BACKGROUND:
Excel Recruitment Limited understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of all of our candidates, clients, suppliers and users of our website and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.
1. Information About Us
Excel Recruitment Limited (“Excel”) is a limited company registered in Jersey under company number 59869.
Excel is an employment agency registered with The Social Security Department and it provides recruitment and work finding services to its clients and candidates.
Excel is the data controller for any personal information you supply to us in relation to enquiries about our recruitment services and when registering as a candidate or client.
Registered address: Ground Floor, One St Andrew’s Place, Charing Cross, St Helier, Jersey, JE2 3RP.
GST number: 0005291.
Data Protection Officer:
Della Page, Director Operations.
Email address: gdpr@excel-recruitment.com
Telephone number: (01534) 707813.
Postal address: Ground Floor, One St Andrew’s Place, Charing Cross, St Helier, Jersey, JE2 3RP.
2. What Does This Notice Cover?
This Privacy Information explains how we use your personal data (including sensitive personal data): how it is collected, how it is held, and how it is processed. It also explains your rights under the law relating to your personal data.
3. What is Personal Data?
Personal data is defined by the Data Protection (Jersey) Law 2018 (which incorporates all the applicable elements for Jersey of the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”)) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.
Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
The personal data that we use is set out in Part 5, below.
4. What Are My Rights?
Under the GDPR, you have the following rights, which we will always work to uphold:
a) The right to be informed about our collection and use of your personal data. This Privacy Notice should tell you everything you need to know, but you can always contact us to find out more or to ask any questions using the details in Part 12.
b) The right to access the personal data we hold about you. Part 11 will tell you how to do this.
c) The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete. Please contact us using the details in Part 12 to find out more.
d) The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data that we have. Please contact us using the details in Part 12 to find out more.
e) The right to restrict (i.e. prevent) the processing of your personal data.
f) The right to object to us using your personal data for a particular purpose or purposes.
g) The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.
h) Rights relating to automated decision-making and profiling. Part 7 explains more about how we use your personal data, including automated decision-making and profiling.
For more information about our use of your personal data or exercising your rights as outlined above, please contact us using the details provided in Part 12.
Further information about your rights can also be obtained from the Office of the Information Commissioner (https://oicjersey.org/) or the Citizens Advice Bureau.
If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Office of the Information Commissioner (https://oicjersey.org/).
5. What Personal Data Do You Collect?
We may collect some or all of the following personal data (this may vary according to your relationship with us):
Candidates:
So that we can identify the best possible job opportunities for you, which match your career aspirations or personal circumstances we may collect some or all of the following data:
For candidates who become temporary employees of Excel, the following additional details may be collected:
Clients:
To help us to identify candidates who are the right fit for your organisation and to ensure our working relationship runs smoothly, we may collect some or all of the following data:
Suppliers:
So that we can enter into a contract for your products or services with you, there is certain information that we need, including the following:
Please note that the above lists of personal data are not exhaustive.
6. How do you collect my personal data?
Your personal data is collected in a number of ways including:
Candidates:
Clients:
Suppliers:
Cookies, Web Statistics and third party monitoring
Our website host maintains continuous logs of Excel Recruitment’s web server activity. These log files include the details of website users’ IP address, browser type and page last visited, etc. The log files are used to analyse how the website is being used by visitors and may be kept in an anonymised form for historical records.
Excel Recruitment’s website uses hosted web analytics software. This hosted service is provided and managed by a third party company (Google, Inc). The service ‘Google Analytics’ uses ‘cookies’ (a text file sent to users’ computers as they browse our website) to help analyse how users navigate our website. The information generated by the cookie regarding our website (including IP addresses) will be anonymised and transmitted to and stored by Google, Inc. on servers that may be hosted in the United States. Google, Inc. will use this information for the purpose of evaluating use of our website, compiling reports on website activity for website operators and providing other related services to Excel Recruitment.
Google, Inc. may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google, Inc’s. behalf. Google, Inc. will not associate your IP address with any other data held by Google, Inc. You may decline the use of cookies by configuring your web browser to do so, but it may affect your user experience. By using this website, you consent to the processing of data about you by Google, Inc. in the manner and for the purposes set out above.
7. How Do You Use My Personal Data?
Under the GDPR, we must always have a lawful basis for using personal data. This may be because the data is necessary for our performance of a contract with you, because you have consented to our use of your personal data, to comply with regulatory or statutory legal obligations, or because it is in our legitimate business interests to use it.
A legitimate interest is where we have a business or commercial reason to use your information in conducting and managing our business. We will take into consideration and balance any potential impact on you and your legal rights when we process your personal information for our legitimate interests. We do not use your personal information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required by law to comply with a legal or regulatory obligation, or are permitted to by law).
