Pennon Group Recruitment Privacy Policy
Who are we?
We are Pennon Group Plc. We are a company registered in England and Wales under number 02366640 with our registered office at Peninsula House, Rydon Lane, Exeter, Devon, EX2 7HR. Pennon owns South West Water Limited (SWW) (including Bournemouth Water (BW), Bristol Water (BRL)) Source for Business (Pennon Water Services) and SES Water, and may describe ourselves as "We" or “Us” in this Notice).
Who does this Notice apply to?
As part of our recruitment process, we collect, store, and process Personal Data about job applicants and prospective candidates (“you”, “your”). We are committed to protecting your privacy and Personal Data, and are therefore transparent regarding the data we collect, how the data are collected, where the data are stored, and how the data are processed. The following notice details all the above, setting out our obligations under both the UK GDPR and the Data Protection Act 2018 (“DPA”).
The Personal Data we process
Information we collect from you
- Basic personal details including, but not limited to, your name, email address, contact number(s), postal address, and preferred method of contact.
- Ethnicity, diversity and inclusion data (if you choose to provide this information)
- Identification documents, such as passports, driving licenses, or other photographic ID
- Availability and work eligibility details including, but not limited to, your notice period, preferred start date, current and/or future work eligibility status, visa type, visa expiry date and, for certain roles, data returned as part of a credit check or employment gap check.
- Documents you provide throughout the application process including, but not limited to, CVs, covering letters, aptitude test and assessment outputs. These documents may contain information on your employment history, academic qualifications/history, professional training/certifications, aptitude, skills, experiences and personal interests.
- Application details including, but not limited to, the source of your application, the date/time, the role(s) you applied for, salary history/expectations, and Equal Opportunities statements.
- Records of electronic communications including, but not limited to, the content and attachments of emails, and communications made via our applicant tracking system provided by TeamTailor.
Information we collect and generate about you
- Publicly available data including, but not limited to, your professional social networks (primarily LinkedIn, but also GitHub, Facebook and similar networks.).
- Job application progress including, but not limited to, the stages you complete of the recruitment process, records of interviews, interview notes/feedback, assessment feedback, rejection stage, rejection reason, and job offer details.
- Information related to collecting references and running background checks (for successful candidates only).
- Create employment contracts
Data Shared with Third Parties
- To enable us to generate Employment Contracts that can be signed electronically for an improved Candidate Experience and facilitate the onboarding process, we utilise a system called OneFlow. As part of the process we will share some of the information we collect in TeamTailor with OneFlow to facilitate this. The data we will share includes: Name, email address, offered Job Title, salary, National Insurance Number, bank details, next of kin details (all input directly by you at point of application or onboarding via the New Starter Forms that are released to you once you commence onboarding). OneFlow will also store your Employment Contract and note the time and date stamp of all signatures linked to the process. Your data and signed contract will be held in Oneflow for a maximum of 6 months from your job offer.
How the data are collected
We collect your Personal Data in a number of direct or indirect ways. Personal Data may come from a combination of sources, for example:
- Information you provide on application forms in our applicant tracking system, in electronic communications and telephone conversations with our representatives, and in job interviews and assessments.
- Information we collect from publicly available sources online.
- Information we generate following your interactions with our staff, systems, and processes.
- Information provided by third parties, such as recruitment agencies, background check agencies or via referrals or references (references are not sought without your express prior permission, and typically happen at the point of offer, and background checks only occur once an offer has been accepted).
How the data are stored
All Personal Data provided, collected, generated, or obtained will be shared with TeamTailor, engaged by us to provide our applicant tracking services recruitment platform. We take appropriate measures to ensure that all Personal Data is kept secure, including security measures to prevent Personal Data from being accidentally lost, used or accessed in an unauthorised way. Within Pennon, we limit access to your Personal Data within our applicant tracking system to those who have a genuine need to access it, namely, the HR/Talent Team, the hiring managers, interviewers/assessment reviewers, and in some circumstances the Executive Board, and the Director of the team where the role in question sits (please note that there may be overlap between the people in those positions). Those processing your Personal Data will do so only in an authorised manner and in line with our policies and are subject to a duty of confidentiality.
