Privacy policy – GTI Recruiting Solutions

This privacy notice tells you about the information we collect from you when you engage with one of our websites or services. In collecting this information, we are acting as a data controller and, by law, we are required to provide you with information about us, about why and how we use your data, and about the rights you have over your data.

Changes to the data protection law

From the 25th of May 2018, we will be processing your personal data in accordance with the General Data Protection Regulations (GDPR). Up until that point we will continue to process your personal data in accordance with the existing Data Protection Act 1998 (DPA). This notice is written to comply with both the DPA and the GDPR.

Who are we?

We are GTI Recruiting Solutions, a company which is part of our parent company Group GTI. Our main address is:

First Floor, 240 Blackfriars Road,
London, SE1 8NW, UK

You can contact us by post at the above address, or by via email at data.protection@groupgti.com or by telephone on +44 (0)1491 826262.

We are not required to have a data protection officer, so any enquiries about our use of your personal data should be addressed to the contact details above asking for the person responsible for data protection.

What personal data do we collect?

Through our Search teams operating under the TARGETrecruit brand we request certain personal information from you in order to for us to assist you with job opportunities that you have applied for or may arise from time to time. This will include your CV and personal contact details.

The personal data requested may also contain “special category data” as defined in the GDPR, or “sensitive personal data” as defined in the DPA. In both cases this may include racial or ethnic origin, sexual orientation and health (ie. where you have identified any disabilities to us). You can decide whether you wish to share this special category information with us. Not sharing this type of information does not prevent you from using our services.

In some activities such as when we have provided an Application Tracking System (ATS) to a client, or where we are working on a Recruitment Process Outsourcing arrangement on behalf of a client, we are collecting data in our capacity as Data Processors. In these instances we ask that you refer to the Privacy Notices of the individual client involved.

Where else may we get your data from?

External CV Databases

As part of our service we may obtain your personal details and CV as from a number of different job boards or CV databases that we have access to. We use these details in order to match client vacancies we have against suitable candidates. As part of our internal processes for this service we will contact you prior to passing on your CV and details to potential employers. As appropriate you may ask us to remove or update the details we have obtained via these sources.

GTI Media

Through our GTI Media websites which offers careers advice and job opportunities with our clients, for example targetjobs.co.uk, targetcareers.co.uk and gradireland.com we often obtain your CVs for the purposes of matching against vacancies we may have.

Why do we collect this information?

We collect information about you in order to properly match your qualifications and experience against the requirements of our clients to fill a particular vacancy.

Where is my information stored?

Your information is stored in the databases that are called by our websites and other systems, which are based in the UK or Europe.

What do we do with your information?

The personal information you provide helps us more accurately assess your suitability for a role that our client is seeking to fill.

To be more specific your information may be used in one or more of the following ways:

• communicate with you about client opportunities that we may have or that you have applied for.
• notify you of any changes to terms and conditions or policy changes.
• help us improve our services and it’s delivery to you
• carry out our obligations in relation to any contracts between you and GTI Recruiting Solutions.
• in an aggregated and anonymised form, use the data to plan new products, manage our relationship with our clients, and also improve existing products.
• resolve complaints and data access requests in accordance with data protection law.
• for the facilitation of any legal obligations or defend any court actions that we may have.

Who we might share your data with?

Our service providers

For the purposes of communicating with you or managing your information we may maintain a secure copy of your personal data with our service partners whom provide contact management systems. Access to this data is strictly controlled and we remain the data controller.

Some personal details may be shared with psychometric and video interviewing service providers as part of the recruitment process on behalf of particular clients.

Employers and sponsors

Along with your CV, personal details you provide might be shared with potential employers where you have expressed an interest in applying for a vacancy.

In accordance with best practice you will be consulted before your CV is passed on to an employer to determine the accuracy of the CV details, and whether you are still actively seeking employment.

Government, legal or regulatory authorities

GTI may be required to share your personal information with certain public or legal authorities where there is a legislative obligation to do so.

Automated processing and profiling

There are no automated decision making processes that would impact you as a result of any automated processing. No judgements or decisions are made of an individual suitability for a role as a result of any processing that may take place.

