RECRUITMENT PRIVACY POLICY

PURPOSE

At Guthrie County Hospital (GCH), we are committed to protecting the privacy and security of your personal information throughout the recruitment process. This policy outlines how we collect, use, store, and share your personal data in accordance with applicable privacy laws and healthcare industry standards.

Information We Collect

During recruitment, we may collect the following information:

· Person details (e.g., full name, contact information)

· Employment history and qualifications (e.g., CV/resume, academic records, licenses)

· References and background check data

· Interview and assessment notes

· Right-to-work documentation

· Health-related data (as part of occupational health screening)

· Information from pre-employment checks (e.g., DHS/Criminal background checks)

How We Collect Information

We collect your data through:

· Direct applications or emails

· Recruitment platforms or job boards

· Recruitment agencies

· Interviews and assessments

· Occupational health services

· Background and reference checks

Purpose of Data Collection

We collect and use your personal data to:

· Evaluate your suitability for a role at GCH

· Communicate with you about the recruitment process

· Meet regulatory and safeguarding obligations for healthcare professionals

· Maintain a safe and lawful working environment

· Fulfill legal and contractual obligations

· Consider you for future job openings (with your consent)

Lawful Basis for Processing

We process your information under one or more of the following legal bases:

· Consent (for future opportunities or optional health disclosures)

· Contractual necessity (to take steps before entering into an employment contract)

· Legal obligation (e.g., right-to-work checks, safeguarding)

· Legitimate interests (e.g., efficient recruitment and workforce planning)

· Vital interests or public interest in the area of public health (where health data is involved)

Data Retention

Unsuccessful applicant data will be retained for up to 12 months following the conclusion of the recruitment process unless you request deletion sooner. Successful applicants’ data will be4 transferred to the employee personnel file and subject to the employee privacy policy.

Sharing Your Information

We may share your information with:

· Internal hiring managers and HR personnel

· Regulatory bodies (e.g., DHS, DIAL)

· Occupational health providers

· Background screening services

· Legal or regulatory authorities when required

We do not sell your data. Any third-party services we use must comply with data protection laws and hospital privacy standards.

Your Rights

You may have rights under data protection law to:

· Access the personal data we hold about you

· Request correction or deletion

· Restrict or object to processing

· Withdraw consent (where applicable)

· Lodge a complaint with a data protection authority

Contact Us

For questions or to exercise your data rights, please contact:

Human Resources Department

Guthrie County Hospital

hr@gcho.org

641-332-3829

710 N 12th St

Guthrie Center, IA 50115