Security and storage of Personal Data
All information you provide to us - whether on paper, verbally or electronically - is stored securely. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your internet connection when you send us your data; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to help prevent unauthorised access.
Transfer of data outside of the UK and EEA
In processing Personal Data for recruitment purposes, TeamTailor, although a U.S. based company, will process your Personal Data on servers located in Ireland, so your data will remain in the European Economic Area (EEA). Should this change and it becomes necessary to transfer Personal Data to third party processors located outside the United Kingdom or the EEA or allow Personal Data to be accessed by processors outside the UK or EEA, for these data transfers we ensure that the relevant safeguards, as required in Article 46, are implemented, and transfer impact assessments are conducted (as appropriate).
Processing your Personal Data (our lawful basis for processing)
Lawful Basis for Processing
We’re required by law to always have a permitted reason or justification (called a “lawful basis”) for processing your Personal Data. We only process your Personal Data if we have a lawful basis to do so, if the processing is necessary, reasonable and proportionate, and in accordance with the way in which we describe in this Privacy Notice.
Our lawful basis for the collection and processing of your Personal Data for recruitment and employment is for taking steps to enter a contract of, or for employment or services with you.
Our lawful basis for the retention of your Personal Data relating to your application, beyond the role you initially applied for, to enable us to match you with other suitable roles, is based on consent – where you ask us to do this.
We rely on legitimate interest as the lawful basis on which we collect and use your Personal Data, specifically in the instances of collecting references and running background checks.
Purposes of processing
We use information held about you in a number of ways, including but not limited to:
- Considering your application in respect of the role for which you have applied.
- Considering your application in respect of other roles within Pennon Group, both at present and in the future (see How Long We Keep Your Personal Data below for more information on our data retention policy).
- Communicating with you in respect of the/any recruitment process/es.
- Enhancing and augmenting any information that we receive from you, with information collected, generated, or obtained throughout our recruitment processes.
- To help both TeamTailor and Pennon improve the effectiveness and efficiency of their and our recruitment systems and processes
- When appropriate, to create a contract of employment with you.
Use of Artificial Intelligence (AI)
The TeamTailor applicant tracking service application uses Co-pilot AI to assist with some elements of the recruitment and hiring process. Co-pilot will assist with candidate screening processes, ranking profiles based on set criteria, generating a summary of a candidate’s CV and suggesting existing candidates for future roles (those who have consented to be considered for future roles). While the applicant tracking system will use AI to assist us in the ways described, AI will not be used to make any decisions about individuals or their suitability for a role. These decisions will always be made by a human.
The Co-pilot AI within TeamTailor will also be used for tasks such as helping to draft job descriptions, suggest skills and traits for jobs, suggest interview kit questions, translate questions, draft email responses, take notes and produce a summary of a video interview, help writing job posts and suggest job application questions.
When processing via Co-pilot, we enforce Zero Data Retention. This means that inputs and outputs are not logged or stored, except in specific features like “Suggest existing candidates,” where temporary retention is required to make suggestions; this data is deleted after processing.
Please note, we do not make decisions based solely on automated means.
Exercising your rights
As a Data Subject, you have a number of rights in relation to your data under UK data protection law. For full information on your Rights, you can read the guidance from the Information Commissioner's Office at www.ico.org.uk. A summary of these rights is provided below:
Individual Rights
What this means
Access
You can ask us to confirm whether we are processing your data and request a copy of that data - see below on Subject Access Requests.
Rectification
You can ask that your Personal Data be corrected if you believe it is inaccurate or incomplete.
Erasure
You can ask us to erase your Personal Data, if –
- It is no longer needed for the purposes for which it was collected
- You have withdrawn your consent (Where the data processing was based on Consent)
Please note: there is not an absolute right to erasure as there are some circumstances where we will be unable to erase Personal Data – such as where we are obliged by law to retain data so that we can fulfil our legal obligations, or if we need to retain data to protect our own legal rights or to defend claims made against us.
Restriction
You can ask us to restrict your Personal Data (keep but not use). However, in some circumstances this right may not apply, for example, where we have a legal obligation to use the data.
Objection
You can object to any processing of your Personal Data for some specific purposes, such as marketing.
