Accessability Links
We use cookies to improve your experience when using our website.
Some cookies have already been set.
To find out more about the cookies we use, view our cookie policy
Accept

Cookie & Privacy Policy

Your personal data is data which by itself or with other data available to the Company can be used to identify you. For these purposes the Company (the data controller) is your specific prospective employer as listed below;-

Npower Limited (No 3653277)
Npower Yorkshire Limited (No 3937808)
Innogy Business Services UK Limited (No 06052966)
Innogy Renewables UK Limited (No 02550622)

The registered address of all Companies is:
Windmill Hill Business Park, Whitehill Way, Swindon, SN5 6PB. Registered in England & Wales.

This data protection statement sets out how the Company will process and use your personal data. The Company is committed to being transparent about how it collects and uses your personal data and to meeting its data protection obligations.

Our Data Protection Officer (DPO) provides help and guidance to assist us in meeting our obligations and to ensure we protect the data we hold about you. If you have any questions about how we use your information our DPO can be contacted by writing to Data Protection Officer, npower, Legal Department, Trigonos, Windmill Hill Business Park, Whitehill Way, Swindon, SN5 6PB.

The types of personal data the Company will collect and use

The Company will use your personal data to manage the recruitment process. It will collect and process a range of information about you which may include:

  • Your name, address and contact details, including email address and telephone number;
  • Your social network links, if you choose to provide these as part of your job application;;
  • Details of your qualifications, skills, experience, current employment and employment history, including start and end dates, with previous employers and with the Company;
  • Your candidate profile preferences including whether you would like your profile to be visible to other recruiters within the Innogy group;
  • Information about your nationality and entitlement to work in the UK;
  • Details of your referees such as previous employers, character or educational referees;
  • Information about your criminal record;
  • Information about your financial history;
  • Your address history;
  • Details of your test results and reviews of your performance in interviews and assessment centres including all related interview notes;
  • Information about your current remuneration package and your future remuneration expectations, including entitlement to benefits such as pensions or insurance cover;
  • Your National Insurance number;
  • Information about medical or health conditions, including whether or not you have a disability for which the organisation needs to make reasonable adjustments;
  • In exceptional circumstances your bank details to enable reimbursement of travel expenses;
  • Any other correspondence with you relating to the application and selection process; and
  • Diversity and inclusion monitoring information, including information about your age, gender, ethnic origin, and whether you have a disability

How the Company will collect your data
The Company may collect your personal data in a variety of ways. For example, data might be collected through online application forms, CVs or resumes; obtained from your passport or other identity documents; from correspondence with you; or through interviews, meetings or other assessments during the recruitment process.

In some cases, the Company may collect personal data about you from third parties, such as references supplied by former employers, information from employment background check providers, information from credit reference agencies, and information from criminal records checks permitted by law.

Where the Company will store your data
Your personal data will be stored in a range of different places, including in the organisation's or it’s third party’s HR recruitment management systems (its applicant tracking system) and in other IT systems (including the Company’s email system and shared drives).

Providing your personal data
The Company will tell you if the personal data you are providing is optional. In all other cases the personal data that you provide to the Company is processed as detailed within this statement (unless you are already an employee and the Company already holds your personal data in which case it will be processed in line with the Employee Data Protection Statement provided to you with your contract of employment.)

Using your personal data: the legal bases and purposes
The Company can only use your personal data where that is permitted by data protection laws. Those laws require that where the Company uses your personal data it must satisfy certain conditions for processing.

The legal bases used by the Company are:

  • to take steps to enter into a contract;
  • if it’s in the Company’s legitimate interests;
  • to comply with legal obligations;
  • with your consent; and
  • to protect your vital interests.

As such the Company will process your personal data in the following ways:
As necessary to take steps to enter into a contract of employment:

  • to run recruitment and promotion processes; 
  • to seek employment references and carry out any necessary employment checks to assess potential risks to the business, for protection purposes and to verify the details you have provided during the application process; 
  • to provide you with an appropriate contact of employment.

