Last Updated: November 2021
By submitting your job application and/or using our Provider’s Portal (the “Portal”) you acknowledge and agree to the practices described in this policy.
Please read the following carefully to understand our views and practices regarding your data and how we will treat it. Regarding this personal data processing for recruitment and selection proceeding within the Farfetch Group, the Farfetch Group entities will be acting as joint data controllers as described below.
The identity of the other joint controller will depend on the specific office to which vacancy you are applying to. Our group of companies, which means our subsidiaries, our ultimate holding company, and that company’s subsidiaries as defined in section 1159 of the UK Companies Act 2006 includes, but is not limited to Farfetch UK Limited, Browns (South Molton Street) Limited, Farfetch Portugal – Unipessoal, Lda., Farfetch (Shanghai) E-Commerce Co. Ltd., Farfetch.com US LLC, Stadium Enterprises LLC, Farfetch RU LLC, Farfetch. Com Brasil Serviços Ltda., Farfetch India Private Limited, and New Guards Group (collectively “Farfetch Group”, “Group”, “Group Company” or “Group Companies”).
Find below all relevant and special provisions governing your personal data processing by Farfetch (Shanghai) E-Commerce Co. Ltd.
Whatever your specific data controllers might be, if you have any questions or concerns about this Policy, please contact our Group’s Data Protection Officer at firstname.lastname@example.org.
A. The types of data we receive and use
We will receive and use the following information about you:
Information you provide as part of your application: You will provide us information about you by using our Portal to apply for a role or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register for and use the Portal, such as your name, contact information, work experience, educational qualifications, ability to work in the country for which you are applying for employment and any information you choose to submit on or upload to the Portal (such as information from a CV).
Sensitive information you can provide: Where permitted by local law, you have the option of providing certain sensitive personal data with your consent, such as whether you have a disability, your gender identification or your ethnicity/race. This data is used by us for statistical purposes and equal opportunities monitoring. This information is kept entirely separate from your application and has no bearing on the outcome of your application. It is confidential, and will not be accessible by any of our hiring managers or recruiters. If you decide not to provide this data, your application will not be prejudiced.
Information we collect about your usage of the portal: We automatically collect certain data from you when you use our Portal, including IP address or other unique device identifiers, information collected by cookies on your usage of the Portal, mobile carrier (if applicable), time zone setting, operating system and platform and information regarding your use of the Portal (“Usage Information”).
Information from third parties: We receive information from third parties in connection with your application, such as referees, recruiters and organisations that provide background checks (this may include right to work and background checks to the extent permitted by applicable law).
We use the following cookies:
Strictly necessary cookies. These are cookies that are required for the operation of the Portal. They include, for example, cookies that enable you to log into secure areas of the Portal.
Analytical/performance cookies. They allow us to record patterns of usage of our various users e.g. recognising and counting the number of visitors and to see how visitors move around the Portal when they are using it. This helps us to improve the way the Portal works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies. These are used to recognise you when you return to the Portal. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region). If for any reason you wish to not take advantage of cookies, you can disable cookies by changing the settings on your browser. However, if you do so, this may affect your enjoyment of the Portal and we will no longer be able to offer to you personalised content. Unless you opt out of cookies, we will consider that you consent to their use.
B. How we use your Information and Legal Basis for Processing
- We use your information to:
- identify and evaluate you for employment positions;
- determine and validate your qualifications for employment;
- conduct background checks to the extent permitted under applicable law (including checking references, qualifications);
- if you are a successful candidate, create an employment record;
- the extent permitted or required by applicable law, conduct diversity and equal oportunities monitoring;
- provide you with user support of the Portal;
- communicate with you;
- assess if your profile matches with other positions available at the Farfetch Group which you haven’t applied to;
- send you notifications about new positions that match your profile;
- improve the Portal and to ensure content from the Portal is presented in the most effective manner for you and your device;
- administer the Portal and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes; or
- keep the Portal safe and secure; or
- develop the Portal and improve our recruitment processes.
- Our Legal Basis:
We rely on several legal basis for processing your information, as explained below:
Pre-Contractual: Our legal basis for processing your information is to undertake the necessary pre-contractual steps in order to perform a contract with you.
Legal Obligations: We will have to ensure that we comply with our legal obligations as, for example, verifying your eligibility to work in the country where you are applying to.
Legitimate Interests: We also have legitimate interests in processing such information, such as verifying your professional track record, monitoring employment diversity, keeping our Portal secure and improving our recruitment process.
Consent: We also process your information based on your consent when such consent is required (for example when asking you to extend the time to keep your CV in our database).
C. How we share your information
When transferring personal information to one of the Group Companies outside the EEA, which among others, might be registered at the United Kingdom, Brazil, China, India, Japan, Russia, the UAE or the USA, we rely on the Commission’s adequacy decisions, where applicable, or the Commission’s model contractual clauses for the transfer of personal data to third countries (i. e, the standard contractual clauses).
Also, we share your information with selected recipients. These categories of recipients include our Provider, which we use to collect and process your information, besides any referee from your previous jobs.
For specific information regarding your personal data processing by Farfetch (Shanghai) E-Commerce Co. Ltd., please see below.