Please note, this right does not apply in all circumstances and you can only object to processing when we are using your data for a task carried out in the public interest, for the exercise of official authority, for legitimate interests, for scientific or historical research, or statistical purposes, or for direct marketing purposes.
Subject access request
All recruitment Personal Data, held by Pennon about you, is stored in our applicant tracking system. Functionality exists within the system to export a data file relating to specific individuals. This functionality is only employed in the event an individual explicitly requests a copy of the Personal Data we hold about them. In the event you make a request to access this data, Pennon will generate the abovementioned data file and share this with you within one month of the receipt of the request. You can submit a request by filling out this web form.
Rectification of inaccurate data request
To rectify any inaccuracies in your Personal Data held by Pennon, you must make a request to us, clearly indicating which information is in need of amendment, along with the correct information to take its place. Pennon will act on Personal Data correction requests within one month of the receipt of the request and send confirmation to the email address provided, upon resolution of the issue/s. You can submit a request by filling out this web form.
Erasure request
To request the erasure of your Personal Data, you must make a request to us; you must clearly indicate which data points you would like to be erased. Please note that your right to have your Personal Data erased is not an absolute right, and we reserve the right to refuse such a request, where there is an appropriate legal justification for doing so. For example, we will retain candidate/application data for a period of six months following a rejection notice. You will be notified accordingly in the event we are unable to process your data erasure request.
Pennon will act on an erasure request within one month of the receipt of the request and send confirmation to the email address provided. You can submit a request by filling out this web form or by using the delete my data link at the bottom of emails sent to you via the TeamTailor system.
How we process your data for roles outside of your formal application
From time to time following your initial engagement with our recruitment processes, you might ask us, or we may unilaterally decide, to consider your application for another role at Pennon. This may occur:
- At the time of your original application when, following an initial review of your CV, we conclude you would be better suited to a different opportunity currently vacant at Pennon.
- After your original application, where you have asked us to retain your data to consider you for other suitable roles
- At some point after your original application, when, at your request we reactivate your status as a candidate for a new opportunity in future.
In any of these scenarios, our Talent team will inform you of this decision via email, and you will have the opportunity to confirm your interest in the new role or to decline our consideration. Equally, the abovementioned rights will remain open to you for as long as we hold your Personal Data.
How long we keep your Personal Data
We will retain all Personal Data relating to your engagement/s with our Recruitment function to a total of twelve months after the application process has concluded, unless you renew your consent, in which case we will hold your data for a further 12 months after you last renewed consent. You will be sent a notice to extend your permissions every 12 months thereafter until you revoke your consent.
On our job application forms, you will also have the opportunity to give your consent to an extension of this retention period for a further 12 months where you will be asked if you wish to extend your consent. If consent is given, your Personal Data will be retained so we can consider you for other suitable opportunities (based on the information you have provided) at Pennon throughout that period. If consent is not given, your Personal Data will be erased in line with our normal retention periods, unless you ask us to delete your data, at which point, if we can erase your data, it will be erased within one month of receipt of your request.
Personal Data relating to your job application(s) will be deleted automatically by our applicant tracking system after the relevant retention period expires; this includes any documents you have submitted as part of any recruitment process you were involved in. For the purposes of reporting on and improving the effectiveness and efficiency of our recruitment systems and processes, we retain a small volume of data relating to your application. This data relates to the fact a role was filled but it is anonymised and therefore, none of these data points are personally traceable to you.
In order to have your Personal Data deleted ahead of the deadline, you must notify the Talent team of your desire according to the instructions outlined in the Exercising your rights section above.
How to complain
If you are not satisfied with our response or believe we are not processing your Personal Data in accordance with the law, you can refer your concerns to the Information Commissioner's Office (ICO).
