G D P R S t a t e m e n t
1.0. PURPOSE
GDPR Statement
The purpose of this statement is to lay out the commitment of JN Technical Ltd to protecting the privacy and security of all personal information we hold. It’s very important to us to ensure the personal information provided to us is treated with the utmost respect and your data privacy rights are safeguarded, all in accordance with this GDPR Privacy Statement
2.0. SCOPE
The Policy applies to all personal data held by JN Technical. At this juncture it applies only to job seekers and candidates.
This GDPR Privacy Statement explains how personal information may be collected, what we do with the data, the measures we take to keep it secure as well as the rights and choices those affected have over their personal information. It applies to the personal data of all employees and job applicants.
3.0. RESPONSIBILITY
It is the responsibility of the Managing Director to ensure that this statement is communicated to all relevant parties.
4.0. STATEMENT
JN Technical must process personal data (which may include sensitive personal data – now known as “special data”) so that it can provide its services to clients – in doing so, JN Technical acts as a Data Controller so we are obliged to ensure we only process personal data where we have legal grounds to do so.
Personal details may be provided directly by you, such as on an email, application form, via a third party job board or social media (including but not limited to Linkedin and Facebook), we may also collect them from another sources such as referees or medical providers. For the purposes of providing information relating to your role we will only use your personal data in accordance with this GDPR Privacy Statement.
We take care to protect the privacy of all personal data we hold which, at all times, will be in compliance with current data protection laws.
As a Data Controller, we must have a legal basis to process your personal data. The legal grounds we rely upon are one or more of the following:
-
Where we have a legitimate interest.
-
To comply with a legal obligation that we have.
-
To fulfil a contractual obligation that we have with you.
JN Technical has a legitimate interest to process your data provided when it is reasonable and does not go against what you would reasonably expect. Where JN Technical has relied on a legitimate interest to process your personal data our legitimate interests are as follows:
• Managing our computer and hard copy records to keep them up to date
• Maintaining contact details to ensure work related information may be communicated to you
4.1. How we collect and use data
We hold relevant personal data that you have provided to us, or information that other parties, such as your referees have provided to us. However we will always ensure the processing of any other data remains consistent with the purpose and legal basis that we already rely on under our GDPR Privacy Statement
JN Technical Ltd - Company Registration Number 08688571 - 18 Mont Le Grand, Exeter EX1 2PA
We use data for the purposes of:
-
Assessing and confirming whether a candidate is suitable for employment
-
Introducing candidates to our clients for prospective vacancies
-
Complying with legislation
-
Providing our clients with employee qualifications and experience details.
-
Complying with client requirements
We will contact you from time to time, through email, telephone or text (SMS) message with information about vacancies or training which we feel may be of interest to you, this we define as ‘marketing’
4.2. Statutory requirements
JN Technical has certain legal and contractual requirements to collect personal data (e.g. to comply with immigration and tax legislation). Our clients may also require this personal data, and/or we may need your data to enter into a contract with you.
4.3. Recipients of data
JN Technical will process some or all of your personal data as necessary, with the following recipients:
-
Clients who have signed a contractual agreement with JN Technical confirming they will process any personal data received from us in accordance with the Data Protection Act of 1998 and General Data Protection Regulation of 2018.
-
Referees chosen by you, who may include former employers, or other persons from whom we may seek references.
-
Our own third party service providers including but not limited to our accountants, insurers, auditors, legal advisors and IT service providers
We take great care to ensure your information is kept securely and all appropriate checks are carried out by us to ensure those third parties have and maintain similar standards of data protection.
4.4. Categories of Data
JN Technical collects some or all of the following personal data on you:
Personal Data
-
Personal details: full name, gender, marital/family status, date of birth/age
-
Contact details: postal address, personal email address, home and mobile
telephone numbers
-
Immigration status: nationality/citizenship/place of birth/ID Confirmation
(usually by means of obtaining copies of your full Birth Certificate, Passport, Visas
or Identity Card)
-
Other ID information such as Driving Licence
-
Education, qualifications, certificates and employment history, including your
work performance, absence and disciplinary record
-
Current remuneration & benefits
-
National Insurance number
-
Third party contact information, specifically your emergency contacts and referee
details
-
Correspondence, including meeting notes, contemporaneous note of conversations
and feedback
Special categories of data & information on Criminal Convictions/Offences:
JN Technical Ltd - Company Registration Number 08688571 - 18 Mont Le Grand, Exeter EX1 2PA
-
Health or fitness information including whether you have a disability
-
Details of unspent convictions or spent convictions that must be declared for
specific roles you have applied for
Where we hold special data – we are bound by stricter rules. This could be information about your gender, age, sexual orientation, religion, social-economic background and other information such as health-related data. We currently only collect and process such special data where there are legal grounds to do so (e.g., Health & Safety measures, in compliance with the Equality Act with reference to disability access rights). If there is any other wish or need during the course of our working relationship for us to process your special data we will only do so with your explicit consent.
4.5. Data Retention
JN Technical will retain your personal data only for as long as is necessary for the purpose we collect it. Different laws may also require us to keep different data for different periods of time.
4.6. Candidate Rights
Please be aware that you have the following data protection rights:
-
The right to be informed about the personal data JN Technical processes on you (Achieved by means of this GDPR Privacy Statement)
-
The right of access to the personal data JN Technical processes on you
-
If you make a Subject Access Request under your access rights you should note that we may
ask you for more information to verify your identity and provide greater detail about your request before we comply. If we are legally permitted to do so we may decline your request, in which case we will explain to you why this is the case
-
The right to rectification of your personal data
-
You can ask us to rectify any inaccurate information we hold. Where appropriate we will
also tell you which third parties we have disclosed the inaccurate or incomplete personal
data to so you can take action to inform them of any rectification you require
-
The right to erasure of your personal data in certain circumstance
-
Where we agree with the request we will delete your data securely but will generally assume
that you would prefer us to keep a note of your name and date of birth on our register of individuals that would prefer not to be contacted (this is aimed at minimising the chances of you being contacted in the future where your data is collected in some other unconnected circumstances). If you disagree with us holding your name for this purpose you are free to inform us in writing on receipt of which the data will be deleted.
-
The right to restrict processing of your personal data
-
Your rights apply in the event you dispute the accuracy of the personal data or you object to
our processing of your personal data on the grounds of our legitimate interests or if you consider our processing of your data unlawful
Where you have consented to JN Technical processing your personal data/special data you have the right to withdraw that consent at any time by contacting the Managing Director. Please note that if you withdraw your consent to further processing that does not affect any processing done prior to the withdrawal of that consent, or which is done according to another legal basis.
There may be circumstances where JN Technical will still need to process your data for legal or official reasons. Where this is the case, we will tell you and we will restrict the data to only what is necessary for those specific reasons. If you believe that any of your data that JN Technical processes is incorrect or incomplete, please contact the Managing Director and we will take reasonable steps to check its accuracy and correct it where necessary.
You can also contact us using the above details if you want us to restrict the type or amount of data we process for you, access your personal data or exercise any of the other rights listed above. We
JN Technical Ltd - Company Registration Number 08688571 - 18 Mont Le Grand, Exeter EX1 2PA
will seek to deal with your request as quickly as we can and within 30 days (unless we have reason and are allowed to extend this period).
5. Sale of the Business
If the JN Technical business is sold or integrated with another business your details may be disclosed to our advisers and any prospective purchasers and their advisers and will be passed on to the new owners of the business. We will ensure that all such parties are GDPR compliant prior to such disclosure.
6. Data Security
We are passionate about protecting your information so we have put in place appropriate measures that are designed to prevent unauthorised access to and/or misuse and/or loss of your personal data.
We have done this by putting in place sound technical and organisational measures which include a process on how we deal with any suspected breach, ensuring firewalls, anti-virus, encryption and limited access by means of secure passwords apply to our systems. We also endeavour to use secure electronic methods of transferring documents between us, for example the forms that we use to collect and store your personal data.
Only employees who need the information to perform a specific job (for example, consultants) are granted access to your information.
JN Technical uses all reasonable efforts to safeguard your personal information. However, you should be aware that the use of email/the Internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal information which is transferred from you or to you via such media.
If you share a device with others we recommend that you do not select the “remember my details” function when that option is offered. If you have any questions about the security at our website, you can contact the Managing Director.
7. Changes to this privacy statement
We will update this GDPR Privacy Statement from time to time. We will post any changes on the statement with revision dates on our website(s). If we make any material changes, we will notify you.
8. Complaints or Queries
If you have any queries or wish to complain about this GDPR Privacy Statement or any of the procedures set out in it please send an email to info@jntechnical.co.uk for the attention of our Managing Director James Everidge.