Addition Compliance (“We”) are committed to protecting and respecting your privacy. This policy together with our Terms of Conditions sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting www.addcompliance.com (the “Website”) you are accepting and consenting to the practices described in this policy as well as consenting to our use of cookies in accordance with the terms of this policy.
For the purpose of the Data Protection Legislation, including GDPR, (EU General Data Protection Regulation 2016/679), the data controller is Addition Compliance, 51 Holland Street, London W8 7JB.
INFORMATION WE COLLECT FROM YOU
The legal basis for this processing is our legitimate interests, namely monitoring and improving our Website and enabling you to communicate with us.
COOKIES
Our Website uses cookies to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our Website and allows us to improve our Website. A cookie will be stored on your computer. Generally, cookies work by assigning to your computer a unique number that has no meaning outside of the Website. The cookies do not contain any personal information and we use them to only to personalize and improve your experience.
USES MADE OF THE INFORMATION
DISCLOSURE OF YOUR INFORMATION
You agree that we have the right to share your personal information with:
We will disclose your personal information to third parties:
WHERE WE STORE YOUR PERSONAL DATA
The data that we collect from you will be transferred to, and stored at, a destination inside the European Economic Area (“EEA”). It will also be processed by staff operating inside the EEA who work for us or for one of our suppliers. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
RETAINING AND DELETING YOUR PERSONAL DATA
Your personal data shall not be kept for longer than is necessary although it is not possible for us to always specify in advance how long this may be for.
Notwithstanding the above, we may retain your personal data if it is necessary for our compliance with certain legal obligations.
YOUR RIGHTS
You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at (office@addcompliance.com)
The other rights you have under Data Protection Legislation include: (a) the right of access; (b) the right to rectification; (c) the right to erasure; (d) the right to restrict processing; (e) the right to data portability; (f) the right to complain to a relevant authority; and (g) the right to withdraw consent.
Our Website may, from time to time, contain links to and from the Website of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
ACCESS TO INFORMATION
The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act.
CHANGES TO OUR PRIVACY POLICY
Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.
OVERVIEW
Addition Compliance is a data controller and this means that we need to consider how we hold and use personal information from candidates when they apply for a job with us.
This privacy notice will help candidates understand how and why their personal data will be used for the purposes of the recruitment process and how long their data will be retained once a recruitment process has been concluded.
DATA PROTECTION PRINCIPLES
Personal data must be processed in accordance with six ‘Data Protection Principles.’ It must:
We are accountable for these principles and must be able to show that we are compliant.
INFORMATION WE WILL HOLD ABOUT CANDIDATES
When candidates apply for a job with us, we will collect and store the following categories of personal information about them:
If a candidate is offered a job role with us, we may also collect, store and use “special categories” of more sensitive personal information such as:
HOW YOUR INFORMATION IS COLLECTED
We collect personal information from candidates in the following ways:
HOW WE WILL USE INFORMATION ABOUT A CANDIDATE
We will use the personal information we collect to:
We will decide from all the information supplied in a candidate’s CV or covering letter whether to shortlist them for a job role and ask them to attend for an interview.
If we ask a candidate to attend for an interview we will use the information they have provided us at interview, along with any test results to decide whether to offer them a role with our Company.
If we decide to offer a candidate a role, we will take up references and carry out any other relevant checks as part of the offer process such as your right to live and work in the UK in line with relevant legislation.
FAILURE TO PROVIDE US WITH PERSONAL INFORMATION
Unfortunately, if a candidate fails to provide us with key information necessary to process their application to work for us (such as qualifications, previous work history, confirmation of right to work in the UK, or supply us with referees) we may not be able to progress with their application.
HOW WE USE SENSITIVE PERSONAL INFORMATION
We will use sensitive information in the following ways:
AUTOMATED DECISION MAKING
Candidates will not be subject to decisions that have a significant impact on them based solely on automated decision making.
SHARING YOUR INFORMATION
We will only share candidate’s personal data with third parties for the purposes of processing your application for a role with us. All our third party providers have to confirm to us that they comply with data protection requirements. We do not allow our third party suppliers to use candidates personal data for their own purposes. We only allow them to process a candidate’s personal data for specified purposes and in accordance with our instructions.
SECURITY OF YOUR INFORMATION
We have security measures in place to ensure the safety of the information a candidate provides to us. We limit access to a candidate’s information to only those who need to see it. All who do see your information are aware of its confidential nature.
We have a procedure in place to deal quickly with any suspected data security breaches.
RETENTION OF YOUR INFORMATION
We will retain candidate information for six months after we have concluded our recruitment process. After this we will securely destroy all information.
YOUR RIGHTS REGARDING YOUR INFORMATION
Subject access requests
A candidate can make a ‘subject access request’ (‘SAR’) to find out the information we hold about them. This request must be made in writing to us and we must respond within one month.
There is no fee for making a SAR. However, if a candidate’s request is manifestly unfounded or excessive we may charge a reasonable administrative fee or refuse to respond to their request.
Correcting information
A candidate can correct any inaccuracies in their personal data that we hold about them.
Erasing information
A candidate has the right to request that we erase their personal data where we were not entitled under the law to process it or it is no longer necessary to process it for the purpose it was collected.
Objecting to processing your information
A candidate has the right to object to data processing where we are relying on a legitimate interest to do so and they think that their rights and interests outweigh our own and they wish us to stop.
A candidate also has the right to object if we process their personal data for the purposes of direct marketing.
Request the right to restrict processing of your information
A candidate can ask us to suspend processing their personal information if they want to establish the accuracy of it.
Request a transfer of your information
A candidate has the right to receive a copy of their personal data and to transfer their personal data to another data controller. However, it may not be technically feasible for us to do this, but we will consider the Candidate’s request.
If you wish to exercise any of your rights regarding your information, you must contact us in writing, an email is acceptable to recruitment@addcompliance.com
RIGHT TO WITHDRAW YOUR CONSENT
If a Candidate no longer wishes us to process their personal information in relation to a job role that they have applied for, they must contact us in writing. An email is acceptable to recruitment@addcompliance.com
Once we have received notification we will no longer proceed with the candidate’s application and confidentially destroy all information in line with our data retention principles.
QUERIES AND COMPLAINTS
If a candidate has any queries with regards to how we handle their personal information, contact us in writing, via email to recruitment@addcompliance.com, and we will respond accordingly.
A candidate also has the right to complain to the Information Commissioner. They can do this by contacting the Information Commissioner’s Office directly. Full contact details including a helpline number can be found on the Information Commissioner’s Office website (www.ico.org.uk).