Who we are and what we do:
We are a recruitment business providing work-finding services to our clients and work-seekers. We must process personal data so that we can provide these services – and in doing so, we act as a data controller.
You may give your personal details to us directly, such as on an application or registration form or via our website, or we may collect them from another source such as a jobs board. We must have a legal basis for processing your personal data. For the purposes of providing you with work-finding services, information relating to roles relevant to you or other market intelligence (such as salary surveys) we will only use your personal data in accordance with the terms of the following statement.
Collection and use of personal data
a. Purpose of processing and legal basis
We will collect your personal data and will process your personal data for the purposes of providing you with work-finding services, market and salary updates, and to maintain our business relationship (either as a client or a candidate). The legal bases we rely upon to offer these services to you are:
– Legitimate interest
– Consent
– Legal obligation
– Contractual obligation
b. Legitimate interest
Where we have relied on a legitimate interest to process your personal data our legitimate interests are as follows:
– As a recruitment business and recruitment agency we introduce candidates to clients for permanent and temporary employment. The exchange of personal data of our candidates and our client contacts is a fundamental, essential part of this process. To support our candidates’ career aspirations and our clients’ resourcing needs we require a database of candidate and client personal data. To maintain, expand and develop our business we need to record the personal data of prospective candidates and client contacts.
c. Recipient/s of data
We will process your personal data with the following recipients:
– Prospective employers where you are interested in an available position and have given express permission that we may disclose it;
– Third parties who perform functions on our behalf and who also provide services to us, such as IT consultants carrying out testing and development work on our business technology systems and payroll professionals.
d. Statutory/contractual requirement
Whilst our main legal basis for the processing of personal data is our legitimate business interests, we will also rely on contract, legal obligation and consent for specific uses of data.
We will rely on contract if we are negotiating or have entered into an agreement with you or your organisation or any other contract to provide services to you or receive services from you or your organisation.
We will rely on legal obligation if we are legally required to hold information on you to fulfil a legal obligation. For example, we have a statutory obligation to retain employee data and placement data, including details of taxation payments for at least 6 years.
We will in some circumstances rely on consent for particular uses of your data and you will be asked for your express consent, if required. Examples of when consent may be the lawful basis for processing includes seeking permission to introduce a candidate to a client.
Overseas Transfers
We may transfer only the information you provide to us to countries outside the European Economic Area (‘EEA’) for the purposes of providing you with work-finding services in those countries. We will take steps to ensure adequate protections are in place to ensure the security of your information.
Data retention
We will retain your personal data only for as long as is necessary. Different laws require us to keep different data for different periods of time.
The Conduct of Employment Agencies and Employment Businesses Regulations 2003, require us to keep work-seeker records for at least one year from (a) the date of their creation or (b) after the date on which we last provide you with work-finding services.
We must also keep your employment records for as long as is legally required by HMRC and associated national minimum wage, social security and tax legislation.
We have a legal duty to retain accurate data and only retain personal data for as long as we need it for our legitimate business interests, bearing in mind that the long term relationships with our candidates and clients, and awareness of our candidates’ career histories, are key components of our successful service to you. Accordingly, we have a data retention policy which we keep under review.
Your rights
Please be aware that you have the following data protection rights:
– The right to be informed about the personal data we process on you;
– The right of access to the personal data we process on you;
– The right to rectification of your personal data;
– The right to erasure of your personal data in certain circumstances;
– The right to restrict processing of your personal data;
– The right to data portability in certain circumstances;
– The right to object to the processing of your personal data that was based on a public or legitimate interest;
– The right not to be subjected to automated decision making and profiling; and
– The right to withdraw consent at any time.
Where you have consented to gmk processing your personal data you have the right to withdraw that consent at any time by contacting:
Jon Garrett (Director) jon@gmk-legal.co.uk
Automated decision-making
We do not undertake automated decision making or profiling.
Complaints or queries
If you wish to enquire about this privacy notice, or any of the procedures set out in it, please contact:
Jon Garrett (Director) jon@gmk-legal.co.uk
Cookies and LocalStorage
Cookies and HTML5 LocalStorage enable us to identify your device. We use HTML5 LocalStorage (when available) or cookies that are strictly necessary to enable you to move around the site with ease. We only store information about your display preferences. We don’t sell this information.
Google Analytics
Google Analytics is a web analysis service provided by Google. Google utilizes the data collected to track and examine the use of www.gmk-legal.co.uk, to prepare reports on its activities and share them with other Google services. Google may use the data collected to contextualize and personalize the ads of its own advertising network. Personal data collected: Cookie and Usage Data. Place of processing: USA. Google’s privacy policy.