Legal basis for processing your data

The legal basis for processing under both the DPA and GDPR across our sites are outlined below:

Profile and CV data (Personal data that is held by us that is used to assess your suitability for various job opportunities): Contractual necessity (Article 6(1)(b)), legitimate interest (Article 6(1)(f)) and consent Article 6(1)(a)

Employer related personal details (These are contact details associated with a person that has been supplied as part of a vacancy): Contractual necessity (Article 6(1)(b)), legal obligation (Article 6(1)(c) and legitimate interest (Article 6(1)(f))

Contract

It may be necessary for GTI to process your data in order to fulfil a contract with you such as sending your CV to an employer for a particular role you have applied for or are interested in. We also may need to process your data if you are an employer or client contact for the purposes of fulfilling our contractual obligations to you in the delivery of a service.

Legitimate interest

GTI may also process your data when it is in our legitimate interest to do so and in doing so it does not override any of your data protection rights. Our legitimate interests include:

• ensuring the security and integrity of our services and ensuring that our systems such as websites and apps work properly;
• selling and supplying services to our clients;
• protecting clients, employees and other individuals (including yourself) and maintaining their safety, health and welfare;
• the promotion, marketing and advertising our products and services;
• understanding our client’s and your behaviour, activities, preferences, and needs to deliver a better quality and custom experience;
• improving existing products and services and developing new products and services;
• the handling client and your contacts, queries, complaints or disputes; and
• fulfilling our duties to our clients, yourself, colleagues, shareholders and other stakeholders.

You have the right to object to the processing of your data under legitimate interest should you feel that such legal basis is not warranted or feel that it overrides any of the rights that you may have.

How long do we keep your information for?

Personal information, CVs and cover letters: For a maximum of 30 months

Employer related personal details: For the length of our relationship with you plus 6 years (Limitation Act (1980) in case the case where there may be a dispute. Some information may be required to be retained longer due to legal obligations (eg. HRMC).

Your rights over your information

By law, you can ask us what information we hold about you, and you can ask us to correct it if it is inaccurate.

You can also ask us to give you a copy of the information and to stop using your information for a period of time if you believe we are not doing so lawfully.

To submit a request by email, post or telephone, please use the contact information provided above.

In addition to the above you have the following rights under GDPR:

• The right to ask what personal data is held, subject to a fee (currently £10), free from the 25th May 2018.
• The right to ask to update and correct any out of date or incorrect personal data that we hold free of charge.
• The right to erasure of personal data where consent is the only legal basis for processing and that consent has been withdrawn.
• The right to data portability in the sense that personal data provided directly by the data subject is exportable in an open format like CSV where the legal basis for processing is based on either contract or consent.
• The right to restrict or object to the processing of your personal data where:

• You contest the accuracy of the personal data and the accuracy needs to be verified;
• You object to the processing under legitimate interest ground and consideration needs to be made whether GTI’s legitimate interest overrides that of the individuals;
• The processing was unlawful and you request restricted processing over erasure;

You can withdraw consent at any time where consent has been relied upon. If consent is the sole legal basis for processing, we will stop processing the data after the consent is withdrawn. The data will then be placed in a restricted processing mode until you have asked to exercise your right to erasure or the personal data falls outside stated retention period (whichever comes first).

Our communications with you

We will periodically communicate with you by email, post, telephone or device notifications for the purposes of delivering our services to you. The legal purpose for which is under the legitimate interest provision under both GDPR and the Privacy and Electronic Communications Regulations (PECR).

However, should you be concerned about the content of these communications (such as unwanted marketing communications or simply want to change the way we communicate with you please log into your profile on the relevant website and change your preferences, or use the relevant unsubscribe link. Alternatively you can contact us by telephone or letter at the details provided above.

Changes to this privacy notice

From time to time we may need to make changes to this notice. We will attempt to inform you of any changes that are made either through both email notifications or through associated websites. You can obtain the most recent version of this notice from https://groupgti.com/privacy/gtirecruitingsolutions or by contacting us directly. This privacy notice was last updated on the 9th of May 2018.

Your right to complain

If you have a complaint about our use of your information you can do so with the relevant supervisory authority within the EU to which you are a resident, whom may refer the complaint to the UK supervisory authority.

Complaints in the UK can be made to the Information Commissioner’s Office via their website at www.ico.org/concerns or write to them at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF