Personal Information, or personal data, means any information or combination of information relating to an identified or identifiable individual or as otherwise defined by applicable data privacy laws. A sub-set of Personal Information is Special Categories of Personal Information which means Personal Information that may be defined by an applicable data privacy law as having heightened sensitivity and may include, but not be limited to, information relating to an individual’s race, ethnicity, citizenship or immigration status, political opinions, religious or philosophical beliefs, trade-union membership, genetic information, biometric information as well as information concerning a person’s health, sex life or sexual orientation, and commission or alleged commission of any criminal offence.
When you apply or show an interest in working for us, we may process the following Personal Information and Special Categories of Personal Information about you, your next of kin, and dependents where relevant. This is not an exhaustive list, and this may differ between jurisdictions:
You may provide this information to us or we may obtain this information from other sources, such as from third parties.
Where you have provided Personal Information for your Workday profile or submitted other supporting Personal Information, please keep this up to date.
Under certain data privacy laws, we are required to have a lawful basis for processing your Personal Information. As such, where applicable, we will generally rely on one or more of the following lawful bases:
Your Personal Information may be stored and processed by us in the following ways and for the following purposes (we have also set out the lawful basis that applies for each):
| Processing activity | Type of Personal Information processed | Lawful basis for processing |
|---|---|---|
For recruitment exercise purposes, this includes: • Processing received job applications. • Validating eligibility for role. • Shortlisting activity. • Scheduling. • Any necessary assessment activities. • Interviews. | • Biographical information. • Recruitment information. • Assessment information. • Special Categories of Personal Information (where relevant and necessary). | Legitimate interests (to enable us to efficiently process candidates and effectively recruit employees). Where AI is being used to support recruitment activity and will result in automated processing occurring without human oversight, your consent will be sought for this specific activity. For more information about use of AI and automated processing in recruitment activity, please see section “Automated processing within recruitment activity”. Where this involves the processing of Special Categories of Personal Information e.g., criminal record information and/or driving record information, the lawful basis we rely on is that the processing is in the substantial public interest (prevention and detection of crime), for legal claims or processing under employment, social security and social protection law. |
For onboarding and offer purposes, this includes: • Creating and processing offer of employment. • Processing onboarding of new employees. • Fitness to task checks. • Vetting activities where necessary. | • Biographical information. • Recruitment information. • Identification information. • Special Categories of Personal Information (where necessary and relevant). • Relationship information. | Performance of a contract (including contract initiation). Where this involves the processing of Special Categories of Personal Information e.g., driving record information, the lawful basis we rely on is that the processing is in the public interest (prevention and detection of crime), for legal claims or processing under employment, social security and social protection law. |
For promoting bp role opportunities purposes, this includes: • Identifying and/or contacting previous candidates when a new recruitment exercise begins where their previous application aligns to the skills required for the new role. • Identifying and/or contacting suitable candidates via open-source means and bringing to their attention specific bp recruitment exercises. • bp talent community engagement activities such as newsletters, virtual open days, job fairs etc. | • Recruitment information. • Biographical information. • Special Categories of Personal Information (where relevant and necessary). | Legitimate interests (to enable us to effectively source candidates and ultimately recruit effective employees). Where this activity meets the definition of direct marketing, this will be done with consent. Where this involves the processing of Special Categories of Personal Information the lawful basis we rely on is that the processing is in the substantial public interest (equality of opportunity).
|
For recruitment analytics purposes, this includes: • Process improvement. • Management information. • Monitoring recruitment activities. | • Recruitment information. • Biographical information, including Special Categories of Personal Information. • Website and usage information. | Legitimate interests of bp to ensure it has effective and efficient recruitment processes to enable successful recruitment.
Where this involves the processing of Special Categories of Personal Information, the lawful basis we rely on is that the processing is in the substantial public interest (equality of opportunity) or consent has been provided for using for this purpose. |
For compliance, legal and regulatory purposes, this includes: • In order to comply with and in order to assess compliance with applicable laws, rules and regulations, and internal policies and procedures. • To prevent and detect fraud and/or other criminal activity or misconduct. • Establishment and handling of legal claims. • Compliance with maintaining internal registers (e.g. Ethics and Compliance registers). | • Biographical information. • Recruitment information. • Assessment information. • Special Categories of Personal Information. • Relationship information, where necessary for conflict of interest declarations.
