NOTICE RELATING TO GENERAL DATA PROTECTION REGULATION EFFECTIVE FROM 25THMAY 2018
It is important that you read this privacy notice together with any other privacy or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.
Introlegal respects your privacy and is committed to protecting your personal data. This privacy notice provides information on how we collect and process your personal data through our website, and when you contact us by phone, email, or by writing to us.
Introlegal is a specialist legal recruitment agency and our website and services are intended for adults aged 18 and over: we do not knowingly collect data relating to children.
Introlegal Limited is the controller and responsible for your personal data (collectively referred to as “we”, “us” or “our” in this privacy notice). Introlegal Limited is a company incorporated in England under registration number 11848375 andwith registered office at 4 Cavendish Square, London, W1G 0PG.
We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice or the ways in which Introlegal processes your personal data, please contact the data privacy manager, namely Luke Thompson, at [email protected] or by writing to Introlegal Limited, 4 Cavendish Square, London, W1G 0PG , marking the letter for the attention of Luke Thompson.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
Data collected about you
Use of your personal data
We will use your personal data as required for the services that we provide as a specialist legal recruitment agency: these uses include presenting roles or candidate profiles that may be of interest to you; managing the recruitment and interview process for clients and candidates; and using data analytics to improve our website. The lawful basis for us doing so is that this is necessary for the performance of a contract with you and/or for our legitimate interests in the efficient running our recruitment business and to keep our website updated and relevant. If you do not agree to our processing of your personal data as required to manage the recruitment process then we will not be able to present roles or candidates to you.
We will only collect sensitive personal data about you when absolutely necessary for the recruitment process. We will only process this data if you have given your consent for us to do so.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.
Sharing your personal data
We will only share your personal data with: (a) our third party service providers of our cloud back-up storage system; (b) other third parties, where such disclosure is necessary to comply with applicable laws; (c) the acquirer(s), in a reorganisation or sale of our company or assets, (d) employers or candidates who will need to receive your personal data as required for the recruitment process. We may discuss candidates with our client(s) on a no names (anonymised) basis but we do not provide a CV or any identifying information without the candidate’s express consent.
We will only transfer candidate data outside of the EEA (European Economic Area) where a candidate is applying for a role outside of the EEA and the hiring manager is based outside of the EEA, in which case any transfer of the candidate’s personal data would only take place with the candidate’s prior written consent.
We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, accessed in an unauthorised way, altered or disclosed. We have put in place procedures to deal with any suspected personal data breach and will notify the ICO and/or you of a personal data breach where we are legally required to do so.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Your legal rights and how to exercise them
You have the following data protection rights in relation to your personal data that apply in certain circumstances:
Right to erasure: You can ask us to erase or delete all or some of your personal data.
Change or correct data: You can also ask us to update the data we hold about you.
Object to, or limit, our use of your data: You can ask us to stop using all or some of your personal data or to limit our use of it.
Subject access requests and portability right: you can ask us for a copy of your personal data and can ask for a copy of personal data you provided in machine readable form.
If you wish to exercise any of the rights set out above, please contact [email protected].
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.