The Company is a recruitment business that provides work-finding services to its clients and candidates. In order to provide these services, the Company needs to process personal data (including some sensitive personal data) – in doing so, the Company acts as a data controller.
You may give your personal details to the Company directly, such as on an application or registration form or via our website or we may collect them from another source including direct approaches, job advertisements, referrals and recommendations and information from a publicly accessible source such as Job Boards where you have stored your CV or via LinkedIn.
The Company must have a legal basis for processing your personal data. For the purposes of providing you with recruitment services and/or information relating to roles relevant to you, we will only use your personal data in accordance with the terms of the following statement.
Collection and Use of Personal Data
a) Purpose of processing
We process personal data (which may include sensitive personal data) in order to be able to provide high-quality recruitment services where candidates are matched to the most suitable vacancies.
b) Legal bases
There are a number of legal bases for processing your data, and these include:
Consent - we will always seek your express consent before processing sensitive personal data, and before sending your personal data to a potential client; your CV will never be sent anywhere without your knowledge;
Legitimate interest - in order to provide recruitment services, we have a legitimate interest in processing data to confirm suitability for employment and to identify suitable talent for our clients' requirements;
Performance of a contract - sometimes we need to process data so we can fulfil our contractual obligations - for example, processing your NI number and bank details so we can pay you for Temporary work;
Legal obligation - as an Employment Business and Employment Agency we are subject to various statutory obligations with regard to processing data - for example, we are required to keep candidate records for a minimum of one year from the last provision of work-finding services under the Conduct of Employment Agencies and Employment Businesses Regulations 2003, and HMRC requires that we keep payroll records for 6 years.
At all times when we are processing your data, the protection of your rights and best interests remains a top priority.
The Company may transfer only the information you provide to us to countries outside the European Economic Area (‘EEA’) for the purposes of providing you with recruitment services. We will take steps to ensure adequate protections are in place to ensure the security of your information. The EEA comprises the EU member states plus Norway, Iceland and Liechtenstein.
We believe it's important for your details to be accurate and up to date. We know it can sometimes be hard to keep track of who has what information. To help you with this, where we have your personal data on our system, we will aim to contact you at least every two years to confirm that our records are accurate and up to date, and to remind you of your data protection rights.
Please be aware that you have the following data protection rights:
The right to be informed about the personal data the Company processes on you;
The right of access to the personal data the Company processes on you;
The right to rectification of your personal data;
The right to the erasure of your personal data in certain circumstances;
The right to restrict the processing of your personal data;
The right to data portability in certain circumstances;
The right to object to the processing of your personal data that was based on public or legitimate interest;
The right not to be subjected to automated decision making and profiling; and
The right to withdraw consent at any time.
Where you have consented to the Company processing your personal data you have the right to withdraw that consent at any time by contacting the Data Protection Officer for The Sammons Recruitment Group at firstname.lastname@example.org. We will then remove your details from our database - unless there is a legal reason that prevents us from doing so (see Legal bases above).
Queries and Complaints
You also have the right to raise concerns with Information Commissioner’s Office on 0303 123 1113 or at https://ico.org.uk/concerns/, or any other relevant supervisory authority should your personal data be processed outside of the UK and if you believe that your data protection rights have not been adhered to.