Privacy Policy

INTRODUCTION

• This Privacy Policy explains what we do with your personal data, whether we are helping you to find work, continuing our relationship once we have found you work, providing you with an ongoing service, receiving a service from you, using your data to ask for your assistance in relation to one of our Candidates, or if you are visiting our website.
• It describes how we collect, use and process your personal data, and how, in doing so, we comply with our legal obligations to you. As a company we take data protection very seriously and are compliant with UK and EU data protection law. Your privacy is important to us, and we are committed to protecting and safeguarding your privacy rights.
• This Privacy Policy applies to personal data of our Candidates, Clients, Suppliers, Website Users and other people whom we may contact to find out about our Candidates or if required whom they may indicate is an emergency contact. It also applies to the emergency / next of kin contacts of our staff. If you are a member of CG Consultants ‘Staff’ please refer to the CG Consultants Employee Manual which is available on the CG Consultants intranet.
• For the purpose of applicable data protection legislation (including but not limited to the GDPR, Regulation (EU) 2016 / 2017), the company responsible for your personal data is Clearglen LTD, t/a CG Consultants, 151 Frimley Road, Camberley, Surrey, GU15 2PS.
• Please note that we may amend our Privacy Policy from time to time. Please visit this page if you want to stay up to date with these changes as they will be posted here.If you are dissatisfied with any aspect of our Privacy Policy, you may have legal rights and, where relevant, we have described these rights.

‘SHORT FORM’ SUMMARY What information is being collected?

• CANDIDATE DATA: As a Recruitment business to provide you with the best possible Candidate experience we need to process certain data about you. We only ask for the data that we need to help us help you. This could include your name, date of birth / age, contact details, education details, employment history, emergency contacts, immigration status and social security number (you may choose to share other relevant data with us). Where appropriate and in accordance with our requirements, we may also collect information related to your health, diversity information or details of any criminal convictions.
• A more detailed description of the personal data that we collect about you can be found here
• When you choose to access our website, we will collect certain data from you. If you would like more information about this, please click here
• CLIENT DATA: If you are an existing CG Consultants customer, we need to collect and use the information about you, or individuals at your organisation in the course of providing you services such as (i) finding Candidates for the brief you have provided or (ipagei) providing you with a Managed Service Provider (‘MSP’) programme (or assisting another organisation to do so)
• A more detailed description of the personal data what we collect about you can be found here
• When you choose to access our website, we will collect certain data from you. If you would like more information about this, please click here
• PEOPLE WHOSE DATA WE RECEIVE FROM CANDIDATES AND STAFF, SUCH AS REFEREES AND EMERGENCY CONTACTS: In order to safely and securely provide Candidates with relevant opportunities and to prepare for all eventualities for them, our Staff and our Clients, at times we need to collect some background information. We will only ask for very basic contact details, so that we can get in touch with you either for a reference or because you’ve been listed as an emergency contact for one of our Candidates or Staff
• If you would like a more detailed description of the personal data that we collect about you, please click here
• Website Users: We collect a limited amount of data from our Website Users which we use in order to provide you with our services and to improve the services and how we deliver them. This could be as little as your name and email address, but may often include your contact details, job preferences, application information, saved searches / alerts, bookmarked jobs list, CV file and so on.
• If you would like more detailed description of the personal data that we collect about you, please click here

Much of the personal data we collect on you is required to enable us to fulfil our contractual duties to you or others. Where appropriate, some, for example Candidates’ social security number or date of birth, are required by statute or other laws. Other items may simply be needed to ensure that our relationship can run smoothly. Depending on the type of personal data in question and the grounds on which we may be processing it, should you decline to provide us with such data, we may not be able to fulfil our contractual requirements or, in extreme cases, may not be able to continue with our relationship. For details on the legal bases that we rely on to be able to use and process your personal data, please click here.

How this information is being collected.

• CANDIDATE DATA: There are two main ways in which we collect your personal data
  1. Directly from you; and
  2. From third parties
• If you want to know more about how we collect your personal data, please click here
• CLIENT DATA: There are two main ways we in which we collect your personal data
  1. Directly from you
  2. From third parties (e.g. our Candidates) and other limited sources (online and offline media).
• If you would like to know more about how we collect your personal data please click here
• When you choose to access our website, we may also collect certain data automatically or through you providing it to us. For more information please click here
• SUPPLIER DATA: We collect your personal data during the course of our work with you
• When you choose to access our website, we may also collect certain data automatically or through you providing it to us. For more information please click here
• PEOPLE WHOSE DATA WE RECEIVE FROM CANDIDATES AND STAFF, SUCH AS REFEREES AND EMERGENCY CONTACTS: We collect your contact details only where a Candidate or member of our Staff puts you down as their emergency contact or where a Candidate gives them to us in order for you to serve as a referee
• Website Users: We use a number of different cookies on our site. To find out more about cookies, including how we use them and what choices are available to you, please click here. We also collect data from you when you contact us via the website for example when you apply for a job via cgconsultants.com

How will your personal data be used?

• • CANDIDATE DATA: The main reason for using your personal data will be to help identify employment or other work roles that might be suitable for you. The more information that we can collect on your skillset, ambitions and requirements, the more we can tailor our service to you.
  • For more details on how we use your personal data, please click here
  • CLIENT DATA: The main reason for using information about Clients is to ensure that the contractual arrangements between us can be properly implemented so that we can develop or continue a successful partnership. This may involve (i) identifying Candidates who we believe are suitable for your organisation; (ii) providing you with an MSP programme (or assisting another organisation as part of an MSP programme). The more information we have on our Clients, the more we can tailor our service to you.
  • For more details on how we use your personal data, please click here
  • SUPPLIER DATA: The main reasons for using your personal data are to ensure that the contractual arrangements between us can properly be implemented so that the relationship can run smoothly, and to comply with legal requirements.

• For more details on how we use your personal data, please click here
• PEOPLE WHOSE DATA WE RECEIVE FROM CANDIDATES AND STAFF, SUCH AS REFEREES AND EMERGENCY CONTACTS: We use referees’ personal data to help our Candidates to find employment which is suited to them. Allowing us to verify their details, employment history and qualifications means we can ensure Candidates are matched to prospective employers. In the course of these activities we may use referees’ personal data to contact them in relation to recruitment activities that may be of interest to them. We use the personal details of Candidates or Staff members emergency contact numbers contact them in the case of an accident or emergency affecting that Candidate or member of Staff.
• For more details on how we use your personal data, please click here
• Website Users: In order to process Candidates job applications, we need to know who you are, how to contact you, what your skills are, and obtain a copy of your CV. Likewise to provide you with job alerts, we need to know your email address and your search criteria, so that we can filter the jobs you your specific requirements and send to you at the interval you have chosen.
• In addition to the information our site directly collects from you, we may also use third party services, such as Google Analytics, to help us to understand how visitors use the site. The information collected is focused on which pages were visited, how long the user stayed on a page and where they have come to the site from. Generally, this information has limited personally identifiable data, but some services may record your IP address which could be used as a personal identifier.
• To find out more about Cookies, including how we use them and what choices are available to you, please click here

Who do we share personal data with?

• CANDIDATE DATA: We may share your personal data with various parties, in various ways and for various reasons. Primarily we will share your information with prospective employers to increase your chances of securing the job you want.
• If you would like to see a list of who we may share your personal data with, please click here
• CLIENT DATA: We will share your data: (i) primarily to ensure that we provide you with a suitable pool of Candidates; (ii) to provide you with an MSP programme (or assist another organisation to do so).
• If you would like to see a list of who we may share your personal data with, please click here
• SUPPLIER DATA: Unless you specify otherwise, we may share your information with any associated third parties such as our service providers and organisations to whom we provide services.
• If you would like to see a list of who we may share your personal data with, please click here
• PEOPLE WHOSE DATA WE RECEIVE FROM CANDIDATES AND STAFF, SUCH AS REFEREES AND EMERGENCY CONTACTS: Unless you specify otherwise, we may share your information with any associated third parties such as our service providers and organisations to whom we provide services.
• If you would like to see a list of who we may share your personal data with, please click here
• Website Users: Unless you specify otherwise, we may share your information with providers of web analytics services and social media services to make sure any advertising you receive is targeted to you.

How do we safeguard your personal data?  

• We care about protecting your information. We have and are constantly revising the appropriate measures designed to prevent unauthorised access to, and misuse of, your personal data.

How long do we keep your personal data for?  

• We will hold your data a specific period of time depending on our dealings with you. The legal basis for this will be legitimate business interest. Where we no longer have a legitimate business interest we will seek your consent to hold your data. If we do not receive your consent we will delete your personal data from our database unless we believe in good faith that the law or other regulation requires us to preserve it (for example, because of our obligations to tax authorities or in connection with any anticipated litigation).
• For more information on our policy for the retention of personal data, please click here

How can you access, amend or take back the personal data that you have given us?

• Even if we already hold your personal data, you still have various rights in relation to it. To get in contact with us please contact us. We will seek to deal with your request without undue delay, and in ay event in accordance with the requirements of any applicable laws. Please note that we may keep a record of your communications to help us resolve any issues which you raise.
• Right to Object: If we are using data because we deem it necessary for our legitimate interests and you do not agree, you have the right to object. We will respond to your request within 30 days (although we may be allowed to extend this period in certain cases). Generally, we will only disagree with you if certain limited conditions apply.
• Right to withdraw consent: Where we have obtained consent to process your personal data for certain activities (for example in the event we have received your consent to keep your details over the legitimate business interest period), you may withdraw consent at any time.
• Data Subject Access Requests (DSAR): You have the right to ask us to confirm what information we hold about you at any time, and you may ask us to modify, update or delete such information. At this point we may comply with your request or, additionally do one of the following:
  • We may ask you to verify your identity, or ask for more information about your request; and
  • where we are legally permitted to do so, we may decline your request, but we will explain why if we do so
• Right to erasure: In certain situations (for example where we have processed your data unlawfully), you have the right to request us to ‘erase’ your personal data. We will respond to your request in 30 days (although we may be allowed to extend this period in certain cases). Generally, we will only disagree with you if certain limited conditions apply.
• Right of data portability: If you wish, you have the right to transfer your data from us to another data controller. We will help with this – either by directly transferring your data for you, or by providing you with a copy in commonly used machine-readable format.
• Right to lodge a complaint with a supervisory authority: You also have the right to lodge a complaint with your local supervisory authority.
• On our website, if you have an account on the site you can manage most aspects of the data we store about you from your accounts dashboard. Simply sign in to your account to access your dashboard. If you do not have an account with us and would like us to update any information, please contact us to discuss how to get this information updated.
• If you would like to know more about your rights in respect of the personal data we hold about you, please click here.