We hope that we can resolve any query or concern you raise about our use of your Personal Data, however, should you need to contact the Information Commissioner's Office you can do so using one of the following methods:
Write to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113 or 01625 545 745
Website: www.ico.org.uk
Contacting Pennon
If you have any questions, queries, or issues relating to our recruitment policies and processes, or how they relate to our adherence to both the GDPR and DPA, then please contact our Talent team via email at recruitment@pennon-group.co.uk , or our Data Protection team via dataprotection@pennon-group.co.uk
Who are we? We are Pennon Group Plc. We are a company registered in England and Wales under number 02366640 with our registered office at Peninsula House, Rydon Lane, Exeter, Devon, EX2 7HR. Pennon owns South West Water Limited (SWW) (including Bournemouth Water (BW), Bristol Water (BRL)) Source for Business (Pennon Water Services) and SES Water, and may describe ourselves as "We" or “Us” in this Notice).
Who does this Notice apply to?
As part of our recruitment process, we collect, store, and process Personal Data about job applicants and prospective candidates (“you”, “your”). We are committed to protecting your privacy and Personal Data, and are therefore transparent regarding the data we collect, how the data are collected, where the data are stored, and how the data are processed. The following notice details all the above, setting out our obligations under both the UK GDPR and the Data Protection Act 2018 (“DPA”).
The Personal Data we process
Information we collect from you
- Basic personal details including, but not limited to, your name, email address, contact number(s), postal address, and preferred method of contact.
- Ethnicity, diversity and inclusion data (if you choose to provide this information)
- Identification documents, such as passports, driving licenses, or other photographic ID
- Availability and work eligibility details including, but not limited to, your notice period, preferred start date, current and/or future work eligibility status, visa type, visa expiry date and, for certain roles, data returned as part of a credit check or employment gap check.
- Documents you provide throughout the application process including, but not limited to, CVs, covering letters, aptitude test and assessment outputs. These documents may contain information on your employment history, academic qualifications/history, professional training/certifications, aptitude, skills, experiences and personal interests.
- Application details including, but not limited to, the source of your application, the date/time, the role(s) you applied for, salary history/expectations, and Equal Opportunities statements.
- Records of electronic communications including, but not limited to, the content and attachments of emails, and communications made via our applicant tracking system provided by TeamTailor.
Information we collect and generate about you
- Publicly available data including, but not limited to, your professional social networks (primarily LinkedIn, but also GitHub, Facebook and similar networks.).
- Job application progress including, but not limited to, the stages you complete of the recruitment process, records of interviews, interview notes/feedback, assessment feedback, rejection stage, rejection reason, and job offer details.
- Information related to collecting references and running background checks (for successful candidates only).
- Create employment contracts
Data Shared with Third Parties
- To enable us to generate Employment Contracts that can be signed electronically for an improved Candidate Experience and facilitate the onboarding process, we utilise a system called OneFlow. As part of the process we will share some of the information we collect in TeamTailor with OneFlow to facilitate this. The data we will share includes: Name, email address, offered Job Title, salary, National Insurance Number, bank details, next of kin details (all input directly by you at point of application or onboarding via the New Starter Forms that are released to you once you commence onboarding). OneFlow will also store your Employment Contract and note the time and date stamp of all signatures linked to the process. Your data and signed contract will be held in Oneflow for a maximum of 6 months from your job offer.
How the data are collected
We collect your Personal Data in a number of direct or indirect ways. Personal Data may come from a combination of sources, for example:
- Information you provide on application forms in our applicant tracking system, in electronic communications and telephone conversations with our representatives, and in job interviews and assessments.
- Information we collect from publicly available sources online.
- Information we generate following your interactions with our staff, systems, and processes.
- Information provided by third parties, such as recruitment agencies, background check agencies or via referrals or references (references are not sought without your express prior permission, and typically happen at the point of offer, and background checks only occur once an offer has been accepted).
How the data are stored
All Personal Data provided, collected, generated, or obtained will be shared with TeamTailor, engaged by us to provide our applicant tracking services recruitment platform. We take appropriate measures to ensure that all Personal Data is kept secure, including security measures to prevent Personal Data from being accidentally lost, used or accessed in an unauthorised way. Within Pennon, we limit access to your Personal Data within our applicant tracking system to those who have a genuine need to access it, namely, the HR/Talent Team, the hiring managers, interviewers/assessment reviewers, and in some circumstances the Executive Board, and the Director of the team where the role in question sits (please note that there may be overlap between the people in those positions). Those processing your Personal Data will do so only in an authorised manner and in line with our policies and are subject to a duty of confidentiality.
