This notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
OSR Recruitment Services Ltd (the Company) is a recruitment business which provides work-finding services to its clients and work-seekers. The Company must process personal data (including sensitive personal data) so that it can provide these services – in doing so, the Company acts as a data controller.
You may give your personal details to the Company directly, such as on an application or registration form or via our website, or by corresponding with us by phone, email or otherwise, or we may collect them from another source such as a job board.
The information you give us or we collect about you may include your name, address, private and corporate email address and phone number, financial information, compliance documentation and references verifying your qualifications and experience and your right to work in the United Kingdom, curriculum vitae and photograph, links to your professional profiles available in the public domain e.g. corporate Facebook, Twitter, LinkedIn, or corporate website.
The Company must have a legal basis for processing your personal data. For the purposes of providing you with work-finding services and/or information relating to roles relevant to you we will only use your personal data in accordance with the terms of the following statement.
- Collection and use of personal data
a. Purpose of processing and legal basis
The Company will collect your personal data (which may include sensitive personal data) and will process your personal data in the following ways:
To carry out our obligations arising from any contracts we intend to enter into or have entered into between you and us and to provide you with the information, products and services that you request from us or we think will be of interest to you because it is relevant to your career or to your organisation.
To provide you with information about other goods and services we offer that are similar to those that you have already purchased, been provided with or enquired about.
The core service we offer to our candidates and clients is the introduction of candidates to our clients for the purpose of temporary or permanent engagement.
Our legal basis for the processing of personal data is our legitimate business interests, described in more detail in section 1b below, although we will also rely on contract, legal obligation and consent for specific uses of data.
We will rely on contract if we are negotiating or have entered into a placement agreement with you or your organisation or any other contract to provide services to you or receive services from you or your organisation.
We will rely on legal obligation if we are legally required to hold information on you to fulfil our legal obligations.
We will in some circumstances rely on consent for particular uses of your data and you will be asked for your express consent, if legally required.
b. Legitimate interest
Where the Company has relied on a legitimate interest to collect and retain your personal data our legitimate interests are as follows:
- As a recruitment business and recruitment agency we introduce candidates to clients for permanent employment or temporary worker placements. The exchange of personal data of our candidates and our client contracts is a fundamental, essential part of this process.
- In order to support our candidates’ career aspirations and our clients’ resourcing needs we require a database of candidate and client personal data containing historical information as well as current resourcing requirements.
- To maintain, expand and develop our business we need to record the personal data of prospective candidates and client contacts.
Should we want or need to rely on consent to lawfully process your data we will request your consent orally, by email or by an online process for the specific activity we require consent for and record your response on our system. Where consent is the legal basis for our processing you have the right to withdraw your consent to this particular processing at any time.
d. Recipient(s) of data
The Company will process your personal data and/or sensitive personal data with selected third parties including:
- Clients for the purpose of introducing candidates to them
- Candidates for the purposes of arranging interviews and engagements
- Clients, business partners, suppliers and sub-contractors for the performance and compliance obligations of any contract we enter into with them or you
- Subcontractors including email marketing specialists, event organisers, timesheet, payment and other financial service providers
- Analytics and search engine providers that assist us in the improvement and optimisation of our site
- Credit reference agencies, our insurance broker, compliance partners and other sub-contractors for the purpose of assessing your suitability for a role where this is a condition of us entering a contract with you.
We will disclose your personal information to third parties:
- In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective buyer or seller of such business or assets.
- If OSR Recruitment Services Ltd or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
The lawful basis for the third party processing will include:
- Their own legitimate business interests in processing your personal data, in most cases to fulfil their internal resourcing needs
- Satisfaction of their contractual obligations to us as our data processor
- For the purpose of a contract in place or in contemplation
- To fulfil their legal obligation.
- Overseas Transfers
The Company may transfer only the information you provide to us to countries outside the European Economic Area (‘EEA’) for the purposes of providing you with work-finding services. We will take steps to ensure adequate protections are in place to ensure the security of your information. The EEA comprises the EU member states plus Norway, Iceland and Liechtenstein.
- Data retention
The Company will retain your personal data only for as long as is necessary. Different laws require us to keep different data for different periods of time.
The Conduct of Employment Agencies and Employment Businesses Regulations 2003, require us to keep work-seeker records for at least one year from (a) the date of their creation or (b) after the date on which we last provide you with work-finding services.
We must also keep your payroll records, holiday pay, sick pay and pension auto-enrolment records for as long as is legally required by HMRC and associated national minimum wage, social security and tax legislation.
We understand our legal duty to retain accurate data and only retain personal data for as long as we need it for our legitimate business interests and that you are happy for us to do so. Accordingly, we have a data retention policy and run data routines to remove data that we no longer have a legitimate business interest in maintaining.
Our current retention policy is available on request.
- Your rights
Please be aware that you have the following data protection rights:
- The right to be informed about the personal data the Company processes on you;
- The right of access to the personal data the Company processes on you;
- The right to rectification of your personal data;
- The right to erasure of your personal data in certain circumstances;
- The right to restrict processing of your personal data;
- The right to data portability in certain circumstances;
- The right to object to the processing of your personal data that was based on a public or legitimate interest;
- The right not to be subjected to automated decision making and profiling; and
- The right to withdraw consent at any time.
Where you have consented to the Company processing your personal data/and sensitive personal data you have the right to withdraw that consent at any time by contacting us by email at email@example.com
- Automated decision-making
We do not undertake automated decision making or profiling. We do use or computer systems to search and identify personal data in accordance with parameters set by a person. A person will always be involved in the decision making process.
- Complaints or queries
If you wish to complain about this privacy notice or any of the procedures set out in it please contact us by email at firstname.lastname@example.org
You also have the right to raise concerns with Information Commissioner’s Office on 0303 123 1113 or at https://ico.org.uk/concerns/, or any other relevant supervisory authority should your personal data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.