Our legitimate interests are to provide recruitment and work finding services to our clients and candidates by matching suitably qualified and experienced candidates to clients’ vacancies and businesses. As a candidate by submitting your personal information and CV and actively engaging with us in your job search, we believe it is reasonable to expect you are happy for us to collect and use your information in order to provide our recruitment services to you, to assess your suitability for roles and to share that information with potential employers. As a client by engaging with us to source suitable candidates for your business we believe it is reasonable to use your information to help us manage this process.
Your personal data may be used for one of the following purposes:
Purpose | Lawful basis for processing |
Supplying our work finding and recruitment services to you. Your personal details are required in order for us to enter into a contract with you and it is in our legitimate interests to ensure that our relationship can run smoothly; |
Performance of a contract |
Personalising and tailoring our recruitment services for you; | Legitimate interests |
Communicating with you. This may include responding to emails or calls from you; | Legitimate interests |
Internal record keeping; | Legitimate interests |
If you are a candidate, to assess information about you against vacancies which we believe may be suitable for you; | Legitimate interests |
If you are a candidate, to contact you via email, text or telephone about vacancies that we believe you may be interested in; | Legitimate interests |
If you are a candidate, to send your information to clients for potential jobs or to assess suitability for the role. We will obtain your consent before providing your details to a client; unless we have specifically agreed otherwise with you; |
Legitimate interests |
To pay you (including processing any statutory deductions and regulatory reporting) where you have been placed on assignment as a temporary employee with one of our clients; |
Performance of a contract |
To carry out employment screening and vetting checks where you have been placed in employment or in a temporary assignment with one of our clients; |
Legitimate interests |
If you are a client we will use the information you provide to us about your company or vacancies to match against suitable candidates; |
Performance of a contract |
From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone or mail. |
Legitimate interests |
To contact you by email with information, news, and job updates; |
Legitimate interests |
Where you are a supplier, we will use the information you provide to ensure our relationship runs smoothly and so that we can pay you for your products or services; |
Performance of a contract |
Our recruitment decisions are not based solely on automated decision-making or profiling. We may use the search facility within our client relationship database to help us identify potential candidates who may have the skills and experience for a specific role.
8. How Long Will You Keep My Personal Data?
We will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Your personal data will therefore be kept for the following periods (or, where there is no fixed period, the following factors will be used to determine how long it is kept):
9. How and Where Do You Store or Transfer My Personal Data?
Your personal data is primarily stored on your candidate or client record within our recruitment CRM software, which is hosted in the cloud. Our CRM service provider employs industry standard security and operational principles in safeguarding the data and is ISO 27001 accredited (the international standard for Information Management Security Systems). The Company’s email system is also cloud based with robust security and encryption.
For systems that are not currently cloud based (eg payroll and accounts software), the data is stored on a private server located within our offices and accessed only by authorised personnel of Excel Recruitment and our IT support provider; it is protected by physical and software firewalls and anti-virus and anti-malware software. Encrypted backups, using bank grade encryption (which ensures that data is secure in transit and at rest), are replicated to our out-sourced IT support provider’s datacentre (located in the UK).
In providing our recruitment and work finding services your personal data may be transferred to countries outside the European Economic Area (‘EEA’), for example where you are submitted for a position with a prospective employer in Jersey, who may in turn transfer your data to personnel in one of their offices that is based outside the EEA. In respect of trusted third party suppliers, your personal data may be stored on cloud based systems which are located outside of the EEA.
These countries may not have data protection laws that are as robust as those within the UK/Jersey or EEA. This means that we will take additional steps in order to ensure that your personal data is treated just as safely and securely as it would be under the GDPR.
The security of your personal data is essential to us, and we will take all reasonable steps to ensure that it is protected from misuse, loss or unauthorised access in line with appropriate technical and data security practices.
10. Do You Share My Personal Data?
Candidates
In order to assist you in your work finding search, we may share your personal data with the following categories of people/organisations, including but not limited to:
Clients:
In order to provide you with the best possible recruitment service, we may share your information within our business, with prospective candidates, and with associated service providers.
Suppliers:
To enable our relationship to run efficiently we will share your information within our business, and with associated service providers.
If any of your personal data is required by a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law, as described above in Part 9.
If any personal data is transferred outside of the EEA, we will take suitable steps in order to ensure that your personal data is treated just as safely and securely as it would be within the UK and under the GDPR, as explained above in Part 9.
11. How Can I Access My Personal Data?
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”.
All subject access requests should be made in writing and sent to the email or postal addresses shown in Part 12. To make this as easy as possible for you, a Subject Access Request Form is available for you to use. You do not have to use this form, but it is the easiest way to tell us everything we need to know to respond to your request as quickly as possible.
There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
We will respond to your subject access request within one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
12. How Do I Contact You?
To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details (for the attention of Della Page, Director - Operations):
Email address: gdpr@excel-recruitment.com
Telephone number: 01534 707800.
Postal Address: Ground Floor, One St Andrew’s Place, Charing Cross, St Helier, Jersey, JE2 3RP.
13. Changes to this Privacy Notice
We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.
Any changes will be made available on our website and a copy can be provided on request (by email or post).