As necessary for the Company’s own legitimate interests or those of other persons or organisations:

  • to obtain occupational health advice, to ensure that it complies with the Company’s duties in relation to individuals with health conditions and disabilities, to meet its obligations under health and safety law, and ensure that all employees are fit for their intended work and receiving the pay or other benefits to which they are entitled.

As necessary to comply with a legal obligation:

  • to check your right to work in the UK, manage any sponsorship requirements and carry out other employment checks;
  • to respond to and defend against legal claims;
  • to maintain and promote equality throughout the recruitment process and carry out duties in relation to employees with disabilities; and
  • for compliance with regulatory requirements and related disclosures such as compliance with specific background checks.

Based on your consent:

  • in certain circumstances when you are requested by the Company to disclose your personal data to other organisations.

To protect your vital interests:

  • to provide any support or assistance as necessary to protect your life in the event of an emergency.

Sharing of your personal data
Subject to applicable data protection laws the Company may share your personal data:

  • with any other group companies and associated companies in which the Company has shareholdings;
  • with third parties, companies and other persons providing recruitment services;
  • with third parties, companies and other persons who help the Company to enter into a contract of employment with you (e.g. immigration service providers for the purposes of sponsorship);
  • with the Company’s legal and other professional advisors including the Company’s auditors;
  • with government bodies and agencies in the UK and overseas (e.g. immigration services);
  • in an emergency or to otherwise protect your vital interests;
  • to protect the security or integrity of the Company’s business operations; and
  • with anyone else where the Company has your consent or as required by law.

International transfers
Your personal data may be transferred outside the UK and the European Economic Area. While some countries have adequate protections for personal data under applicable laws, in other countries steps will be necessary to ensure appropriate safeguards apply to it.

These include imposing contractual obligations of adequacy or requiring the recipient to subscribe or be certified with an international framework of protection.

Although your prospective employer is based in the UK it may pass your personal data to service providers, agents and subcontractors based in countries outside the European Economic Area (EEA). For example, the Company outsources some customer and IT services to organisations based in India, the USA and South Africa.

These countries may not have the same level of data protection as are operated in the UK. To make sure the Company keeps your personal data secure it applies strict safeguards when transferring and processing your data outside of the EEA.

The Company will only transfer your personal data:

  • to countries approved by the European Commission as having appropriate data protection laws to ensure an adequate level of protection for your personal data such as Canada, New Zealand; or
  • where the Company has put in place its own measures to ensure an adequate level security as required by data protection law. These measures include ensuring that your personal data is kept safe by carrying out strict security checks on oversees agents, service providers etc. backed by strong contractual undertakings approved by the relevant regulators for example the EU style Model Clauses (visit the ICO website www.ico.org.uk and search for “international transfers” for more information); or
  • to a member organisation approved by the European Commission as having a suitable level of data protection for example the EU-US Privacy Shield which covers transfers to the US. (visit www.privacyshield.gov for more information.)

Retention periods

If your application for employment is unsuccessful, all data relating to your application, and the associated recruitment and selection process will be retained, as required, for a maximum of 12 months. At the end of that period, your data will be deleted and/or destroyed. 

If your application for employment is successful all data relating to your application, and the associated recruitment and selection process will be retained, as required, for a maximum of 12 months. 

At the end of that period, your data will be deleted and/or destroyed, with the exception of the personal data you have provided which the Company is required to retain in order to enter into a contract of employment with you or which is necessary to comply with a legal obligation (e.g. reference information, information about your nationality and entitlement to work in the UK and other background checks.) This data will be retained as detailed in the Employee Data Protection Statement which will be provided to you with your contract of employment.

Your rights under applicable data protection law
You have the following rights in relation to how the Company deals with your personal data.


  • The right to be informed about the Company’s processing of your personal data;
  • The right to have your personal data corrected if it’s inaccurate and to have incomplete personal data completed;
  • The right to object to processing of your personal data;
  • The right to restrict processing of your personal data;
  • The right to have your personal data erased (the “right to be forgotten”)
  • The right to request access to your personal data and information about how the Company’s processes it (this is known as a Subject Access Request “SAR”);
  • The right to move, copy or transfer your personal data (“data portability”); Rights in relation to automated decision making including profiling; and
  • The right to withdraw consent – if you’ve given consent to process your personal data you have the right to withdraw that consent at any time. 

To submit a request in regards to any of the above rights, please send your request to the HR Support Centre, Innogy Business Services UK Limited, Windmill Hill Business Park, Whitehill Way, Swindon, SN5 6PB.

You have the right to complain to the Information Commissioners Office. It has enforcement powers and investigates compliance with data protection law. For further details please see ico.org.uk.

Data anonymisation and aggregation
Your personal data may be converted into statistical or aggregated data which can’t be used to identify you, and then used to produce statistical research and reports. This aggregated data may be shared and used in all the ways described above.

So, what are cookies and why do we use them?
Cookies are files that are recorded in temporary Internet folders on your PC. They're a useful tool as, by recording the way you use our site, they enable us to get to know you better. For example, we’re able to recognise you when you return to the site, identify your preferences so as to provide you with a more personalised service and speed up searches that you conduct when visiting.

You don’t have to accept them. Most browsers allow you to refuse cookies by activating the relevant setting (please check the help menu of your browser for more details) however, selecting this setting may mean that you are unable to access certain parts of our site.

Please note that unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our site.

Further Detail on Cookies
Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies do lots of different jobs, like letting you navigate between pages efficiently remembering your preferences, and generally improve your web site experience. They can also help to ensure that adverts you see online are more relevant to you and your interests.

We can split cookies into 4 main categories:
Category 1: strictly necessary cookies
Category 2: performance cookies
Category 3: functionality cookies
Category 4: targeting cookies or advertising cookies


Category 1 - Strictly necessary cookies
These cookies are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website. Without these cookies services you have asked for, like register for job alerts, cannot be provided.

Please be aware our site uses this type of cookie

Category 2 - Performance cookies
These cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works.

By using our website and online services, you agree that we can place these types of cookies on your device.

Category 3 - Functionality cookies
These cookies allow the website to remember choices you make (such as your user name and password) and provide enhanced, more personal features. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customise. They may also be used to provide services you have asked for such as watching a video or commenting on a blog. The information these cookies collect may be anonymous and they cannot track your browsing activity on other websites.

By using our website and online services, you agree that we can place these types of cookies on your device.

Category 4 - targeting cookies or advertising cookies
These cookies are used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. They remember that you have visited a website and this information is shared with other organisations such as advertisers. Quite often targeting or advertising cookies will be linked to site functionality provided by the other organisations.

We do have links to other web sites and once you access another site through a link that we have provided it is the responsibility of that site to provide information as to how they use cookies on the respective site.

You can find more information about cookies by visiting www.allaboutcookies.org or www.youronlinechoices.eu. Google also have a brief video which explains the use of cookies.

External links from our site
From time to time we may include hypertext links to sites which are created by individuals and companies outside of our group companies. We do this when there is a particular relevance to the topic you're reading about. Whilst we endeavour to check that the content of these sites is suitable, we unfortunately cannot take any responsibility for the practices of the companies who publish the sites that we link to, nor the integrity of the content contained within them.

What if we update our privacy policy?
We do keep our privacy policies under regular review so please do check each time you use the site. You'll be able to read about any updates on this page - as soon as they happen.

If you have any questions or if you feel that we are not complying with the terms of this privacy policy please do contact us by e-mailing us at the following address hrsc@innogy.com inserting the words ‘Privacy Policy Grievance’ in the heading.

Our group companies, who may have access to your personal information under this privacy policy, include:

  • Npower Limited (No 3653277)
  • Npower Yorkshire Limited (No 3937808)
  • Innogy Business Services UK Limited (No 06052966)
  • Innogy Renewables UK Limited (No 02550622)
12/09 2019
Key skills you learn in customer services
Richard Branson describes communication as “an art”, more t...
08/02 2016
How to apply your unique learning style to your career
Whether you’re a visual learner or prefer a hands-on kinaesthetic...
View all blogs