Who is responsible for processing your personal data on the CG Consultants website

• CG Consultants are the data processors and controllers and as such our management and employees may have access to your details, as governed by our data protection policy.
• If you have any further questions, or want further details please click here

What are cookies and how do we use them?

• A ‘cookie’ is a bite-sized piece of data that is stored on your computers hard drive. They are used by nearly all websites and do not harm your system. We use a number of different cookies on our site and we use them to track your activity to ensure you get the best possible experience when visiting our website. We can also use cookies to analyse traffic.
• If you want to find out more about cookies, including how we use them and what choices are available, please click here

How to reject cookies

• Currently we operate an ‘implied consent’ policy which means that we assume you are happy with this usage. If you are not happy, then you should either not use this site, or you should delete the cookies having visited the site, or you should browse the site using your browser’s anonymous usage setting (called “Incognito” in Chrome, “InPrivate” for Internet Explorer, “Private Browsing” in Firefox and Safari etc.)
• If you do not know what cookies are, or how to delete them, then we recommend you visit http://www.about cookies.org (http://aboutcookies.org/) for detailed guidance.

LONG FORM DETAILED SECTIONS WHAT KIND OF PERSONAL INFORMATION DO WE COLLECT? Here’s a more detailed look at the information we may collect. The information below is, of course, in addition to any personal data we are required by law to process in any given situation.

• CANDIDATE DATA: Throughout the course of our activities, we may collect some or all of the information listed below to enable us to offer you employment opportunities tailored to your requirements
• Your CV
• Age / date of birth;
• Sex / gender;
• Photograph;
• Marital status;
• Contact details;
• Education details;
• Employment history;
• Emergency contacts and details of dependants;
• Referee details;
• Immigration status (if required);
• Nationality / citizenship / place of birth;
• A copy of your driving license and / or passport / ID card;
• Financial information (where we need to carry out financial checks);
• Social security number and any other tax related information;
• Diversity information including racial or ethnic origin, religious or other similar beliefs, and physical or mental health, including disability-related information;
• Details of any criminal convictions if this is required for a role that you are interested in applying for;
• Details about your current salary, pensions and benefits arrangements
• Information on your interests and requirements regarding future employment collected directly from you such as career preferences, target salary, location etc
• Extra information that you choose to tell us about you
• Extra information that our Clients may tell us about you, or that we find out from third party sources sites
• IP address
• All candidate phone calls to and from the main CG Consultants offices (01276 682733) are recorded and held for 90 days
• Please note that the above list of categories of personal data we may collect is not exhaustive
• To the extent that you access our website we will also collect certain data from you. If you would like more information about this, please click here

******

• CLIENT DATA: The data we collect about Clients is actually very limited. We generally only need to have your contact details or the details of the individual contacts at your organisation (typically being names, telephone numbers, job titles, organisational structures and email addresses) to enable us to ensure that our relationship runs smoothly. If we need any additional personal data, we will let you know.
• All client phone calls to and from the main CG Consultants offices (01276 682733) are recorded and held for 90 days.

******

• SUPPLIER DATA: We don’t collect much data about Suppliers – although we do need to make sure that our relationship runs smoothly. We’ll collect the details for our contacts within your organisation, such as names, job titles, telephone number and email addresses. We’ll also collect bank details, so that when necessary we can pay you. We may also hold extra information that someone in your organisation has decided to tell us.
• All Supplier phone calls to and from the main CG Consultants offices (01276 682733) are recorded and held for 90 days.

******

• PEOPLE WHOSE DATA WE RECEIVE FROM CANDIDATES AND STAFF, SUCH AS REFEREES AND EMERGENCY CONTACTS: All we require from referees is confirmation of what you already know about our Candidates or prospective members of Staff, so that they can secure a job we are proposing for them. Emergency contact details give us someone to contact if there is an emergency. To ask for a reference we will need the referee’s contact details such as name, email address, job title, employer name and telephone number). We’ll also need some of these details if our Candidate or a member of Staff has put you down as their emergency contact so that we can contact you in the event of an accident.

******

• Website Users: We usually collect the following data, although exactly what we have stored about you may vary depending on which of the services you have used: name, email address, contact details, skills, career preferences (e.g. target salary, location etc), search criteria, and a CV file / any supporting documents you may have uploaded.
• To find out more information about what data we collect about you when you visit our website please click here

*******************  

How is the information being collected?

• CANDIDATE DATA: We collect Candidate personal data in three primary ways
  1. Personal data that you, the Candidate, give to us;
  2. Personal data that we receive from other sources; and
  3. Personal data that we collect automatically

Personal data that you give to us

• In order to tailor our service to you, CG Consultants needs to know certain information about you. This will enable us to provide you with suitable job opportunities.
• There are many ways you can share your information with us, these may include;
• Entering your details on the CG Consultants website or via an application form registering your interest in an advertised position
• Leaving a hard copy of your CV at CG Consultants offices or sending one via the post
• Emailing your CV to a CG Consultants employee or being interviewed by them
• Applying for jobs through a job board we use
• Entering a competition through social media channels such as Twitter or Facebook.

Personal data we receive from other sources

• We may also receive personal data about Candidates from other sources. Depending on the relevant circumstances and applicable local laws and requirements, these may include
• Your referees may disclose personal information about you with us;
• We may obtain information about you from searching for potential Candidates from third part sources, such as LinkedIn and other job sites;
• If you ‘like’ our Facebook or ‘follow us’ on Twitter we will receive your personal information from those sites;

And

• If you were referred to us through an MSP Supplier, they may share personal information about you with us.

Personal data we collect automatically

• To the extent that you access our website or click on an email from us, where appropriate and in accordance with local laws and requirements, we may also collect your data automatically or through you providing it to us. For more information click here.

******

• CLIENT DATA: We collect Client personal data in three ways
  1. Personal data that we receive from you directly
  2. Personal data that we receive from other sources (such as work colleagues)
  3. Personal data that we collect automatically.

Personal data that we receive directly from you

• We both share the same objective – to make sure that you have the best staff for your organisation. We receive data directly from you in two ways:
• Where you contact us proactively, usually by phone or email; and / or
• Where we contact you, either by phone or email, or through our employees’ business development activities more generally.

Personal data we receive from other sources

• Where appropriate and in accordance with local laws and requirements, we may seek more information about you and your colleagues generally by way of due diligence or other market intelligence from other limited sources or third parties (for example from our Candidates to the extent that they provide us with your details to act as a referee for them).

Personal data we collect via our website

• To the extent that you access our website, where appropriate and in accordance with any local laws and requirements, we may also collect data automatically through you providing this to us. For more information please see below.
• Website Users: When you visit our website, there is certain information that we may automatically collect, whether you decided to use our service or not. We may use third-party services, such as Google Analytics, to help us understand how visitors are using the site. The information collected by these third-party services is typically focused on which pages are more visited, how long users stay on a page and where they have come to the site from. Generally, this information has limited personally identifiable data, but some services may record your IP address which could be used as a personal identifier.
• We collect your data automatically via cookies, in line with the cookie settings in your browser. We use a number of different cookies on our site and we use them to track your activity to ensure you get the best possible experience when visiting our website. We can also use cookies to analyse traffic. If you want to find out more about cookies, including how we use them and what choices are available, please click here

How do we use your personal data?

Having obtained data about you, we use it in a number of different ways

• CANDIDATE DATA: We generally use candidate data in two ways:
• Recruitment Activities;
• To help us to establish, exercise or defend legal claims.

More details about each:

• As a Recruitment Agency and / or as an Employment business our main area of work is recruitment – sourcing the right Candidates with the right jobs. Listed below is various ways in which we may use and process your personal data for this purpose, where appropriate and in accordance with local laws and requirements. Please note this list is not exhaustive.
• Collecting your data from you and other sources such as LinkedIn;
• Storing and updating your details on our CRM database, so that we can contact you in relation to recruitment;
• Providing you with recruitment services and to facilitate the recruitment process;
• Assessing data about you against vacancies which we think you may be suitable for;
• Sending your information to Clients, in order to apply for jobs or to assess your eligibility for jobs;
• Enabling you to submit your CV, apply online for jobs or job alerts via our website (where you have signed up for them);
• Carrying out our obligations arising from any contracts entered into between us;
• Carrying out our obligations arising from any contracts entered into between CG Consultants and third parties in relation to your recruitment;
• Facilitating our payroll and invoice processes with our third-party supplier
• Carrying out customer satisfaction surveys
• Complying with our legal obligations in connection with the detection of crime or the collection of taxes or duties
• We may use your personal data for the above means if we deem it necessary to do so for our legitimate interests. If you want to know more about what this means, please click here.

Sensitive Personal Data (SPD)

• Sensitive personal data is information personal to you and is in most cases irrelevant to our service with you in respect of our Recruitment Services. Examples of SPD include information revealing your religious, philosophical or political beliefs, race or ethnic origin, sexual orientation or information relating to your health. Regardless of the basis for your dealings with us, we request you do not provide us with any sensitive personal data unless it is absolutely necessary. However, to the extent that you do provide us with any sensitive personal data, such as data which you choose to share with us in conversation, we shall only use that personal data for the purposes of our relationship with you or for the provision of our Recruitment Services. This will be for one or more of the following reasons:
• You have explicitly consented to the processing (this may be verbal consent)
• Where processing is necessary for the purpose of obligations or rights under employment, social security or social protection law
• To maintain records of our dealings to address any later dispute, including but not limited to the establishment, exercise or defence of any legal claims
• If you are not happy about this, in certain circumstances you have the right to object and can find out more about how and when to do this here.

To help us to establish, exercise or defend legal claims

• In more unusual circumstances, we may use your personal data to help us establish, exercise or defend legal claims
• CLIENT DATA: We use client information for:
• Recruitment Activities;
• To help us to establish, exercise or defend legal claims

Recruitment Activities As a Recruitment Agency and / or as an Employment business our main area of work is recruitment through: (i) providing you with Candidates and (ii) MSP programmes. Listed below is various ways in which we may use and process your personal data for this purpose, where appropriate and in accordance with local laws and requirements.

• Storing your details (and updating them when necessary) on our CRM database so that we are able to contact you in relation to recruitment activities;
• Keeping records of conversations and meetings so that we better meet our Clients needs and provide the recruitment service they require
• Undertaking customer satisfaction surveys
• We may use your personal data for the above means if we deem it necessary to do so for our legitimate interests. If you want to know more about what this means, please click here.
• If you are not happy about this, in certain circumstances you have the right to object and can find out more about how and when to do this here.

To help us to establish, exercise or defend legal claims

• In more unusual circumstances, we may use your personal data to help us establish, exercise or defend legal claims

******

SUPPLIER DATA: As our Supplier we’re sure you don’t mind hearing from us, but we will only use your information:

• To store (and update when necessary) your details on our database, so that we can contact you in relation to our relationship
• To offer or to obtain services from you
• To perform certain legal obligations
• In more unusual circumstances, to help establish, exercise or defend legal claims
• We may use your personal data for the above means if we deem it necessary to do so for our legitimate interests. If you want to know more about what this means, please click here.
• If you are not happy about this, in certain circumstances you have the right to object and can find out more about how and when to do this here.

******

• PEOPLE WHOSE DATA WE RECEIVE FROM CANDIDATES AND STAFF, SUCH AS REFEREES AND EMERGENCY CONTACTS: We will only use the information that our Candidate gives us about you for the following purposes:
• If our Candidates or Staff members put you down on our form as an emergency contact, in which case we’ll contact you in case of an accident or emergency affecting them; or
• If your name and contact details were provided by a Candidate or a prospective member of Staff as a referee, we will contact you in order to take up a reference. This is an important part of our work as a Recruitment Agency to ensure we service our Clients successfully.
• If you were put down by our Candidate or a prospective member of Staff as a referee, we may sometimes use your details to contact you in relation to recruitment activities that we believe may be of interest to you, in which case we will use your data for the same purposes which we use the data of Clients. To find our more about what this means please click here
• We may use your personal data for the above means if we deem it necessary to do so for our legitimate interests. If you want to know more about what this means, please click here.
• If you are not happy about this, in certain circumstances you have the right to object and can find out more about how and when to do this here.
• Website Users: We use your data to help us understand how visitors use our site typically focused on which pages are most often visited, how long a user stays on a page and where they have come to the site from. Depending on the service you have signed up for we may also use your data for saved searches / alerts, bookmarked jobs lists, CV file, and so on.

If you want to find out more about cookies, including how we use them and what choices are available, please click here.

*******************

WHO DO WE SHARE YOUR PERSONAL DATA WITH?

• Where appropriate and in accordance with local laws and requirements, we may share your personal data, in various ways and for various reasons, with the following categories of people.
• Individuals and organisations who hold information related to your reference or application to work with us, such as current, past or prospective employers and employment and recruitment agencies;
• Authorities when we believe in good faith that the law or other regulation requires us to share this data (for example HMRC or in connection with any anticipated litigation);
• Third party service providers who perform functions on our behalf (for example professional advisers such as lawyers, accountants or auditors and technical support functions).
• Third party outsourced IT and our Payroll and Compliance provider Engage https://www.engagetech.com/ where we have an appropriate processing agreement (or similar protection) in place.
• With regards to Candidates: potential employers and other recruitment agencies / organisations to increase your chances of finding employment;
• With regards to Candidates: MSP suppliers as part of our MSP Programmes;
• In the case of Candidates and prospective members of Staff referees: third parties who we have retained to provide services such as reference, qualification and criminal convictions checks, to the extent that they are appropriate and in accordance with local laws.
• If Clearglen LTD t/a CG Consultants merges or is acquired by another business or company in the future, (or is in meaningful discussions about such a possibility) we may share your personal data with the (prospective) new owners of the business or company.

*******************

HOW DO WE SAFEGUARD YOUR PERSONAL DATA?

• We are committed to taking all reasonable and appropriate steps to protect your personal information that we hold from misuse, loss, or unauthorised access. We do this by having in place technical and organisational measures in place and by seeking to improve Staff awareness at all opportunities.
• If you suspect any misuse or loss of or unauthorised access to your personal information, please let us know immediately. To get in contact with us please contact us.

HOW LONG DO WE KEEP YOUR PERSONAL DATA FOR?

• We will seek consent to hold your personal data on our system if we have not had meaningful contact with you (or where appropriate the company you are working for or with) for five years
• If we do not receive your consent, after a short period of time we will delete your personal data from our system (unless we believe in good faith that the law or relevant regulators require us to preserve your data). After this period and without your consent, it is possible that the data will no longer be relevant for the purposes for which is was collected
• For those Candidates whose services are provided via a third-party company or other entity, ‘meaningful contact’ with you means meaningful contact with the company or entity which supplies your services. Where we are notified by such company or entity that it no longer has a relationship with you, we will retain your data for no longer than five years from that point at which point if we have not had any meaningful contact with you in the interim period we will seek your consent to hold your data as above.
• When we refer to ‘meaningful contact’ we mean, for example, communication between us (either verbal or written). If you are a Candidate, we will consider meaningful contact with you if you submit your updated CV to use via our website or some other means. We will also consider it meaningful contact if we you communicate with us about potential roles or just to update us on your situation either by verbal or written communication.
• Website Users – If you register / have registered we will seek your consent to continue storing your personal data. Any information you supply may be retained until you update / remove your details. Please refer our ‘How you can manage your personal data?’ section for more details about how to manage this data

*******************

HOW CAN YOU ACCESS, AMEND OR TAKE BACK THE PERSONAL DATA THAT YOU HAVE GIVEN TO US?

