Privacy Policy
|
Document Type
|
Privacy Policy & GDPR
|
|
Date of Production
|
Monday 10th August, 2020
|
|
Updated
|
Monday 18th March, 2024
|
|
Produced By
|
Sarah Learney, Director.
|
Definitions and Interpretation:
‘Employment Business’ refers to Aspire Recruitment Services Limited.
‘GDPR’ the General Data Protection Act 1998, the General Data Protection Regulation (EU 2016/679) and any applicable statutory or regulatory provisions in force from time to time relating to the protection and transfer of personal data.
‘Data Controller’ determines the purpose and means of processing personal data.
‘Data Processor’ responsible for processing personal data on behalf of a ‘Controller,’ responsible for maintaining records of personal data and processing activities.
‘Personal Data’ information relating to a person who can be directly or indirectly identified by the data held.
‘Sensitive Personal Data’ special categories of personal data, including genetic and biometric data, uniquely specific to an individual.
Aspire Recruitment Services Limited is an Employment Business, established to provide work-finding services on behalf of clients and candidates alike. As a business, Aspire Recruitment Services Limited has a responsibility to process data in accordance with the General Data Protection Act 1998, the General Data Protection Regulation (EU 2016/679) and any applicable statutory or regulatory provisions in force from time to time relating to the protection and transfer of personal data. Aspire Recruitment Services Limited must have a legal basis for processing your personal data and in turn providing you with these services. In doing so, the Company acts as a Data Controller.
Obligations:
As an Employment Business, Aspire Recruitment Services Limited is responsible for ensuring that all data is:
- processed lawfully, fairly and in a transparent manner.
- collected for specified, explicit and legitimate purposes and not be further processed in a manner which is incompatible with those purposes.
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
- accurate and current.
- kept in a form which permits identification of data subjects for no longer than is necessary, for the purposes for which the data is processed.
- processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
Legal Basis for Processing Data:
In all instances, where we receive your personal data via direct or indirect means, either supplied by yourself or obtained via a public forum, we process data on the basis Legitimate Interest; processing is necessary for the purposes of our legitimate interest to provide work-finding services.
Where there is a specific need to obtain additional date, for example, Employment References, this is processed on the basis of consent.
How we Collect Your Data:
- You may provide your personal details to the Employment Business, via telephone, e-mail, our website, affiliate jobs boards or via Social Media channels.
- We may collect your data from another source such as a third-party jobs board, LinkedIn or company website.
- Your information may be sent to us via a third-party referral.
What Data do we Store and Process?
We collect personal data in respect to the following essential criteria, for the purpose of communicating with, and promoting, our clients and candidates alike. This data includes:
- Name
- Contact Details
- Employment History
- Education & Qualifications
- Compliance Documents pertaining to your right to work in the UK.
- Links to professional profiles available within the public domain, ie. LinkedIn.
- References (where applicable, and with consent).
We do not request, store or process anything which could be perceived to be Sensitive Personal Data, without an express reason for doing so. This would be communicated separately, specifically and in writing.
How is Data Stored and Processed?
Aspire Recruitment Services utilises Recruitment specific software to store and process all client and candidate data. This is secured through the Microsoft Azure Infrastructure and located at two data centre locations in Europe. These facilities are secured by a series of measures, including (but not limited to) biometric access, security alarm systems and 24/7 security personnel.
Access to this cloud-based software is via a secure, password protected computer, with relevant security software and appropriate mechanisms to protect the restoration of this data as required.
Aspire Recruitment Services Limited will only share your personal data with clients who have authorised us to source prospective candidates for permanent or contract employment. In this instance, specific company names will be disclosed in advance of any data being shared.
As an Employment Business, we will retain your personal data only for as long as is necessary. The Conduct of Employment Agencies and Employment Businesses Regulations 2003, require us to keep work-seeker records for at least 1 year from the date of their creation or from the date we last provided you with work-finding services.
Your Rights as a Data Subject?
As an individual, you have several rights in respect to the processing of your personal data. This includes:
- The right to be informed about the personal data we process on you,
- The right of access to the personal data we process on you.
- The right to rectification of your personal data.
- The right to erasure of your personal data.
- The right to restrict processing of your personal data.
- The right to data portability, in certain circumstances.
- The right to object to the processing of your personal data.
- The right not to be subjected to automated decision-making and profiling.
Should you wish to enact any of your rights, at any time, please contact Sarah Learney on: