Toyota Connected Europe Privacy Notice
This policy is provided by Toyota Connected Europe Limited (“TCEU”, “we”, or “us”), 2nd Floor 80 Turnmill Street, London, England, EC1M 5QU; www.toyotaconnected.eu.
TCEU is a Data Controller for your data in respect of the purposes described in this privacy notice, except where otherwise indicated. Our Data Protection Officer can be contacted by sending an email to Privacy@toyotaconnected.eu.
This notice describes your personal data being processed by TCEU as part of your application for employment or to work with TCEU.
WHAT DOES TCEU DO – THE PURPOSES?
TCEU processes your personal data that you provide or is necessary as part of your application to work with TCEU, this includes legal obligations placed upon TCEU, and includes the following:
- information on your curriculum vitae;
- personal data provided during interviews, and any tests that may be applicable;
- right to work checks (once an offer has been made and you agree to work with TCEU);
- references (once an offer has been made and you agree to work with TCEU);
- data necessary for TCEU to comply with legal obligations:
- data necessary in connection with any legal claims made by you, against you, or otherwise involving you.
This privacy notice covers all personal data processing from the point you contact or apply to work with TCEU.
CATEGORIES OF DATA?
Contact details
Name, ethnicity, email address, telephone number, address, passport/ ID card (where an offer is made), work telephone number, name and contact details of emergency contact. Note that for Polish employees, who are EU citizens, copies will not be taken of your passport or ID card. If you are a non EU citizen, a copy will be retained.
Work experience and qualifications
Information about your career history, including previous jobs and timeframes, as well as qualifications & any other information you provide on your CV, training course attended, as well as obligatory training records in order to comply with legal obligations.
Technical data
Data collected from our website when you make an application for employment, including IP address, device type, browser type and version, pages visited, dates and times of actions, including scrolling through our website, data submitted.
Interview data
Information you provide as part of the interview process, including dates of interview.
Health data
Information relating to your health, to the extent that TCEU needs to be aware of this as part of taking steps to employ you.
References
Data that is provided by persons that you give consent to give references for you. This will usually be confirmation of your employment, dates, and position, plus any form of recommendation when a personal character reference is required.
Right to work checks
Once an offer is made, TCEU will be required by law to ensure you have the right to work in the United Kingdom, for this we will process your passport, name, address (and previous addresses), DOB, and selfie photo.
CCTV
Security cameras on the entrance to our offices, that is the lifts and stair well door.
WHO WE SHARE YOUR DATA WITH?
TCEU will not share your data as part of the recruitment process.
TCEU uses service providers to help deliver our services. These providers, known as processors, can only process your data on our instructions. The main processors that TCEU uses are:
WHERE DO WE COLLECT YOUR DATA FROM?
- You;
- Persons/previous employers whom you have nominated to provide references;
- Social media such as LinkedIn;
- Public domain sources, such as companies house (and depending on the role you have applied for).
- We receive information about you from our employees or partners, since they believe your profile is of interest for our current or future vacancies (you being a “Referred Candidate).
THE PURPOSES, RETENTION, AND LAWFUL BASIS
Purpose 1
To assess your application for a job with TCEU
Lawful Basis
Polish employees – Legal Obligation, and Consent (depending on the type of data)
UK employees – Legal Obligation and Legitimate Interests
Categories of Data (some or all of each category mentioned)
Any or all of the categories of data listed
Retention Period
UK employees - Upto 1 year, or as agreed with you if pursuing a general desire to work with TCEU, rather than one role
Polish employees - upto to the point your application is regarded as unsuccessful for Polish employees
No data sharing expected
Purpose 2
Complying with applicable laws.
Lawful Basis
Legal obligation
Article 9, d (b) for any special category data (including health & ethnicity).
and article 9, 2 (b) where right to work checks are carried out using biometric data
Categories of Data (some or all of each category mentioned)
Any or all of the above data
Details of any health conditions that TCEU needs to be aware of as part of your employment.