• One of the GDPR’s main objectives is to protect and clarify the rights of EU citizens and individuals in the EU with regards to data privacy. This means that you retain various rights in respect of your data, even once you have given it to us. These are described in more detail below.
• To get in touch about these rights, please contact us . We will seek to deal with your request without undue delay, and in any event within one month (subject to any extensions to which we are lawfully entitled). Please note that we may keep a record of your communications to help us resolve any issues which you raise.
• Right to object:this right enables you to object to us processing your personal data where we do so for one of the following four reasons: (i) our > legitimate interests; (ii) to enable us to perform a task in the public interest or exercise official authority; (iii) to send you direct marketing materials; and (iv) for scientific, historical, research, or statistical purposes.
• The “legitimate interests” and category above is the most likely to apply to our Website Users, Candidates, Clients and Suppliers as we do not engage in any direct marketing currently. If your objection relates to us processing your personal data because we deem it necessary for your legitimate interests, we must act on your objection by ceasing the activity in question unless:
  • we can show that we have compelling legitimate grounds for processing which overrides your interests; or
  • we are processing your data for the establishment, exercise or defence of a legal claim.
• Right to withdraw consent:Where we have obtained your consent to process your personal data for certain activities you may withdraw this consent at any time and we will cease to carry out the particular activity that you previously consented to unless we consider that there is an alternative reason to justify our continued processing of your data for this purpose in which case we will inform you of this condition.
• Data Subject Access Requests (DSAR):You may ask us to confirm what information we hold about you at any time, and request us to modify, update or delete such information. We may ask you to verify your identity and for more information about your request. If we provide you with access to the information we hold about you, we will not charge you for this unless your request is “manifestly unfounded or excessive”. If you request further copies of this information from us, we may charge you a reasonable administrative cost where legally permissible. Where we are legally permitted to do so, we may refuse your request. If we refuse your request we will always tell you the reasons for doing so.
• Right to erasure:You have the right to request that we erase your personal data in certain circumstances. Normally, the information must meet one of the following criteria:
  • the data are no longer necessary for the purpose for which we originally collected and / or processed them;
  • where previously given, you have withdrawn your consent to us processing your data, and there is no other valid reason for us to continue processing;
  • the data has been processed unlawfully (i.e. in a manner which does not comply with the GDPR);
  • it is necessary for the data to be erased in order for us to comply with our legal obligations as a data controller; or
  • if we process the data because we believe it necessary to do so for our legitimate interests, you object to the processing and we are unable to demonstrate overriding legitimate grounds for our continued processing.
    • We would only be entitled to refuse to comply with your request for one of the following reasons:
  • to exercise the right of freedom of expression and information;
  • to comply with legal obligations or for the performance of a public interest task or exercise of official authority;
  • for public health reasons in the public interest;
  • for archival, research or statistical purposes; or
  • to exercise or defend a legal claim.
• When complying with a valid request for the erasure of data we will take all reasonably practicable steps to delete the relevant data.
• Right to restrict processing:You have the right to request that we restrict our processing of your personal data in certain circumstances. This means that we can only continue to store your data and will not be able to carry out any further processing activities with it until either: (i) one of the circumstances listed below is resolved; (ii) you consent; or (iii) further processing is necessary for either the establishment, exercise or defence of legal claims, the protection of the rights of another individual, or reasons of important EU or Member State public interest.
• The circumstances in which you are entitled to request that we restrict the processing of your personal data are:
  • where you dispute the accuracy of the personal data that we are processing about you. In this case, our processing of your personal data will be restricted for the period during which the accuracy of the data is verified;
  • where you object to our processing of your personal data for our legitimate interests. Here, you can request that the data be restricted while we verify our grounds for processing your personal data;
  • where our processing of your data is unlawful, but you would prefer us to restrict our processing of it rather than erasing it; and
  • where we have no further need to process your personal data but you require the data to establish, exercise, or defend legal claims.
    • If we have shared your personal data with third parties, we will notify them about the restricted processing unless this is impossible or involves disproportionate effort. We will, of course, notify you before lifting any restriction on processing your personal data.
    • Right to rectification:You also have the right to request that we rectify any inaccurate or incomplete personal data that we hold about you. If we have shared this personal data with third parties, we will notify them about the rectification unless this is impossible or involves disproportionate effort. Where appropriate, we will also tell you which third parties we have disclosed the inaccurate or incomplete personal data to. Where we think that it is reasonable for us not to comply with your request, we will explain our reasons for this decision.
    • Right of data portability:If you wish, you have the right to transfer your personal data between data controllers. In effect, this means that you are able to transfer your CG Consultants account details to another online platform. To allow you to do so, we will provide you with your data in a commonly used machine-readable format that is password-protected so that you can transfer the data to another online platform. Alternatively, we may directly transfer the data for you. This right of data portability applies to: (i) personal data that we process automatically (i.e. without any human intervention); (ii) personal data provided by you; and (iii) personal data that we process based on your consent or in order to fulfil a contract.
    • Right to lodge a complaint with a supervisory authority:You also have the right to lodge a complaint with your local supervisory authority.
    • If you would like to exercise any of these rights, or withdraw your consent to the processing of your personal data (where consent is our legal basis for processing your personal data), details of how to contact us can be found here. Please note that we may keep a record of your communications to help us resolve any issues which you raise.
    • If you have registered on our website and have set up for job alerts, you may ask to unsubscribe from job alerts at any time. Details of how to do so can be found here.
    • It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during the period for which we hold your data.

********************************

WHO IS RESPONSIBLE FOR PROCESSING DATA ON THE CG CONSULTANTS WEBSITE?  

• CG Consultants are the data processors and controllers and as such our management and selected employees may have access to your details, as governed by our data access restrictions. Our technology partner may also need to access your details to provide technical support in some circumstances. But this access is strictly controlled and limited, and your data will not be accessed or used beyond the scope of providing essential maintenance and technical support.

********************************

COOKIES POLICY HOW WE USE COOKIES

We use a number of different cookies on our site. If you do not know what cookies are, or how to control or delete them, then we recommend you visit http://www.aboutcookies.org for detailed guidance. The list below describe the cookies we use on this site and what we use them for. Currently we operate an ‘implied consent’ policy which means that we assume you are happy with this usage. If you are not happy, then you should either not use this site, or you should delete the cookies having visited the site, or you should browse the site using your browser’s anonymous usage setting (called “Incognito” in Chrome, “InPrivate” for Internet Explorer, “Private Browsing” in Firefox and Safari etc.) HOW TO DISABLE COOKIES All modern browsers allow you to change your cookie settings. These settings will typically be found in the ‘options’ or ‘preferences’ menu of your browser. In order to understand these settings, the following links may be helpful, otherwise you should use the ‘Help’ option in your browser for more details. Cookie settings in Internet Explorer Cookie settings in Firefox Cookie settings in Chrome Cookie settings in Safari

FIRST PARTY COOKIES

These are cookies that are set by this website directly. Google Analytics: We use Google Analytics to collect information about visitor behaviour on our website. Google Analytics stores information about what pages you visit, how long you are on the site, how you got here and what you click on. This Analytics data is collected via a JavaScript tag in the pages of our site and is not tied to personally identifiable information. We therefore do not collect or store your personal information (e.g. your name or address) so this information cannot be used to identify who you are. You can find out more about Google’s position on privacy as regards its analytics service at http://www.google.co.uk/intl/en/analytics/privacyoverview.html

THIRD PARTY COOKIES

These are cookies set on your machine by external websites whose services are used on this site. Cookies of this type are the sharing buttons across the site allow visitors to share content onto social networks. Cookies are currently set by **LinkedIn, Twitter, Facebook and Google+. In order to implement these buttons, and connect them to the relevant social networks and external sites, there are scripts from domains outside of our website. You should be aware that these sites are likely to be collecting information about what you are doing all around the internet, including on this website. You should check the respective policies of each of these sites to see how exactly they use your information and to find out how to opt out, or delete, such information.

SESSION COOKIES

We use a session cookie to remember your log-in details for you. These we deem strictly necessary to the working of the website. If these are disabled then various functionality on the site will be broken, including the ability to log-in.

FLASH COOKIES

Flash cookies may be used to store user preferences for media player functionality and without them some flash content may not render correctly.

********************************

OUR LEGAL BASIS FOR PROCESSING YOUR DATA

LEGITIMATE INTERESTS

• Article 6(1)(f) of the GDPR is the one that is relevant here – it says that we can process your data where it “is necessary for the purposes of the legitimate interests pursued by [us] or by a third party, except where such interests are overridden by the interests or fundamental rights or freedoms of [you] which require protection of personal data.”
• We don’t think that any of the following activities prejudice individuals in any way – in fact, they help us to offer you a more tailored, efficient service. However, you do have the right to object to us processing your personal data on this basis. If you would like to know more about how to do so, please click here
• CANDIDATE DATA:
  • We think it’s reasonable to expect that if you have sent your CV to us, are looking for an assignment or have posted your CV information onto a job board or professional networking site, you are happy for us to collect and otherwise use your personal data to offer or provide our recruitment services to you, share that information with prospective employers and assess your skills against our selection of vacancies.
  • Once it’s looking like you may be offered a position, your prospective employer may also want to check any information you’ve given us (e.g. results from psychometric evaluations or skills tests) or to confirm your references, qualifications and criminal record, to the extent that this is appropriate and in accordance with local laws. We have to do these things so that we can function as a successful profit-making business, and to help you and other Candidates get the jobs you deserve.
  • We need to make sure our business runs smoothly, so that we can carry on providing services to Candidates like you. We therefore also need to use your data for our internal administrative activities, like payroll and invoicing where relevant.
  • We have our own obligations under the law, which it is a legitimate interest of ours to insist on fulfilling. If we believe in good faith that it is necessary, we may therefore share your data in connection with crime detection, tax collection or actual or anticipated litigation.
• CLIENT DATA
  • To ensure that we provide you with the best service possible, we store your personal data and / or the personal data of individual contacts at your organisation as well as keeping records of our conversations, meetings, interviews, registered jobs and placements. From time to time, we may also ask you to undertake a customer feedback survey / questionnaire. We think this is reasonable and we deem these uses of your data to be necessary for our legitimate interests as an organisation providing recruitment services to you.
• SUPPLIER DATA: We do need to use and store the personal data of individuals within your organisation to make sure that our relationship runs smoothly and to facilitate the receipt of services from you. We will hold financial details so that we can pay you for your services. We deem these activities to be within our legitimate business interest as a recipient of your services.

