Privacy Policy
We are Gearing Recruitment Solutions Ltd (Registered in England & Wales No. 13584008) of Office 2-5, Unit 2, Ashford Road, Hollingbourne, Kent, ME17 1XH | This Privacy Notice sets out the basis on which we use personal data in the course of our business activities. As a business which relies upon having access to information about Candidates to meet our Clients’ requirements, data is essential to our business. Our systems and processes are designed to ensure that we can provide the best possible service to our clients while operating within the law at all times and protecting individuals’ data privacy rights. We reserve the right to update this Privacy Notice from time to time. Where appropriate, we shall contact you to notify you of any material changes to the Privacy Notice. You should also refer to our website periodically so that you may access and view our updated Privacy Notice. This will ensure that you understand (i) how we are using your personal data and (ii) your legal rights around our usage of such personal data. |
DEFINITIONS
This Privacy Notice uses the following terms:
Candidate means a person who is recorded in our records as seeking or potentially suitable for an engagement with a Client. This includes individuals who are not actively seeking a new role but who are in contact with us about potential opportunities which may be of interest from time to time.
Client means a business which has engaged us to provide services or which we have identified as a business for which we wish to perform services.
Client Contact means a person who is employed or engaged by a Client and with whom we may liaise in respect of any services which we are providing or wish to provide to the Client. In some cases, the Client Contact and the Client may be the same person e.g. where a Client is a sole trader.
Data Protection Legislation means (i) the Data Protection Act 2018, the General Data Protection Regulation ((EU) 2016/679) and any national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK and then (ii) any successor legislation to the GDPR or the Data Protection Act 2018.
Referee means a person who has provided to us a written or verbal opinion in respect of the work history, skills, competency and/or experience of a Candidate;
Supplier means a business which provides services to us and which may process personal data relating to any Candidate, Client Contact or Supplier Contact in the course of performing such services including our:
Professional advisers including accountants, tax advisors and lawyers;
Insurers;
IT services providers and software providers; and
Independent consultants and subcontractors
Supplier Contactmeans a person who is employed or engaged by a Supplier and with whom we may liaise from time to time in respect of the services which are provided by that Supplier.
WHO SHOULD READ THIS PRIVACY NOTICE?
This Privacy Notice applies to any living, identifiable individuals about whom we may process personal data in the course of our business activities. | You should read this Privacy Notice if you are a:
Please note that, in some cases, you will fall into more than one of the above categories. |
CANDIDATES
WHERE WE OBTAIN YOUR PERSONAL DATAWe will obtain personal data relating to you directly if you have:
We may also obtain personal data indirectly from:
TYPES OF PERSONAL DATA WE HOLDWe will collect, store and process the following types of personal data about you:
We will also collect, store and use the following “special categories” of more sensitive personal data:
HOW WE USE YOUR PERSONAL DATAWe use your personal data to:
OUR LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATAWe have a legitimate interest to process your personal data where you are aCandidate, on the basis that it is necessary for us to maintain a database of individuals who are (i) actively seeking new employment with a Client or (ii) potentially suitable for employment with a Client. By processing your personal data and contacting you from time to time, we are able to gain an understanding of your current role (where applicable), your skills and experience, and your career aspirations. Our processing of your personal data is therefore of benefit to:
If you are a Candidate, we may also need to process sensitive (special) personal data relating to you. The type of sensitive personal data which we might process includes (i) information about any medical conditions or disability insofar as they are relevant to the type of work which you are proposing to carry out (ii) information about any unspent criminal convictions and, where relevant to the type of role which you are carrying out, spent convictions, police warnings etc and (iii) information about any trade union of which you are a member (but only insofar as it relates to an employment claim or pay and working conditions on a client site). We are acting as an employment agency and/or an employment business in our dealings with you. In accordance with Article 9 (2)(b) of the GDPR, this sensitive personal data is necessary in the field of employment. i.e. it is required for performing our obligations as an employment agency or employment business and is used solely for this purpose. Any sensitive personal data shall be held strictly in accordance with our policies on data retention and sensitive personal data. In addition to our legitimate interest, we may be required to process your data to comply with our legal obligations. For example, we are required to maintain auditable payroll records for seven years following the relevant pay period. PARTIES WITH WHOM WE MAY SHARE YOUR PERSONAL DATAWe may share your personal data for legitimate purposes with:
We will share sensitive personal data relating to you with our Clients if there is a legitimate reason to do so. For example, we will share information about any medical condition which you have if it is relevant for health & safety purposes. We will share information about any convictions which you disclose as we are under a legal obligation to notify our Client of information which is relevant to your suitability to carry out an assignment. |
CLIENT CONTACTS
WHERE WE OBTAIN YOUR PERSONAL DATA
We obtain personal data relating to you directly in the course of dealing with you as a representative of the Client.