Security and storage of Personal Data
All information you provide to us - whether on paper, verbally or electronically - is stored securely. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your internet connection when you send us your data; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to help prevent unauthorised access.
Transfer of data outside of the UK and EEA
In processing Personal Data for recruitment purposes, TeamTailor, although a U.S. based company, will process your Personal Data on servers located in Ireland, so your data will remain in the European Economic Area (EEA). Should this change and it becomes necessary to transfer Personal Data to third party processors located outside the United Kingdom or the EEA or allow Personal Data to be accessed by processors outside the UK or EEA, for these data transfers we ensure that the relevant safeguards, as required in Article 46, are implemented, and transfer impact assessments are conducted (as appropriate).
Processing your Personal Data (our lawful basis for processing)
Lawful Basis for Processing
We’re required by law to always have a permitted reason or justification (called a “lawful basis”) for processing your Personal Data. We only process your Personal Data if we have a lawful basis to do so, if the processing is necessary, reasonable and proportionate, and in accordance with the way in which we describe in this Privacy Notice.
Our lawful basis for the collection and processing of your Personal Data for recruitment and employment is for taking steps to enter a contract of, or for employment or services with you.
Our lawful basis for the retention of your Personal Data relating to your application, beyond the role you initially applied for, to enable us to match you with other suitable roles, is based on consent – where you ask us to do this.
We rely on legitimate interest as the lawful basis on which we collect and use your Personal Data, specifically in the instances of collecting references and running background checks.
Purposes of processing
We use information held about you in a number of ways, including but not limited to:
- Considering your application in respect of the role for which you have applied.
- Considering your application in respect of other roles within Pennon Group, both at present and in the future (see How Long We Keep Your Personal Data below for more information on our data retention policy).
- Communicating with you in respect of the/any recruitment process/es.
- Enhancing and augmenting any information that we receive from you, with information collected, generated, or obtained throughout our recruitment processes.
- To help both TeamTailor and Pennon improve the effectiveness and efficiency of their and our recruitment systems and processes
- When appropriate, to create a contract of employment with you.
Use of Artificial Intelligence (AI)
The TeamTailor applicant tracking service application uses Co-pilot AI to assist with some elements of the recruitment and hiring process. Co-pilot will assist with candidate screening processes, ranking profiles based on set criteria, generating a summary of a candidate’s CV and suggesting existing candidates for future roles (those who have consented to be considered for future roles). While the applicant tracking system will use AI to assist us in the ways described, AI will not be used to make any decisions about individuals or their suitability for a role. These decisions will always be made by a human.
The Co-pilot AI within TeamTailor will also be used for tasks such as helping to draft job descriptions, suggest skills and traits for jobs, suggest interview kit questions, translate questions, draft email responses, take notes and produce a summary of a video interview, help writing job posts and suggest job application questions.
When processing via Co-pilot, we enforce Zero Data Retention. This means that inputs and outputs are not logged or stored, except in specific features like “Suggest existing candidates,” where temporary retention is required to make suggestions; this data is deleted after processing.
Please note, we do not make decisions based solely on automated means.
Exercising your rights
As a Data Subject, you have a number of rights in relation to your data under UK data protection law. For full information on your Rights, you can read the guidance from the Information Commissioner's Office at www.ico.org.uk. A summary of these rights is provided below:
Individual Rights
What this means
Access
You can ask us to confirm whether we are processing your data and request a copy of that data - see below on Subject Access Requests.
Rectification
You can ask that your Personal Data be corrected if you believe it is inaccurate or incomplete.
Erasure
You can ask us to erase your Personal Data, if –
- It is no longer needed for the purposes for which it was collected
- You have withdrawn your consent (Where the data processing was based on Consent)
Please note: there is not an absolute right to erasure as there are some circumstances where we will be unable to erase Personal Data – such as where we are obliged by law to retain data so that we can fulfil our legal obligations, or if we need to retain data to protect our own legal rights or to defend claims made against us.
Restriction
You can ask us to restrict your Personal Data (keep but not use). However, in some circumstances this right may not apply, for example, where we have a legal obligation to use the data.
Objection
You can object to any processing of your Personal Data for some specific purposes, such as marketing.