D. Where we store your information
The information that we collect from you will be stored by our Provider, which might store it outside of the European Economic Area ("EEA"). Depending on the specific location of the data storage and shall the Provider store your personal data outside of the EEA, we rely on different adequacy measures, as applicable:
1. Adequacy Decisions: The European Commission may determine whether a country outside the EU offers an adequate level of data protection;
2. Model Clauses: We rely in the Commission’s model contracts for the transfer of personal data to third countries (i.e. the standard contractual clauses);
For further specific information regarding your personal data processing by Farfetch (Shanghai) E-Commerce Co. Ltd., please see below.
E. The security of your personal data
Keeping you and your personal information secure is very important to us. Once we have received your information, we will take appropriate technical and organisational measures to safeguard your personal data against loss, theft and unauthorised use, access or modification, including using a Transport Layer Secure (TLS) to encrypt the personal data that you send us during the order process.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your information transmitted through the Portal; any transmission is at your own risk.
F. Data retention
We will retain your information for the entire moment of the recruitment process and up to three (3) years after your last interaction with us or with the Portal, if your application was unsuccessful, for the purposes of verifying your suitability for future vacancies, unless you tell us otherwise. When your application is successful, your information will be transferred to your employee file and will be subject to the retention periods associated with that file.
We can keep your personal data for additional periods of three (3) years, with your consent, which you can withdraw at any time by contacting us and requesting to erase your personal data. Should you choose not to consent or otherwise we do not receive an answer from you, your data will be permanently anonymized.
Your information will be retained for longer than the abovementioned periods if required by law or a court order and/or as needed to defend or pursue legal claims.
G. Your privacy rights and how to exercise them
You have certain rights in relation to the personal data we hold about you. Some of these only apply in certain circumstances as set out in more detail below. We also set out how to exercise those rights. Please note that we will require you to verify your identity before responding to any requests to exercise your rights and that can include asking a set of security questions to ensure it is you. When you have appointed someone else to do the request on your behalf, that person and/or organization needs to show a valid document that demonstrates they are entitled to act on your behalf. We must respond to a request by you to exercise those rights without undue delay and at least within one month (although this may be extended by a further two months in certain circumstances) To exercise any of your rights, please fulfill our Data Subject Request Form.
You have the following rights in relation to your personal data:
Access: to access the personal data held by Farfetch about you and certain information about how we use it and who we share it with;
Portability: in certain circumstances, you have the right to receive or ask us to provide your personal data to a third party in a structured, commonly used and machine-readable format, although we will not provide you with certain personal data if to do so would interfere with another’s individual’s rights (e.g. where providing the personal data we hold about you would reveal information about another person) or where another exemption applies (we can only do so where it is technically feasible; we are not responsible for the security of the personal data or its processing once received by the third party);
Correction: to correct any personal data held about you that is inaccurate and have incomplete data completed (including by the provision of a supplementary statement). Where you request correction, please explain in detail why you believe the personal data we hold about you to be inaccurate or incomplete so that we can assess whether a correction is required. Please note that while we assess whether the personal data we hold about you is inaccurate or incomplete, you may exercise your right to restrict our processing of the applicable data as described below;
Erasure: that we erase the personal data we hold about you in certain circumstances referred to below: you believe that it is no longer necessary for us to hold the personal data we hold about you; we are processing the personal data we hold about you on the basis of your consent, and you wish to withdraw your consent; we are processing the personal data we hold about you on the basis of our legitimate interest and you object to such processing. Please provide us with detail as to your reasoning so that we can assess whether there is an overriding interest for us to retain such personal data; or you believe the personal data we hold about you is being unlawfully processed by us; Also note that you may exercise your right to restrict our processing of your personal data whilst we consider your request as described below. Please provide as much detail as possible on your reasons for the request to assist us in determining whether you have a valid basis for erasure. We will retain the personal data if there are valid grounds under law for us to do so (e.g., for the defence of legal claims or freedom of expression) but we will let you know if that is the case;
Restriction of Processing to Storage Only: to require us to stop processing the personal data we hold about you other than for storage purposes in certain circumstances. Please note, however, that if we stop processing the personal data, we may use it again if there are valid grounds under Data Protection Law for us to do so (e.g. for the defence of legal claims);
Objection: in certain circumstances, the right to restrict or object to our processing of your personal data (e.g. where you request correction or erasure, you also have a right to restrict processing of your applicable data while your request is considered);
The right to withdraw your consent, where you have provided personal data voluntarily, or otherwise consented to its use; and
the right to complain to a supervisory authority.
You may exercise the rights set out at items by fulfilling the Data Subject Request Form.
H. Special provisions governing personal data processing by Farfetch (Shanghai) E-Commerce Co. Ltd.
Data transfers: When transferring personal information to one of the Group Companies outside the territory of mainland China, which among others, might be registered at the EEA, Brazil, India, Japan, Russia, the UAE or the USA, we rely on contracts for the transfer of information to any Group members pursuant to the PRC data protection laws. Also, we share your information with selected recipients. These categories of recipients include our Provider, which we use to collect and process your information, besides any referee from your previous jobs. In case such information is collected or generated within the territory of mainland China and is required to be provided abroad, we will conduct security evaluation in accordance with relevant regulations and conclude contracts with the information receivers.
Data Storage and Security Evaluation: Pursuant to the PRC data protection regulations, we will originally store within the territory of the PRC personal information and important data collected and generated during our operation within the territory of mainland China, in case such information is required to be transferred to any Group Company or any third party that are outside the territory of mainland China, we will conduct security evaluation therewith and execute a contract with the receiver.