Privacy Statement
Updated December 2018
CompuStaff fully respects your rights to privacy and are committed to strict adherence to the EU General Data Protection Regulation (GDPR) which came into effect on 25 May 2018 as well as the provisions of the Data Protection Act 2018.
Who we are and what we do
We are an Irish Recruitment Services Company established in 2017 with offices in Galway. This Privacy Notice is primarily directed to individuals who wish to avail of our services in seeking employment, whether permanent or temporary, or to obtain our advice and assistance on any employment-related issues.
If you wish to contact us on any issue regarding your data protection, the following are the contact options:
Post: CompuStaff, Ross House Merchants Road, Galway, H91FPK5 Phone: GDPR Representative at Galway Tel: 091 393550
Email: jobs@compustaff.ie
This Privacy Statement sets out how CompuStaff uses and processes any information that you give to us (Candidate Data). We respect your privacy and are committed to protecting your personal information. This Privacy Statement explains how we collect, transfer, process, use and disclose your data and sets out our security practices.
What we collect
In order to provide you with our recruitment services we need to collect certain information relating to you.
We collect personally identifiable information that you provide to us, which is information that identifies you as an individual. We only do this when you have provided us with the information and you have given your consent that we can use it in your interest for the purposes set out in this Privacy Statement. This Personal Information may include your name, address, private and corporate email address, phone number, financial information, date of birth, employment history, skills/qualifications, educational history, licenses held, salary, desired salary, notice period, details of Visa or eligibility to work, photographic images, references verifying your qualifications and experience, and links to your professional profiles available in the public domain such as LinkedIn and Twitter.
How we use your Personal Information and the Legal basis for doing so
Any personal data you volunteer will be used for the purpose for which you supply it and will be treated with the highest standards of security and confidentiality, strictly in accordance with the EU General Data Protection Regulation. CompuStaff collects and uses your personal information to deliver the job-seeking or related services you have requested. Your information will only be used for matching your skills with potential job opportunities and will only be disclosed to prospective employers with your express consent.
In providing our services we may use your personal information to:
- consider your application for employment
- keep in contact with you through the job search process about interviews, feedback, job offers
- assess your suitability for current or future vacancies
- notify you of our new employment opportunities and services
- respond to your requests
- seek your views on our services to improve our level of service
- share your information with prospective employers to increase your chances of securing the job you want
Under the GDPR there are 6 lawful bases for processing personal information:
- Consent
- Performance of a contract
- Compliance with a legal obligation
- Vital interests
- Public interests
- Legitimate interest
The main grounds used by CompuStaff Recruitment and HR Services Group to process personal data are as follows:
Consent:
Consent may be collected when a candidate applies to a position advertised on our website or when they submit a CV via our website not associated with a specific open role but for general consideration. Where candidates apply to a CompuStaff job on a job board such as Irish Jobs we will provide candidates with a copy of this privacy statement and seek candidates consent via email. CompuStaff also seeks consent from candidates with whom we have engaged on public domains such as LinkedIn and who wish for us to act on their behalf.
Legitimate interest:
We may process data using legitimate interest where the candidate has either voluntarily provided their personal information directly to us or has applied to one of our jobs on a job board such as Irish Jobs. Where we use legitimate interest as a legal ground for processing, we consider that our processing is in line with candidate expectations and that there is a balance between our interests, and those of candidates. Candidates may object to any processing undertaken on the grounds of legitimate interest at any time.
Retention Period
From the 25th of May 2018, where candidates have forwarded their CVs to CompuStaff to assist them in finding employment, CompuStaff will begin an initial process which could take up to 12 months. We consider it in our legitimate interest to retain the personal data for such a period as well as in the interest of the candidate who has sought our assistance in meeting their employment ambitions. Where such a candidate has recorded their specific consent with us in accordance with the company’s Privacy Statement, a longer 5-year retention period will apply.
This retention period is based on our experience that, having engaged with us on employment options, individuals are open to considering new opportunities within that timeframe. Each individual has the right to withdraw their consent and have their personal information erased at any time.