Please note, this right does not apply in all circumstances and you can only object to processing when we are using your data for a task carried out in the public interest, for the exercise of official authority, for legitimate interests, for scientific or historical research, or statistical purposes, or for direct marketing purposes.
Subject access request
All recruitment Personal Data, held by Pennon about you, is stored in our applicant tracking system. Functionality exists within the system to export a data file relating to specific individuals. This functionality is only employed in the event an individual explicitly requests a copy of the Personal Data we hold about them. In the event you make a request to access this data, Pennon will generate the abovementioned data file and share this with you within one month of the receipt of the request. You can submit a request by filling out this web form.
Rectification of inaccurate data request
To rectify any inaccuracies in your Personal Data held by Pennon, you must make an explicit request to us, clearly indicating which information is in need of amendment, along with the correct information to take its place. Pennon will act on Personal Data correction requests within one month of the receipt of the request and send confirmation to the email address provided, upon resolution of the issue/s. You can submit a request by filling out this web form.
Erasure request
To request the erasure of your Personal Data, you must make an explicit request to us; you must clearly indicate which data points you would like to be erased. Please note that your right to have your Personal Data erased is not an absolute right, and we reserve the right to refuse such a request, where there is an appropriate legal justification for doing so. For example, we will retain candidate/application data for a period of six months following a rejection notice. You will be notified accordingly in the event we are unable to process your data erasure request.
Pennon will act on an erasure request within one month of the receipt of the request and send confirmation to the email address provided. You can submit a request by filling out this web form or by using the delete my data link at the bottom of emails sent to you via the TeamTailor system.
How we process your data for roles outside of your formal application
From time to time following your initial engagement with our recruitment processes, you might ask us or we may unilaterally lidecide to consider your application for another role at Pennon. This may occur:
- At the time of your original application when, following an initial review of your CV, we conclude you would be better suited to a different opportunity currently vacant at Pennon.
- After your original application, where you have asked us to retain your data to consider you for other suitable roles
- At some point after your original application, when, at your request we reactivate your status as a candidate for a new opportunity in future.
In either of these scenarios, our Talent team will inform you of this decision via email, and you will have the opportunity to confirm your interest in the new role or to decline our consideration. Equally, the abovementioned rights will remain open to you for as long as we hold your Personal Data.
How long we keep your Personal Data
We will retain all Personal Data relating to your engagement/s with our Recruitment function to a total of twelve months after the application process has concluded, unless you renew your consent, in which case we will hold your data for a further 12 months after you last renewed consent. You will be sent a notice to extend your permissions every 12 months thereafter until you revoke your consent.
On our job application forms, you will also have the opportunity to give your consent to an extension of this retention period for a further 12 months where you be asked if you wish to extend your consent. If consent is given, your Personal Data will be retained so we can consider you for other suitable opportunities (based on the information you have provided) at Pennon throughout that period. If consent is not given, your Personal Data will be erased after 1 week of your request to delete your data.
Personal Data relating your job application(s) will be deleted automatically by our applicant tracking system after the relevant retention period expires; this includes any documents you have submitted as part of any recruitment process you were involved in. For the purposes of reporting on and improving the effectiveness and efficiency of our recruitment systems and processes, we retain a small volume of data relating to your application, this data relates to the fact a role was filled but is anonymised and therefore, none of these data points are personally traceable to you.
In order to have your Personal Data deleted ahead of the deadline, you must notify the Talent team of your desire according to the instructions outlined in the Exercising your rights section above.
How to complain
If you are not satisfied with our response or believe we are not processing your Personal Data in accordance with the law, you can refer your concerns to the Information Commissioner's Office (ICO).
We hope that we can resolve any query or concern you raise about our use of your Personal Data, however, should you need to contact the Information Commissioner's Office you can do so using one of the following methods:
Write to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113 or 01625 545 745
Website: www.ico.org.uk
Contacting Pennon
If you have any questions, queries, or issues relating to our recruitment policies and processes, or how they relate to our adherence to both the GDPR and DPA, then please contact our Talent team via email at recruitment@pennon-group.co.uk , or our Data Protection team via dataprotection@pennon-group.co.uk