We may also obtain personal data indirectly from:
online professional networking sites such as LinkedIn
your employer’s website and other industry-related websites
business information directories
other individuals within your organisation in the course of us providing services to the Client.
TYPES OF PERSONAL DATA WE HOLD
We collect, store, and use the following categories of personal data about you:
Personal contact details such as name, title, addresses, telephone numbers, and email addresses;
Your job title and position within the Client organisation; and
Any background information relating to your personal circumstances, your work history and the role which you perform within the Client which you may provide to us in the course of your dealings with us.
We do not collect, store or use any “special categories” of sensitive personal information if you are a Client Contact.
HOW WE USE YOUR PERSONAL DATA
We use your personal data to:
Contact you to obtain information about our Client’s requirements;
Liaise with you so that we may effectively perform the services to our Client;
Contact you to inform you of a Candidate’s availability or interest in a job role;
Obtain a reference for a Candidate;
Contact you for invoicing and credit control purposes;
Provide you with statistical information about your industry sector;
Comply with our legal obligations, defend or bring any legal proceedings and prevent fraud or any other crime.
OUR LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATA
We have a legitimate interest to process your personal data where you are a Client Contact on the basis that we need to be able to contact and interact with the individuals who are employed or engaged by our Clients. This will allow us to effectively provide services to them, better understand their requirements and generate revenue for our business. We do not use your data in any way which could reasonably be considered to be prejudicial to your interests.
PARTIES WITH WHOM WE MAY SHARE YOUR PERSONAL DATA
We may share very limited data relating to you with a Candidate where such sharing is strictly required for the recruitment process e.g. so that the Candidate may contact you directly. We will also share your personal data with Suppliers who process this on our behalf.
SUPPLIER CONTACTS
WHERE WE OBTAIN YOUR PERSONAL DATAWe obtain personal data relating to you directly in the course of our dealings with you as a representative of the Supplier. We also obtain personal data indirectly from:
TYPES OF PERSONAL DATA WE HOLDWe will collect, store, and use the following categories of personal information about you:
We do not collect, store or use any “special categories” of sensitive personal information if you are a Supplier Contact. HOW WE USE YOUR PERSONAL DATAWe use your personal data to:
OUR LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATAWe have a legitimate interest to process your personal data where you are a Supplier Contact, on the basis that we need to be able to contact and interact with the individuals who are employed or engaged by our Suppliers. This will allow us to ensure that our Suppliers provide us with the best possible service which, in turn, is of direct benefit to both our Candidates and our Clients. We do not use your data in any way which could reasonably be considered to be prejudicial to your interests. PARTIES WITH WHOM WE MAY SHARE YOUR PERSONAL DATAWe will share your personal data with other Suppliers who process this on our behalf. |
REFEREES
WHERE WE OBTAIN YOUR PERSONAL DATA
We obtain personal data relating to you directly in the course of any communications between us.
We may also obtain personal data indirectly from:
the Candidate who has nominated you as his or her Referee
online professional networking sites such as LinkedIn
your employer’s website and other industry-related websites
TYPES OF PERSONAL DATA WE HOLD
We collect, store, and use the following categories of personal data about you:
Personal contact details such as name, title, addresses, telephone numbers, and email addresses;
Your job title and position within your employer; and
Any background information which you may provide to us in the course of your dealings with us.
