GDPR Privacy Notice – Direct Job Applicants


At Williams we take our obligations to protect your privacy seriously. The General Data Protection Regulation, incorporated in the UK by The Data Protection Act 2018 (the Act), requires us to provide you with important information on how we collect and use your personal data.

Your data is processed by Williams Motor Co. (Holdings) Limited, whose principal business address is 2 Vincent Way, Raikes Lane, Bolton, BL3 2NB. For the purpose of the Act, this company is defined as a data controller and the data controller’s lead on data protection is John Penney, Director of Finance and can be contacted using the below details

In line with GDPR we can only process your data if there is a legal basis for doing so.We rely on two legal bases for processing your data, being:

  • Your consent, which you can withdraw at any time (although without this we cannot process your application further)
  • Our legitimate business interests

We must also specify the purposes for processing your data. The only purpose for processing your data is to progress and assess your application to join the company.

We need to inform you of other parties who we may share your data with. Internally we need to share your data with the person(s) overseeing the recruitment process and managers who may conduct interviews or who otherwise might be involved in the selection process. If colleagues are to be involved in the recruitment process, certain, limited data may be shared with them. Externally, we may use the contractors or individuals listed below to process your data.Any contractors with whom we share data about you, or who generate data as a result of our request, will be required to delete your data as soon as they have concluded the service provided to us.

  • Companies (net assess international) who provide candidate assessment services (e.g. psychometric profiling).
  • Companies who undertake background screening for us (e.g. credit checking agencies, criminal checking bureaux if applicable).
  • Academic institutions (Universities, colleges, etc.) in validating information you have provided
  • People you have named as willing to provide a reference in support of your application.

We do not transfer any of your data outside of the EEA.

Privacy right

Importantly, you have a number of rights with regard to the data we hold about you. For example, you can request access to your data, and can require that we rectify or erase it. Your requests will be properly considered. However, this does not automatically mean that we will agree to your request, as we may have other obligations that outweigh your rights. For example, we may be required to justify why we have not offered someone a role.

In the event that you are offered and accept a role with us, we will inform you of how your data will then be processed. Data from the recruitment and selection process may be retained as part of wider employee data held on you.

In the event you are not offered a role, or you are offered a role but decline (or otherwise do not become an employee of the Company), we will delete such personal data that is no longer required for our legitimate business purposes, unless you have told us that you wish us to retain your data in the event other opportunities may become available for which you may be considered. This being the case, we will retain your data for this purpose for up to 12 months.

The legislation covering data protection is quite complex. We have tried to keep this document brief and clear to help you understand your rights in respect of the personal data that we process. Should you require further information or in the event that you are not content with how we are managing your personal data, please contact John Penney using the contact details supplied.

You should also be aware that you have the right to lodge a complaint with the UK’s independent data regulator, the ICO, see details below.


ICO helpline: 0303 123 1113