Client Privacy Policy

PRIVACY NOTICE - CLIENT DATA (ORGANISATIONS)

 

Overview

 

 

Changes made to our privacy notice

 

We exercise our right to update this Privacy Notice at any time, including to keep up to date with data protection law and accurately reflect Irving Knight’s practices surrounding data processing. Any changes made to our Privacy Notice come into effect when posted on this page (date of latest update can be found at the top of this page).

 

Personal data collected

 

For us to find the most suitable candidates for your organisation we need to collect and use certain information about you, or individuals who work at your organisation. The information that we collect from you is:

 

 

Data processed by Irving Knight is collected in several ways. This information can be provided by you directly, provided by a third party or collected automatically via our website.

 

By using our website and sending any email communications our systems may obtain your IP address

 

Collecting the data directly from you

 

You may provide your personal data to us via one of the following ways:

 

 

Collecting the data from other sources

 

We may gather some of your personal data, such as name and contact details, from publicly available sources online. For example, professional networking sites, such as LinkedIn, or job boards if you are advertising a vacancy.

 

What we use your personal data for and the legal basis we rely on

 

We process your personal data for the following purposes:

 

Recruitment purposes:

 

To identify suitable candidates for the job vacancy you have and to ensure the contractual arrangement between our two organisations operates effectively.

 

We rely on the following legal basis for this:

 

 

Marketing purposes:

 

As an existing client, to re-contact you in the future to see if you have any new job vacancies to fill or to send anonymised candidate profiles of individuals who we think may be suitable for your organisation.

 

As a prospective client to contact you to discuss any potential job vacancies you may have or to send anonymised candidate profiles of individuals who we think may be suitable for your organisation.

 

We rely on the following legal basis for this:

 

 

We don’t think it unreasonable for clients, both prospective and existing/lapsed, to want to know about our services and how we can help recruit the right person for your job vacancy or for you to know of any potential candidates that we feel may make suitable employees of your organisation.  In fact, it can benefit your organisation to know when a highly skilled executive level individual is looking for new employment opportunities.

 

You can always opt out of any of our marketing communications at any time by contacting our Data Protection Manager.[DO1] 

 

 

Who we will share your personal data with

 

We will always ask for your express and informed consent to send your personal data to existing or prospective clients.

 

When a new recruitment business is set up under Irving Knight, all data subjects and their data processed whilst working for Irving Knight will be transferred across to the new company. The new business is still owned and controlled in the majority by Irving Knight.

 

Your personal data may be accessed and seen by our third-party outsourced IT provider, whilst they undertake work on our behalf. We have a data processor contract in place which sets out both parties’ responsibilities and obligations under GDPR. Data will not be used by third parties for any of their own purposes.

 

If you enter personal data into our website then it may be accessed and seen by our third-party website host and web data storage provider, whilst they undertake work on our behalf. We have a data processor contract in place which sets out both parties’ responsibilities and obligations under GDPR.

When a new recruitment business is set up under Irving Knight, all data subjects and their data processed whilst working for Irving Knight will be transferred across to the new company. The new business is still owned and controlled in the majority by Irving Knight.

 

 

How we keep your personal data safe

 

Irving Knight takes the security of your personal data seriously and we have put in place the most appropriate organisational and technical measures to safeguard personal data. Our measures include:

 

 

When we use third-party providers to process and/or store personal data we undertake relevant assessments of their business to establish their level of compliance with GDPR and only use those that provide sufficient guarantees to implement appropriate technical and organisational measures to safeguard personal data.

 

Our website, emails, databases and data storage are all on servers based in the UK and EU.

 

If you suspect your personal data has been lost or misused, please contact our Data Protection Manager ([DO2] contact details can be found at the bottom of this page).

 

 

Transferring personal data outside of the UK and EU

 

If a candidate, who is located outside of the UK and EU (a ‘third country’), applies for your job vacancy we will need to provide them with some of your data in relation to that job. This means that we sometimes must transfer client personal data to a third country.

 

If there is no adequacy decision in place for the country we are transferring client data to, we will only transfer the personal data if:

 

 

 

How long we will keep your personal data for

 

We keep client data for as long as we have an active communication with you, and once this ceases we will keep your personal data for 10 years since last updated before it is deleted from our systems and securely destroyed.

 

 

We have documented retention periods for all the information we obtain and process. If you would like to request a copy, please contact our Data Protection Manager.[DO3] 

 

 

Your rights

 

You have various rights in relation to how we process your personal data, as defined by the General Data Protection Regulations

 

 

 

 

 

 

 

 

Rights in relation to automated decision-making including profiling does not apply as we do not undertake any automated decision-making, including profiling.

 

Should you wish to exercise any of your rights please contact our Data Protection Manager. [DO4] All requests will be processed within one month unless the request is excessive in which case you will be informed and kept updated throughout. 

 

We do not charge a fee for responding to the above requests unless the request is unfounded or excessive; or if requests are repetitive.

 

If you are not happy with the way we have been processing your personal data or have not dealt with one of your rights correctly when you have asked us to you may lodge a complaint with the Information Commissioners Office (ICO). The ICO has several ways in which you can contact them, including post, email, and online forms. To find out how click here.

 

 

 

Our contact details

 

You can contact our Data Protection Manager via one of the following ways:

 

 

 [DO1]Hyperlink

 [DO2]Hyperlink

 [DO3]Hyperlink

 [DO4]Hyperlink