Right to work checks.
Technical data
Retention
UK employees - Upto 6 months after your application
Polish employees - immediately upon assessing your application as unsuccessful
UK employees - for successful applicants only - 6 years after termination of your contract of employment
Polish employees – up to 10 years after termination of employment
For technical data – 12 months
Who your data is shared with the following if you accept an offer
Zinc (or other ID checking service).
HMRC.
Aviva Pensions.
Purpose 3
Insights and analysis
Lawful basis
Consent
Categories of Data
Technical data from use our website
Retention
Upto 12 months
Who your data is shared with
Technical data from our website, if you have consented - Team Tailor - https://www.teamtailor.com/en/
Purpose 4
To protect our office, staff and equipment via use of CCTV when entering and leaving our office
Lawful Basis
Legitimate Interest
Retention
30 days for video recordings
Who do we share your data with
We do not expect to share your data
YOUR RIGHT TO OBJECT
Where we rely on Legitimate Interests when processing your Personal Data, you have the right to object to such processing unless we have a compelling and legitimate reason to continue processing your Personal Data. If you want to object to the processing, we will keep minimal details about when you objected. Please email privacy@toyotaconnected.eu
and we will delete your data.
SECURITY MEASURES
Whilst we take all reasonable precautions to protect Personal Data from loss, misuse, alteration or destruction and comply with data protection laws, data transmission over the internet may not be adequately secured by the sender. As a result, TCEU cannot ensure the secure receipt of any information that is sent to TCEU by this medium and any such information is sent at your own risk.
SPECIAL CATEGORY DATA
TCEU may process personal data relating to your health where necessary to accommodate you (including any disabilities you may have) as part of your application for employment, as well as any brief health details that may be necessary to share in order to comply with a legal obligation.
We also process your passport in order to comply with our legal obligation of ensuring you have the right to work in the United Kingdom.
CHILDREN’S DATA
We do not process children’s data other than a child's name for your nominated beneficiaries in line with some of the benefits we provide.
WHERE IS YOUR DATA PROCESSED?
We may transfer your Personal Data to countries or territories outside your place of residence, where data protection laws may not offer the same level of protection available in your home country. We will implement appropriate measures to ensure that your Personal Data remains protected and secure when it is transferred outside of your home country, in accordance with applicable data protection and privacy laws. These measures include data transfer agreements implementing standard data protection clauses. You can find more information about data transfer agreements here.
YOUR RIGHTS WITH RESPECT TO YOUR PERSONAL DATA
You have the following rights:
- to receive confirmation from us as to whether we process your Personal Data, and, where we do, access a copy of that Personal Data and certain other information;
- to request the rectification of any inaccurate Personal Data that we hold about you;
- to request the erasure of your Personal Data in certain circumstances;
- to request the restriction of our processing of your Personal Data in certain other circumstances, for example in certain scenarios where we are unable to comply with a request to erase your Personal Data;
- receive a copy of the Personal Data that you have provided to us in a structured, machine-readable and commonly used format and/or, where possible, to request we transmit that Personal Data to another organisation;
- object to certain processing of your Personal Data;
- withdraw your consent to the processing of your Personal Data (where we are processing your Personal Data based on your consent); and
- make a complaint about our handling of your Personal Data to your local data protection supervisory authority (details of local supervisory authorities in each EU Member State can be found here). For the United Kingdom Commissioners Office - 0303 123 1113, Urzędu Ochrony Danych Osobowych, PUODO ul. Stanisława Moniuszki 1A, 00-014 Warszawa Telephone 22 531-03-00 - https://uodo.gov.pl/en/p/contact
- The right to human intervention: You have the right to object where a decision is based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you (for more details see Article 22 of the GDPR.
The updated version of this privacy notice can be found online at: https://toyotaconnected.eu/privacy-policy/products/ by selecting Recruitment, and then Recruitment Notice
Policy Updated - 2.2026 - TCEU DPO
