdated, let us know and we’ll update it.
- Delete your data
You may request deletion of your data — for example, if:
- It’s no longer needed
- You gave us consent and now withdraw it
- You object to our use of it (see below)
Note: We may still need to keep certain data when legally required or to protect our legitimate interests.
- Restrict how it’s used
Ask us to temporarily or permanently stop processing some or all of your data under certain conditions (e.g. it’s inaccurate, used unlawfully, or you're contesting our reasons for using it).
- Object to processing
If we’re relying on legitimate interests to process your data, you can object.
- Data portability
You can request your data in a digital format or ask us to transfer it to another organization (when legally applicable).
- No automated decisions without humans
If any decisions that significantly affect you are made using only automated processes (without human involvement), you can request a manual review.
- Withdraw consent
If we’ve asked for your consent to use your information, you can change your mind at any time.
- Raise a concern
You have the right to contact your local data protection authority if you have concerns about how we handle your data.
- How to Exercise Your Rights
To make any privacy-related requests, just email us at [insert privacy contact email].
You can also manage some of your information directly if you applied via a referral — check your confirmation email to access your candidate profile.
If you prefer, you can appoint someone (like an attorney or authorized agent) to act on your behalf. We’ll need written proof that they’re allowed to represent you, and we may still ask you to verify your identity for security.
We will never penalize you or discriminate against you for exercising your privacy rights.
- California-Specific Notice (CCPA)
For candidates based in California:
Whyte Nation does not “sell” or “share” your personal data as defined under the California Consumer Privacy Act (CCPA). We also do not use sensitive personal information for any secondary purposes.
- Automated Decision-Making
In rare cases, Whyte Nation may use automated tools as part of the hiring process — but only to handle very high volumes of applications where human review would otherwise be impossible within a reasonable timeframe.
For example, if a job description clearly requires prior experience in a leadership role, and the application form asks if you’ve had that experience, your application may be automatically filtered out if you respond “No.”
Important:
We use automated decision-making only to assess whether basic, clearly stated job requirements are met. You can always request a human review of any decision made this way by emailing us at music@whytenation.cc
.
- Sharing Your Personal Data
To keep our hiring process smooth and effective, we may share your information with trusted third-party service providers who help us manage applications and recruitment tools (for example, applicant tracking systems or scheduling platforms).
We may also share your data with other companies or collaborators under the Whyte Nation umbrella, especially if your application involves teams in different locations or countries.
Because Whyte Nation operates with a global mindset, your personal data may be processed outside the country where you live — including in regions where privacy laws may differ from yours. When this happens, we take serious steps to make sure your information remains protected, such as:
- Using legally approved data transfer tools, including:
- EU Standard Contractual Clauses (SCCs)
- UK International Data Transfer Addendum
- Adding extra technical safeguards like encryption and anonymization
- Establishing clear policies to guard against misuse, including government access requests
These measures ensure your data stays as safe internationally as it would be under EU/UK privacy standards or other local protections.
- Data Retention & Deletion
If you’re hired, the personal data collected during the recruitment process will become part of your employee record and handled in accordance with our internal employee data policies.
If your application doesn't lead to a role — or you choose not to be considered for future opportunities — we will retain your personal data only as long as needed:
- 6 months, unless otherwise required for legal compliance (such as immigration or visa laws)
- If you consent to being contacted for future roles, we’ll hold your data for up to three years, after which we’ll ask you to renew your consent
All stored data is secured, access is restricted, and deletion is handled responsibly and in line with applicable law.
- Contact Us
Have a question? Need to exercise a privacy right? We're here for you.
Reach out to our Data Protection Officer at: