42
PRIVACY NOTICE SUPPLIER THE POLICY This policy is applicable to all businesses, offices and operations within the gap personnel group www.gappersonnelgroup.com (referred to as The Company), including: � gap personnel Investments Limited – Company Reg – 8044442 – ICO – ZB066799 � gap personnel Holdings Limited (including Hawk 3 Talent) – Company Reg – 3589208 – ICO Z2057848 https://www.gappersonnel.com/ � gap technical Limited – Company Reg – 5646432 – ICO – ZA230558 https://www.gaptechnical.com/ � gap personnel (TELFORD) LTD – company Reg – 13377649 – ICO – ZB346100 https://www.gappersonnel.com/ � Quattro Recruitment Limited t/a gap personnel – Company Reg – 7131120 – ICO – ZA015243 https://www.gappersonnel.com/ � Quattro Healthcare Ltd t/a gap healthcare – Company Reg 9389534 – ICO – ZA127351 https://www.gaphealthcare.com/ � Driving Force Recruitment Limited company Reg – 06538808 – ICO Z1709668 https://www.drivingforce.co.uk/ The Company is a recruitment business which provides workfinding, recruitment, training and related services to its clients and workseekers. The Company must process personal data so that it can receive these services – in doing so, the Company acts as a data controller. We will only use your personal data in accordance with the terms outlined in our contracts and our privacy notice. 1. COLLECTION AND USE OF PERSONAL DATA The Company engages many suppliers for the purposes of effectively running The Company and providing its’ services to its’ customers. As a result of supplying The Company, The Company must process personal data so that it can receive these services – in doing so, the Company acts as a data controller. The Company will collect your personal data and process your personal data, which may include sensitive data, for the purposes of receiving your services. In some cases we may be required to use your data for the purpose of investigating, reporting and detecting crime and also to comply with laws that apply to us. We may also use your information during the course of internal audits to demonstrate our compliance with certain industry standards. 1.1 COLLECTION OF DATA The Company will collect your personal data via a number of routes, including but not limited to the methods detailed below: a) You may give your personal details to the company directly, such as by seeking to provide services to us; or, b) In some circumstances, your personal details may have been provided to us by another person in your company in order to offer and / or perform a contractual obligation between your company and The Company; c) We may collect personal data on your visits to our website including, but not limited to, your IP address, browser, timestamp, content from surveys and contact forms and other communication data and the resources that you access. d) Your details may have been identified via publicly available sources in relation to services you provide (e.g. LinkedIn or your company website). e) We may collect data from interactions you conduct with our social media platforms, including but not limited to posts, likes, comments, shares, tags and direct messages. This data may be utilised within the social media platforms themselves and may at times be required to be transferred to our internal databases and CRM systems, for the purposes of demographics, trackers for targeted advertising and recording and reporting systems e.g where you have entered and won a competition. In any case the Company must have a legal basis for processing your personal data, which may include sensitive data. We will only use your personal data in accordance with the terms of a contract and our privacy notice. 1.2 PURPOSE OF PROCESSING AND LEGAL BASES The legal bases we rely upon when providing and/or offering to provide these services to you are: Legal base Example of purpose Legal obligation To comply with law e.g. HMRC and Tax legislation, Fraud prevention. Contractual obligation
To perform a contract between The Company and you / your company To assist us / you/your company to establish / exercise or defend legal claims.
Legitimate interest
For marketing and public relations in relation to our services;
Consent
Where we have explicitly obtained your consent to share your data with other potential suppliers e.g. to provide a testimonial and/or reference about our service provision
Public interest
Does not apply
Vital interest of data subject
Does not apply
To improve the services we offer and provide including workfinding, recruitment, training and related services.
1.3 RECIPIENTS/S OF DATA Where we need to share your personal and/or sensitive data, we have contracts and data sharing agreements in place with the recipients that require them to treat your information as confidential and ensure the continued protection of your data whilst in their possession. The Company will process your personal data and/or sensitive date, with the following recipients:
gap personnel Holdings Limited – CR 03589208 – GLAA – CAST0004 gap technical Limited – CR 5646432 Quattro Recruitment Limited – CR 7131120 – GLAA – QUAT0001 Talent Invest Limited – CR – 05104902
gap personnel Investments Limited – CR – 8044442 Quattro Group Holdings Limited – CR 9508069 Quattro Healthcare Limited – CR – 09389534 gap personnel (Telford) Limited – 13377649 – GLAA – GAPP0008