Candidates that existed on our database prior to the application of the regulation in May 2018, will remain on our database for the 5-year retention period unless they request to be removed. The GDPR states that we may process personal data “if necessary, for the purposes of the legitimate interest pursued by the controller”, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data”. We may use legitimate interest where we do not have GDPR consent. We have assessed the scenarios where we use legitimate interest as a legal ground for processing and we consider our processing is in line with candidate expectations and that there is a balance between our interests, and those of candidates.
Your Rights
- Right of access – you have the right to request a copy of the information that we hold about you in accordance with Section 86 of the Data Protection Act 2018;
- Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete in accordance with Section 87 and Section 89 of the Data Protection Act 2018;
- Right to erasure – in certain circumstances, you can ask for the data we hold about you to be erased from our records in accordance with Section 87 and Section 89 of the Data Protection Act 2018;
- Right to restriction of processing – where certain conditions apply to have a right to restrict the processing in accordance with Section 87 and Section 89 of the Data Protection Act 2018
- Right of portability – subject to certain restrictions, you have the right to have the data we hold about you transferred to another organisation where we hold it in electronic form. This right of data portability applies to: (i) personal data that we process automatically (i.e. without any human intervention); (ii) personal data provided by you; and (iii) personal data that we process based on your consent or in order to fulfil a contract.
- Right to object – you have the right to object to certain types of processing such as direct marketing.
All of the above requests can be directed to the Collins Mc Nicholas contact points listed in this Statement. They will be forwarded on should there be a third party involved in the processing of your personal data.
Complaints
In the event that you wish to make a complaint about how your personal data is being processed by us or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority:
Data Protection Commissioner: Office of the Data Protection Commissioner. Canal House, Station Road, Portarlington, Co. Laois, R32 AP23, Ireland. Phone +353 (0761) 104 800 | LoCall 1890 25 22 31 | Fax +353 57 868 4757 | email info@dataprotection.ie.
How we protect your Personal Information
CompuStaff will take appropriate legal, organisational, and technical measures to protect your personal information. When CompuStaff uses a third-party service provider, that provider will be carefully selected and will be contractually required to use appropriate measures to protect the confidentiality and security of personal information. We use a variety of security technologies and procedures to help protect your Personal Information from unauthorised access, use or disclosure. Unfortunately, the transmission of information via the Internet or a mobile phone network connection is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of the personal information you transmit to our website. Any transmission is at your own risk. While we cannot guarantee that loss, misuse or alteration to data will not occur during transmission, once we have received your information, we will employ appropriate technical security measures to protect your data.
CompuStaff takes its obligations very seriously and adopts the strongest line in relation to the misuse of customer information by any of its staff. Any breach of trust regarding the confidentiality of information is treated as serious misconduct under the Disciplinary Code and can lead to sanctions up to and including dismissal.
Sharing Personal Information with third parties
To provide you with an efficient service, your information may be shared by recruitment consultants working within the CompuStaff Group nationwide. We may also disclose your information to contracted companies who act as “data processors” on our behalf. Our data processors include external consultants, professional advisers such as lawyers, software and technical support providers, IT consultants and marketing technology platforms and suppliers. We only share information with third parties who help us in the delivery of our job placement services to you. These third parties may not use that information for any purpose other than assisting us in providing these services. Any contact information that you provide through our system will not be sold/ rented/leased to any third party for selling or marketing to you. We will only provide third party companies with the personal information they need to deliver the appropriate service.
We require all companies providing such support services to meet the same standards of data protection as our own. They are prohibited from using the information for their own purposes. We do not allow service providers to use your Personal Information for their own activities.
Where CompuStaff transfer your data to countries outside of the EEA, (European Economic Area), CompuStaff ensures that the third parties have an adequate level of data protection and adhere to GDPR.
Information from outside sources
We may also collect legally obtained information from third parties to add to our existing user databases, for example, references. Such Information will only be collected and used by us to fulfill our services to our clients and candidates.
Changes
We may occasionally update this Privacy Statement. If the changes we make are material, we also may post a notice regarding the changes on our website. We encourage you to periodically review this Privacy Statement to stay informed about how we are helping to protect the Personal Information we collect.