We do not collect, store or use any “special categories” of sensitive personal information if you are a Referee.
HOW WE USE YOUR PERSONAL DATA
We use your personal data to:
Contact you to obtain a reference on a Candidate;
Provide a copy of the reference to our Client;
Comply with our legal obligations, defend or bring any legal proceedings and prevent fraud or any other crime.
OUR LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATA
We have determined that we have a legitimate interest to process your personal data where you are aReferee, on the basis that we are generally required to obtain references to comply with our contractual obligations to third parties and, in some instances, we are under a legal obligation to do so. It is therefore necessary and reasonable for us to process personal data relating to you strictly for compliance with these obligations.
PARTIES WITH WHOM WE MAY SHARE YOUR PERSONAL DATA
We will share with our Clients the details of any reference which you give. We will usually provide your name, job title and employer name when doing so. In some circumstances and only when you have agreed to such disclosure, we will provide your contact details so that our Client may verify the reference or ask for further information. We will also share your personal data with Suppliers who process this on our behalf.
WHERE WE PROCESS PERSONAL DATA
Your personal data is held and processed by us in the United Kingdom. | We have put in place appropriate safeguards to ensure that your data is only transferred to jurisdictions with enforceable data subject rights and effective legal remedies in respect of data privacy breaches. We will therefore only transfer your personal data to jurisdictions outside of the EEA where:
|
OUR WEBSITE
If you interact with our website at https://gr-solutions.co.uk, we may record your IP address and process statistical information relating to your usage of the website. For information on the cookies which we use for this, you should refer to our Cookie Policy at https://gr-solutions.co.uk/cookie-policy.
AUTOMATED DECISION MAKING
Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. | All decisions which are made in the course of our business processes involve human intervention. We do not make any decisions using automated means. |
DATA SECURITY
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality. Details of these measures may be obtained from a Director.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
DATA RETENTION
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. | Our standard data retention period is 7 years for if we have successfully placed you or 5 years if not, from the last date on which we are in actual contact with you i.e. where we actually speak with you or exchange correspondence. After this time, we will usually delete your personal data from our records. Where we are required to keep any information (i) for auditing or compliance purposes (ii) to comply with our contractual obligations to third parties or (iii) in respect of any potential or actual legal proceedings, we shall keep your data for as long as is strictly necessary for these purposes, which is typically for seven years in respect of audit data which we may be required to produce for HRMC and/or to prove compliance with our contractual and legal obligations. In some circumstances we may completely anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. |
RIGHTS OF ACCESS, CORRECTION, ERASURE & RESTRICTION
Your duty to inform us of changes. It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your working relationship with us.
Your rights in connection with personal information. Under certain circumstances, you have the right to:
Request
access
to your personal information (a Subject Access Request). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it. You will not usually have to pay a fee to access your personal information but we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
Request
correction
of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request
erasure
of your personal information. This enables you to ask us to delete or remove personal information where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed or you have objected to the processing and there is no overriding legitimate interest for continuing the processing.
Object
to processing of your personal information where we are relying on a legitimate interest and you object on “grounds relating to your particular situation.”
Request the
restriction
of processing of your personal information. This enables you to ask us to block or suppress the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it or if you have also objected to the processing as above.
Request the
transfer
of your personal information to another party when the processing is based on consent and carried out by automated means. This right is not usually applicable to any data processing carried out by us.
If you want to exercise any of the above rights, please contact a Director in writing. We will consider your request and confirm the actions which we have taken in response to such request.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is an appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact a Director. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law. We will confirm the actions which we have taken in respect of any such request.
If you are unhappy with any aspect of the manner in which we have processed your personal data or dealt with your decision to exercise any of the rights set out in this section, you have the right to complain to the Information Commissioners Office in the United Kingdom. Their details are:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113 (local rate) or 01625 545 745
Email: casework@ico.org.uk
CONTACTING US
If you have any questions about this Privacy Notice, you can write to the Directors at GRS - Gearing Recruitment Solutions, Office 2-5, Unit 2, Ashford Road, Hollingbourne, Kent, ME17 1XH Phone: 01622476292 .