RECRUITMENT PRIVACY NOTICE

Data Controller:

SBM Bank (Kenya) Limited is a subsidiary of Mauritian based SBM Holdings. This Recruitment Privacy Notice (“Notice”) describes why we collect and how we process your personal data, how we protect your personal data, and how you can exercise your rights in relation to the personal data that we collect and process. SBM Bank (Kenya) Limited and its entities are committed to respecting your privacy and protection of your personal data. We define personal data as information that directly identifies an individual or that makes an individual identifiable when combined with other information.

This Recruitment Privacy notice (“Privacy Notice”) applies to the processing of personal data in relation to recruitment related processes and programs. This Notice only applies to the personal data of job applications, potential candidates for employment, and those who participate in our candidate pool.

By submitting your application to us, you acknowledge that:

• You have read and understood this Privacy Notice and agree to the use of your personal data as set out herein.
• You are not required to provide any requested information to us, but your failure to do so may result in our not being able to continue your candidacy for the job for which you have applied.
• All your representations are true and correct to the best of your knowledge and belief, and you have not knowingly omitted any related information of an adverse nature.
• This Privacy Notice does not form part of any contract of employment offered to candidates hired by SBM Bank (Kenya) Limited.

Providing any inaccurate information may make you ineligible for employment.

Data Collection and Purpose:

By submitting your application, you consent to SBM Kenya collecting and processing your personal data, including but not limited to your name, contact details, employment history, qualifications, and other information provided through our recruitment platform. This data will be used exclusively for the purpose of evaluating your suitability for the position(s) you have applied for, screening, conducting recruitment assessments, and making recruitment decisions.

Legal Basis

Our processing of your personal data for the purposes mentioned above is based on one or several of the following legal grounds:

• in part, on our legitimate business interests in evaluating your application to manage our relationship with you, to ensure that we recruit appropriate employees, and to evaluate and maintain the efficacy of our recruiting process more generally; and in operating our business and protecting the Bank and its employees, clients, and third parties. When we rely on this legal ground, SBM Bank will only process your personal data after assessing the adequacy, proportionality, and legitimacy of the data processing activity.
• in part, on our performing contractual and precontractual measures relating to our potential employment relationship with you;
• in part, on our complying with applicable law with regard to personal data necessary to satisfy our legal and regulatory obligations, including with regard to public health and workplace safety.
• in part, on your consent, if we offer you the opportunity to participate in our optional recruiting programs or if we collect sensitive personal data for legally permitted purposes other than compliance with our legal obligations regarding public health and workplace safety.
  
  

Data Usage:

Your personal data will be processed for the following purposes:

• Reviewing and assessing your qualifications and experience.
• Screening candidates to determine suitability for the role.
• Conduct reference checks, background checks, and other recruitment-related assessments.
• Communicating with you regarding the status of your application and next steps.

Data Retention:

Your personal data will be stored securely and retained for no longer than necessary for the recruitment process. If your application is successful, your data may be used to create your employment records. If your application is unsuccessful, your data will be retained for a period of 6 months. However, you have the right to exercise your right to deletion earlier than the retention period. unless you request its deletion earlier.

Your Rights:

Under Kenya's Data Protection Act, 2019, you have the following rights regarding your personal data:

• The right to access the personal data we hold about you.
• The right to rectify any inaccurate or incomplete data.
• The right to request the deletion of your personal data (subject to certain conditions).
• The right to object to or restrict processing under specific circumstances.
• The right to withdraw your consent at any time (where consent is the legal basis for processing). If you would like to exercise your data protection rights regarding your personal data, you can do so by:
• Completing the data-subject request form Data Subject Request Form – Fill out form
• Emailing your request to careers@sbmbank.co.ke and copy dpo@sbmbank.co.ke

Data Security:

We are committed to safeguarding your personal data. We use appropriate technical and organizational measures to ensure that your information is secure and protected from unauthorized access, disclosure, alteration, or destruction.

Third-Party Sharing:

We may share your personal data with trusted third parties, such as background check providers or recruitment partners, for the purpose of screening and evaluating candidates. Any third-party providers with whom we share your data are required to handle it in compliance with the Data Protection Act, 2019, and only for the purposes outlined above.

Contacting Us

If you have any questions in relation to how SBM (Bank) Kenya Ltd processes your personal data, this Privacy Notice, or would like to exercise your rights, please contact us at: careers@sbmbank.co.ke and/or dpo@sbmbank.co.ke