Candidate Privacy Policy

 

 

PRIVACY NOTICE - CANDIDATE DATA (INDIVIDUALS)

 

Overview

 

 

Changes made to our privacy notice

 

We exercise our right to update this Privacy Notice at any time, including to keep up to date with data protection law and accurately reflect FLS Talent’s practices surrounding data processing. Any changes made to our Privacy Notice come into effect when posted on this page (date of latest update can be found at the top of this page).

 

Personal data collected

 

To enable us to provide a tailored service specific to meet your needs and find you the most appropriate job opportunities our clients have to offer we need to collect some or all the following information from you:

 

 

 

Data processed by FLS Talent is collected in several ways. This information can be provided by you directly, provided by a third party or collected automatically via our website.

 

By using our website and sending any email communications our systems may obtain your IP address.

 

Sensitive Data may be provided by yourself or collected by us where permitted by law in order to measure job applicability. This includes information relating to your health, criminal records, and trade union membership. 

 

Collecting personal data directly from you

 

You may provide your personal data to us via one of the following ways:

 

 

Collecting personal data from other sources

 

We may obtain information about you via one of the following ways:

 

 

 

What we use your personal data for and the legal basis we rely on

 

We process your personal data for the following purposes:

 

 

Recruitment purposes

 

We want to make sure that we can find you the right job opportunity for you, so we need to know certain information about you to enable us to tailor our search to the most relevant client and job they have available. We will gather this information from you or collect from other sources such as LinkedIn.

 

 

A consultant who works within your business/market sector will spend time with you discussing your career, lifestyle, etc. to establish the kind of job you are seeking. They will the send a confidential profile to clients and potential client businesses who have or may have a role available within their business that would fit your criteria. This confidential profile will provide the client business with information about you. If they are satisfied with what they have read, we will move forward to providing them with your name and other personal data.
 
 If you have submitted your CV directly to us, we will read and assess this to identify if your career history, skills and experience are a suitable match for one of our vacancies.  We may not have any suitable vacancies for you. If you are not contacted within 6 months of sending your CV to us, please accept this as your CV has not been suitable, processing will have ceased, and your CV completely erased from our database. 

 

Legal Basis - Consent

 

When you have made the initial contact with us, for example by applying for a job we are advertising on our website, uploading your CV via the candidate portal of our website, or leaving your CV and details with one of our consultants at a recruitment event you will have consented to us processing your personal data for the purpose of us contacting you to progress your job search application.

 

We will always obtain your consent to submit your personal data to any of our clients. Consent is gathered in the form of consent forms, which will be sent to you by one of our consultants before any action is taken.

 

In these cases, where we rely on consent as the lawful basis for processing, you are entitled to exercise your rights under GDPR. To do so, contact our Data Protection Manager.[DO1] 

 

Legal Basis - Legitimate Interests 

 

We do not think it is unreasonable for an individual to expect to be contacted by a recruitment agency if they publish details about their professional profile and career history on professional networking sites, such as LinkedIn. Along with searching our own database of candidates we often review professional networking sites and job boards to identify any potential candidates who may be suitable to fill a vacancy one of our clients has on offer. If we identify such a candidate, we will make initial contact with them to introduce ourselves and the opportunity available. 

 

We have documented our decision-making for relying on legitimate interests for this purpose in a Legitimate Interest Assessment to ensure our legitimate interests are not over-ridden by the rights of individuals whose personal data is to be processed. If you would like to know more about the assessment we undertook please contact our Data Protection Manager.[DO2] 

 

You have the right to object to us processing your personal data on this basis, to exercise this right please contact our Data Protection Manager.[DO3] 

 

 

Marketing purposes

 

We pride ourselves on offering a tailored service to our candidates and would like to be by your side right through your career till retirement (however early or late that might be). We know that for some people there is a need to move to new jobs to enhance their career prospects and progress to the top. We therefore want to keep you informed of any new job opportunities that become available that you may be interested in.

 

You can change your marketing preferences at any time by contacting our Data Protection Manager.[DO4] 

 

Legal Basis - Legitimate Interests

 

We do not think it is an unreasonable expectation for candidates to receive information from ourselves about new opportunities that might be suitable for them. GDPR allows us to use legitimate interests as the lawful basis for direct marketing purposes where this does not breach other e-privacy laws. As there is a relationship in place between ourselves and candidates we can legitimately rely on soft opt-in rules under the Privacy & Electronic Communication Regulations 2003 to undertake email direct marketing.

 

We have documented our decision-making for relying on legitimate interests for this purpose in a Legitimate Interest Assessment to ensure our legitimate interests are not over-ridden by the rights of individuals whose personal data is to be processed. If you would like to know more about the assessment we undertook please contact our Data Protection Manager.[DO5] 

 

You have the right to object to us processing your personal data on this basis, to exercise this right please contact our Data Protection Manager.[DO6] 

 

 

Who we will share your personal data with

 

We will share your personal data with:

 

 

We will always ask for your express and informed consent to send your personal data to existing or prospective clients.

 

When a new recruitment business is set up under FLS Talent, all data subjects and their data processed whilst working for FLS Talent will be transferred across to the new company. The new business is still owned and controlled in the majority by FLS Talent.

 

Your personal data may be accessed and seen by our third-party outsourced IT provider, whilst they undertake work on our behalf. We have a data processor contract in place which sets out both parties’ responsibilities and obligations under GDPR. Data will not be used by third parties for any of their own purposes.

 

If you enter personal data into our website then it may be accessed and seen by our third-party website host and web data storage provider, whilst they undertake work on our behalf. We have a data processor contract in place which sets out both parties’ responsibilities and obligations under GDPR.

 

 

How we keep your personal data safe

 

FLS Talent takes the security of your personal data seriously and we have put in place the most appropriate organisational and technical measures to safeguard personal data. Our measures include:

 

 

When we use third-party providers to process and/or store personal data we undertake relevant assessments of their business to establish their level of compliance with GDPR and only use those that provide sufficient guarantees to implement appropriate technical and organisational measures to safeguard personal data.

 

Our website, emails, databases and data storage are all on servers based in the UK and EU.

 

If you suspect your personal data has been lost or misused, please contact our Data Protection Manager [DO7] (contact details can be found at the bottom of this page).

 

Transferring personal data outside of the UK and EU

 

If a job vacancy is located outside of the UK and EU (a ‘third country’), FLS Talent will need to transfer your personal data to that country. We always get your consent to give your personal data to one of our clients and you will be made aware that the business is not located within the UK or EU.

 

 

How long we will keep your personal data for

We have documented retention periods for all the information we obtain and process.

 

If you are contacted about new opportunities, or one of our clients’ vacancies, we will keep any of your personal data that we have collected during the process for as long as we have an active communication with you, and once this ceases, we will keep your personal data for 10 years before it is deleted from our systems.

 

If you have applied for a vacancy or submitted a CV directly to us but have not been contacted within 6 months, please accept this as your application has not been suitable for any current vacancies and your CV will have been removed from our database.

If you are contacted about one of our internal vacancies, and are successful, we will keep any of your personal data that we have collected during the process for as long as you are employed by FLS Talent and then for 6 years after that. At the end of the 6 years, your personal data is deleted from our systems.

 

If you are contacted about one of our internal vacancies, but are unsuccessful, we will keep your personal data for 6 months before it is deleted from our systems.

 

Your rights

 

You have various rights in relation to how we process your personal data, as defined by the General Data Protection Regulations

 

 

 

 

 

 

 

 

Rights in relation to automated decision-making including profiling does not apply as we do not undertake any automated decision-making, including profiling.

 

Should you wish to exercise any of your rights please contact our Data Protection Manager. [DO8] All requests will be processed within one month unless the request is excessive in which case you will be informed and kept updated throughout. 

 

We do not charge a fee for responding to the above requests unless the request is unfounded or excessive; or if requests are repetitive.

 

If you are not happy with the way we have been processing your personal data or have not dealt with one of your rights correctly when you have asked us to you may lodge a complaint with the Information Commissioners Office (ICO). The ICO has several ways in which you can contact them, including post, email, and online forms. To find out how click here.

 

 

Our contact details

 

You can contact our Data Protection Manager via one of the following ways:

 

 

 [DO1]Hyperlink

 [DO2]Hyperlink

 [DO3]Hyperlink

 [DO4]Hyperlink

 [DO5]Hyperlink

 [DO6]Hyperlink

 [DO7]Hyperlink

 [DO8]Hyperlink