| Legal obligations (where the processing activity is required by law or regulation). In all other cases, legitimate interests (to comply with our obligations and exercise our legal rights, compliance with internal policies and procedures and to conduct enquiries and investigations). Where this involves the processing of Special Categories of Personal Information, e.g. criminal record information and/or driving record information, the lawful basis we rely on is that the processing is in the substantial public interest (prevention and detection of crime), or for legal claims or under employment, social security and social protection law. |
For business support, this includes: • Training and developing systems (including using artificial intelligence) to enhance bp’s recruitment activities. • Experience surveys. | • Recruitment information. • Biographical information. • Assessment information. • Special Categories of Personal Information. • Website and usage information. | Legitimate interest (running and managing our business operations). Where this involves the processing of Special Categories of Personal Information, e.g. criminal record information and/or driving record information, the lawful basis we rely on is that the processing is in the substantial public interest (regulatory requirements, insurance, safeguarding and equality of opportunity or treatment), for legal claims or your Consent (for experience surveys). |
For the purposes outlined in the Cookies Notices on our webpages and recruitment solutions. When you visit our Digital Asset, cookies (and similar technologies) are used to collect information about your Digital Asset usage. You can set your browser to refuse all or some browser cookies or to alert you when Digital Assets set or access cookies. If you disable or refuse cookies please note that some parts of this Digital Asset may become inaccessible or not function properly. For more information about the cookies we use, please refer to the Cookies Preferences page available in each of our Digital Assets. | • Website and usage information. | Legitimate interest (providing necessary functionality of the digital asset). Consent only where required by applicable data protection law e.g. in relation to information obtained from non-essential cookies and similar technologies. You can withdraw this consent at any time in your cookie preferences. |
For business restructuring purposes, this includes: • Relevant negotiations relating to sales, transfers, mergers and acquisitions. | • Biographical information. • Recruitment information. • Identification information. • Special Categories of Personal Information. • Website and usage information. | Legitimate interest (restructuring our business). Where this involves the processing of Special Categories of Personal Information, e.g. criminal record information and/or driving record information, the lawful basis we rely on is that the processing is in the substantial public interest (regulatory requirements, insurance and safeguarding) for legal claims. |
Intragroup sharing
We may share your Personal Information with other entities within the bp Group as part of our business operations, including with our parent company bp PLC, headquartered in the United Kingdom. Your Personal Information will only be disclosed to authorized individuals if and to the extent necessary required to fulfil a particular legitimate purpose.
Third party service providers
We may share your Personal Information with third-party service providers, agents and contractors for the purposes of providing services to us (for example, our recruitment or IT support services etc). Any third-party provider we appoint must protect your Personal Information in line with the contractually required security measures.
Notice for California candidates
During the 12 month period prior to the last reviewed date of section 11, we may have disclosed the following categories of Personal Information about you for a business purpose to the types of recipients listed in the fourth column of the data processing activity table above.
Legal and regulatory disclosures
We may disclose your Personal Information as required by law, or when we believe that disclosure is necessary to protect our rights and / or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on bp. We may also share your Personal Information in connection with legal proceedings and these bodies may be situated outside of your jurisdiction. In these instances, the legal and/or regulatory authority will be considered to be a data controller (not acting on our instructions) and will be primarily responsible for deciding how your Personal Information is held and used once shared by us. In order to protect your privacy, we will only disclose the minimum amount of information necessary for the required purpose.
Restructuring recipients
We may share your Personal Information with third parties (and their advisors) to whom we may choose to sell, transfer or merge parts of our business or our assets.
As an international company, we may store or transfer your Personal Information to other bp entities around the world. Where this is the case, we will ensure that the importing jurisdiction offers an adequate level of data protection, or we will provide the Personal Information under a comprehensive, flexible, and global compliance framework which implements appropriate measures and safeguards to ensure that your Personal Information is protected in accordance with applicable data protection laws.
Similarly, where we transfer Personal Information to a third party located in a different jurisdiction, we will ensure that appropriate measures are in place to ensure an adequate level of protection for your Personal Information, such as by including appropriate clauses in our agreements with third parties.
You can request further information about our international transfers and the contractual safeguards we implement using the contact details provided below.
Bp uses Artificial Intelligence (AI) and automated processing tools to help it effectively and efficiently undertake recruitment activity. If this occurs without human oversight, and will result in a decision being made about your application, the use of this technology will be clearly signposted and your consent sought to use the technology to process your application.
If you consent to bp using AI functionality to assess your application but later change your mind, or wish to challenge any AI assessment outcome, you can contact us at https://careers.bp.com/contact-us Doing so will have no impact on your application process.
Under certain circumstances (and subject to exemptions and applicable law) you have rights under data protection laws in relation to your Personal Information. If you wish to exercise any of the rights set out below, please contact us at https://careers.bp.com/contact-us
You have the right to:
Notice to California candidates
You also have the following right regarding your Personal Information, as described below:
How long we will hold your Personal Information for will vary and will be determined by the purpose for which we are using it. We will need to keep the information for as long as is necessary for each purpose, in line with our business needs as documented in our internal policies.
We calculate the retention period based on the time the Personal Information is needed to: (a) fulfill the purposes described in this privacy notice, (b) meet the timelines required or recommended by regulatory authorities, professional bodies, or associations, (c) comply with applicable laws, legal holds, and other legal obligations (including contractual obligations), and (d) comply with your requests.
There may be laws or regulations which set a minimum period for which we have to keep your Personal Information. We will only hold your information for the defined retention period, before anonymizing the information or deleting it. Anonymising Personal Information means ensuring that the data is no longer identifiable to you personally. We do this either by aggregating the data (for example, to make a finding about a group of people as opposed to a specific individual) or by removing any personal identifiers (for example, contact information) so that we can still use data to identify trends and patterns but cannot link this data back to you.
If you would like further information in connection with the retention period that is applicable to your Personal Information held for a specific purpose, please contact us at https://careers.bp.com/contact-us
If you have any questions about this Privacy Notice or our privacy practices, or your data protection rights, please contact us here.
When you contact us, please indicate in which country and/or state you reside as this will allow us to assist you with your query as quickly as possible.