D&D care about your privacy and are committed to processing your personal information in accordance with fair information practices and applicable data privacy laws (specifically, the UK General Data Protection Regulation (‘GDPR’) and the 2018 Data Protection Act). Within this document, Brantham Limited, trading as D&D Recruit is collectively as ‘the Company’.
This notice explains how the Company handles the personal information of all data subjects such as employees, applicants, interims, former employees, dependents, beneficiaries, contractors, consultants, and temporary agency workers whilst operating its human resources activities. The Company may amend this notice from time to time, should it become necessary to do so.
The Company will process your personal information to administer the employment and/or contractual relationship with you. The Company may collect, use, and transfer your personal information through automated and/or paper-based data processing systems. The Company has established routine processing functions (such as processing for regular payroll and benefits administration) and will also process personal information on an occasional or ad hoc basis (such as when an employee is being considered for a particular new position or in the context of changes to marital status for example).
In the normal course of human resources activities, the Company will collect the following types of personal information:
The Company uses a survey platform, which, from time to time will be used to invite you to complete a survey (the completion of which is not a requirement and is always considered voluntary). The Company conducts survey activities as part of its legitimate interests to monitor the performance of the services provided and to understand and improve employee/worker satisfaction.
The Company processes personal information for the following purposes:
In addition, the Company shall process sensitive personal information (‘special category’ data) if it is needed for legitimate business objectives or if it is required to comply with applicable law. Sensitive personal information will not be collected, processed, or transferred, except where adequate privacy protection mechanisms are in place and after having first obtained your informed consent, if required by law.
Your personal information may be passed to a Client (defined as an organisation the Company operates with and supplies Workers on assignment to), and vice versa. Such data may include confirmation of your performance on a specific assignment, which the Client may provide to the Company so that it can ensure you are performing at the standard requirements. Information will only be shared to ensure that the Company can administer the employment and/or contractual relationship with you. The Company will not pass any personal data that is not necessary to fulfil its obligations to you and the Client.
The Company may obtain information about you from searching for potential candidates from third party sources such as job sites and disclosure services. If you engage with the Company via any social media platform such as Facebook, the Company will receive information from the applicable site.
The Company uses data processors, which are third party organisations providing services (or elements thereof) to the Company. The Company has a contract in place with all data processors which ensures that all data processors are only permitted to process data in accordance with instructions received by the Company as the data controller and data protection law. Data processors are not permitted to share your personal information with any third-party organisation.
Where data processors are based outside of the UK or EU, the Company ensures that data is legally protected, and transfers are undertaken either:
The Company may disclose your personal information for its legitimate purposes or a third party’s legitimate interests for the continuity of its business/service, in the following circumstances:
The Company may also disclose your details to any recipient:
The Company respects your right to object to any uses or disclosures of your personal information which are not:
At times the Company will use automated systems/processes and automated decision making (like profiling) to improve and support your experience. Automation allows the Company to make processes intuitive, simple, and easy to use. You have Rights in relations to Automatic Processing, see ‘Know Your Rights’.
Your personal information may be transferred outside of the country where you work, including to countries which do not provide the same level of protection for your personal information. The Company is committed to protecting the privacy and confidentiality of personal information when it is transferred. Where such transfers occur, the Company shall ensure that adequate protection exists either through appropriate contractual arrangements or as required by law.
The Company takes reasonable steps to ensure that personal information is accurate, complete, and current. Please note that you have shared responsibility with regards to the accuracy of your personal information. Please notify the Company through your local site contact of any changes to your personal information or that of your beneficiaries or dependants.
You may reasonably access and update the personal information pertaining to you that is on file with the Company.
You can exercise this right by contacting dpo@ddrecruit.com.
You can ask the Company to delete any information it holds about you if the law and the Company’s data retention policies allow for this.
The Company takes precautions to protect personal information from loss, misuse, and unauthorised access, disclosure, alteration, and destruction. The Company has taken appropriate technical and organisational measures to protect the information systems on which your personal information is stored and require its suppliers and service providers to protect your personal information by contractual means.
Your personal information will be retained as long as necessary to achieve the purpose for which it was collected, usually for the duration of any contractual relationship and for any period thereafter as legally required or permitted by applicable law, after which point all information shall be securely destroyed in accordance with the Company’s Data Protection and
Information Security policies.
The Company will only continue to contact you for a period of two years after you have left employment or registered interest to work for the Company.
If you do not want us to contact you anymore, please contact:
dpo@ddrecruit.com
If you have any questions about this notice or if you believe that your personal information is not handled in accordance with the applicable law or this notice, you have several options:
The UK General Data Protection Regulation (GDPR) and the 2018 Data Protection Act (DPA) enshrines a number of rights for data subjects which are listed below, all of which are supported by the Company. Further information about these rights may be accessed by clicking the link shown at the bottom of the page.
More detailed information on each of the rights can be found here:
https://ico.org.uk/for-organisations/data-protection-reform/overview-of-the-gdpr/individuals-rights/
Request a call back