Privacy Notice - Gibraltar - Recruitment

Privacy Notice

We want to make sure you and your data stay safe online. We, William Hill Organization Limited, Grand Parade Sp. z o.o. and WHG (International) Limited, jointly and severally liable (William Hill), will process personal data that you submit to us as a controller.  We’ll process any personal data under the terms set out in this Privacy Notice. 

Personal data we collect

We only collect personal data (including special categories of personal data and personal data relating to criminal convictions and offences and financial checks, in countries where this applies) that you submit to us when you apply for a role with us or send to us via email.  This could be your name, contact details, previous employment, education history and anything else that’s in your CV, cover letter or any references.

Why we process this personal data

We need your personal data so that we can consider you for the role you’ve applied for with us. We may also share your personal data with other people within William Hill for the same reasons.  We would only share this with your consent, which you give when you apply for a role with us.

If we decide to offer you a role with us, we may process your personal data so that we can hire you to work at William Hill. We have to process your data so that we can raise and offer you a contract of employment.

If unfortunately we don’t offer you a role, we’ll of course stop processing your data (see Retaining your personal data section below). However, we may ask that we do keep your data for a time so that we can re-consider you for other roles with us. If that’s ok with you, we would only process your data for these reasons.  

We might also use your data to understand more about the demographics of people applying to work with us. This would be aggregated and anonymised so this information stops being personal data as we wouldn’t be able to identify you, and it wouldn’t be used to inform any decisions made about you.

Keeping your personal data secure

We know your personal data is important to you. It’s important to all of us. So we’ll treat it as confidential.

Disclosing your personal data

As we’ve already mentioned, we might share some of your data with other colleagues within William Hill.

There may also be carefully selected third parties who would process your personal data on our behalf.  These third parties will only process your personal data according to our guidelines. We’ll make sure that there are measures in place keeping your data safe at all times, in line with this Privacy Notice.  Some of these processors are based outside of the European Economic Area and in territories whose laws do not offer the same level of protection of your personal data as within the UK and Europe, specifically US and Philippines.  In such circumstances we will ensure that adequate measures are in place to keep your personal data secure, including standard contractual clauses pursuant to European Decision 2010/87/EC and those that are certified with the EU-US Privacy Shield Framework. 

  • We may also share your information with third parties in the following situations, where it’s legally allowed: Where we’re required to do so by law, court order or governmental authority.
  • If we believe doing so is necessary to protect the rights, property, security, or safety of us, our colleagues or the public.
  • Where required to defend ourselves legally.
  • Where necessary to investigate and defend ourselves against any claims or allegations.
  • While negotiating or in relation to a business transaction, such as a merger, change of control, sale of assets, or bankruptcy.
Retaining your personal data

We’ll only hold on to your personal data for as long as is necessary so we can process it, as set out in this Privacy Notice.  If you’re unsuccessful in your application and don’t want us to keep your personal data then we’ll delete it within 12 months. If you’re successful then we’ll continue to process your personal data in line with our employee privacy notice. 

Please note that there may be legal or regulatory reasons which mean we need to hold on to your personal data for longer.

Your rights

You have the following rights in relation to your personal data:

  • A right to access your personal data held by us.
  • A right to receive certain personal data in machine-readable format.
  • A right to have inaccurate personal data rectified.
  • A right to object to processing where lawful basis is that it is in our legitimate interests, but please note that we may still process your personal data where there are other relevant lawful bases. This also comes into play where we have compelling grounds to continue processing your personal data in our interests which are not overridden by your rights, interests or freedoms.
  • A right to have certain personal data erased where it is no longer necessary for us to process it, where you have withdrawn your consent (see paragraph below), where you have objected to the paragraph above , where your personal data has been unlawfully processed, or where erasing your personal data is required in accordance with a legal obligation.
  • A right to request an explanation of the logic involved where we make decisions about you solely through automated means.
  • A right to complain to a data protection supervisory authority in respect of our processing of your personal data.
  • Where we have specifically requested your consent to process your personal data and have no other lawful conditions to rely on you have the right to withdraw this consent.

If you’re not sure about your rights let us know or your data protection supervisory authority. 

If you’d like to exercise any of your rights then you can do so by contacting us.  Note that whilst we’ll try to accommodate any request you make in respect of your rights they are not absolute rights.  This means that we may have to refuse your request or may only be able to comply with it in part. 

Where you make a request in respect of your rights we’ll require proof of identification.  We may also ask that you clarify your request.  If we receive repeated requests or have reason to believe requests are being made unreasonably we may not be required to respond. 

Contact Us

If you have any questions please contact us at

We’ve also set up a Data Protection Office which oversees data protection at William Hill.  If you’ve got any queries regarding your personal data you can contact the Data Protection Office by emailing