In addition, the right to object is required, so the unsuccessful candidate should be asked if they wish their details to be retained from their application for a designated period of time.

A legal basis for keeping this personal data post recruitment process for a set amount of time may be the best approach, but this retention period should be declared and processes in place to remove the personal details after this time.