******

• PEOPLE WHOSE DATA WE RECEIVE FROM CANDIDATES AND STAFF, SUCH AS REFEREES AND EMERGENCY CONTACTS:
• If you have been put down by a Candidate or a prospective member of Staff as one of their referees, we use your personal data in order to contact you for a reference. This is a part of our vetting procedure and so we deem this to be necessary for our legitimate interests as an organisation offering recruitment services and employing people ourselves.
• If a Candidate or Staff member has given us your details as an emergency contact, we will use these details to contact you in the case of an accident or emergency. We deem these activities to be within our legitimate business interest.

********************************

• CONSENT
• In certain circumstances, we are required to obtain your consent to the processing of your personal data in relation to certain activities. In relation to recruitment activities we will seek consent to store and process your data whereby we no longer believe we have a legitimate business interest.
• Article 4(11) of the GDPR states that (opt-in) consent is “any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.” This means that:
• you have to give us your consent freely, without us putting you under any type of pressure;
• you have to know what you are consenting to – so we’ll make sure we give you enough information;
• you need to take positive and affirmative action in giving us your consent – we’re will provide a yes or no option. If you say no, within a reasonable time period your data will be deleted from our database.

We will keep records of the consents that you have given in this way.

• As we have mentioned, you have the right to withdraw your consent to these activities. You can do so at any time, and details of how to do so can be found below in Annex 1.

ESTABLISHING, EXERCISING OR DEFENDING LEGAL CLAIMS

• Sometimes it may be necessary for us to use your personal data to help us establish, exercise or defend legal claims. Article 9(2)(f) of the GDPR allows this where the processing “is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity”.

ANNEX 1 – HOW TO CONTACT US

You can write to us at the following address: Clearglen LTD, t/a CG Consultants, 151 Frimley Road, Camberley, Surrey, GU15 2PS Alternatively, you can send us an email to hello@cgconsultants.com You can get in touch with us:

• With your comments or suggestions concerning our Privacy Policy
• To access, amend or take back your personal data you have given us
• If you suspect misuse or loss of or unauthorised use of your personal data
• To withdraw your consent on the processing of your personal data (where consent is the legal basis on which we process your personal data)

GLOSSARY OR TERMS

• Candidates – includes applicants for all roles advertised or promoted by CG Consultants, including permanent, part-time and temporary positions and freelance roles with CG Consultants ‘Clients; as well as people who have supplied a speculative CV to CG Consultants not in relation to a specific job. Individual contractors, freelance workers and employees of suppliers or other third parties put forward for roles with CG Consultants, Clients as part of an MSP offering or otherwise will be treated as Candidates for the purposes of this Privacy Policy.
• Clients– while it speaks for itself, this category covers our customers, Clients, and others to whom CG Consultants provides services in the course of its business.
• Delete– while we will endeavour to permanently erase your personal data once it reaches the end of its retention period or where we receive a valid request from you to do so, some of your data may still exist within our systems, for example if it is waiting to be overwritten. For our purposes, this data has been put beyond use, meaning that, while it still exists on an archive system, this cannot be readily accessed by any of our operational systems, processes or Staff.
• General Data Protection Regulation (GDPR)– a European Union statutory instrument which aims to harmonise European data protection laws. It has an effective date of 25 May 2018, and any references to it should be construed accordingly to include any national legislation implementing it.
• Managed Service Provider (MSP) programmes– Clients‘ outsourcing of the management of external staff (including freelance workers, independent contractors and temporary employees) to an external recruitment provider.
• Other people whom CG Consultants may contact– these may include Candidates‘ and CG Consultants’ Staff emergency contacts and referees. We will only contact them in appropriate circumstances.
• Staff– includes employees or temporary workers (or those who have accepted an offer to be engaged by CG Consultants either permanently or temporarily). For these purposes we also include employees of CG Consultants who are engaged to work on Clients‘ premises under the terms of MSP Independent contractors and consultants performing services for CG Consultants fall within the definition of a ‘Supplier’ for the purposes of this Privacy Policy.
• Suppliers– refers to partnerships and companies, independent contractors and freelance workers, who provide services to CG Consultants. In certain circumstances CG Consultants will sub-contract the services it provides to Clients to third party suppliers who perform services on CG Consultants behalf. In this context, suppliers that are individual contractors, freelance workers, or employees of suppliers will be treated as Candidates for data protection purposes. Please note that in this context, CG Consultants requires Suppliers to communicate the relevant parts of this Privacy Policy (namely the sections directed at Candidates) to their employees.
• Website Users– anyone who accesses the CG Consultants websites.