Blue Personnel Ltd Data Processing Policy
GDPR has replaced the data privacy law, giving more rights to you as an individual; we are committed to safeguarding the privacy our customers, individuals and other website visitors. This privacy notice explains how we handle your personal data.
How we use your information
This privacy notice tells you what to expect when Blue Personnel Limited collects personal information. It applies to information we collect about:
Visitors to our websites
People who email us
Blue Personnel will monitor any emails sent to us, including file attachments, for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.
Suppliers and customers: Blue Personnel require a small amount of information from our suppliers and customers to ensure that things run smoothly. We need contact details of relevant individuals at your organisation so that we can communicate effectively. We also require information such as your bank details so that we can pay for the services you provide (if this is part of the contractual arrangements between us).
People who use our services, e.g. consultants or candidates who apply for employment/project roles/contract opportunities or send their CVs to us speculatively
We will not share any of the information you provide during the recruitment process with any third parties for marketing purposes or store any of your information outside of the European Economic Area. The information you provide will be held securely by us and/or our data processors.
We will use the contact details you provide to us to contact you to progress your application or for further suitable opportunities. We will use the other information you provide to assess your suitability for the role you have applied for.
What information do we ask for, and why?
If we make a conditional offer of employment or offer of engagement, we will ask you for information so that we can carry out pre-employment/engagement checks. You must successfully complete pre-employment/engagement checks to progress to a final offer. We are required to confirm the identity of our staff, their right to work in the United Kingdom and seek assurance as to their trustworthiness, integrity and reliability.
You will therefore be required to provide:
For opportunities involving a corporate to corporate relationship, we will also ask for details of your limited company; this does not constitute personal data.
Upon acceptance of a position:
People whose data we receive from candidates and staff, such as referees and emergency contacts: We use referees’ personal data to align our candidates with suitable opportunities. If we can verify their details and qualifications, we can make sure that they are well matched with prospective project work or specific clients. We use the personal details of a candidate’s or staff member's emergency contacts in the case of an accident or emergency affecting that candidate or member of staff.
How long is the information retained for?
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. Details of retention periods for different aspects of your personal data are available by contacting firstname.lastname@example.org.
By law we must keep basic information about all our commercial relationships (including Contact, Identity, Financial and Transaction Data) for six years post relationship for tax or other financial reporting purposes.
In some circumstances you can ask us to delete your data (Right to Erasure) see below for further information.
Right to object: If we are using your data because we deem it necessary for legitimate interests to do so, and you do not agree, you have the right to object. We will respond to your request within 30 days (although we may be allowed to extend this period in certain cases). Generally, we will only disagree with you if certain limited conditions apply.
Right to erasure: In certain situations (for example, where we have processed your data unlawfully), you have the right to request us to "erase" your personal data. We will respond to your request within 30 days (although we may be allowed to extend this period in certain cases) and will only disagree with you if certain limited conditions apply. If we do agree to your request, we will delete your data but will generally assume that you would prefer us to keep a note of your name on our register of individuals who would prefer not to be contacted. That way, we will minimise the chances of you being contacted in the future where your data is collected in unconnected circumstances. If you would prefer us not to do this, you are free to say so.
Right of data portability: If you wish, you have the right to transfer your data from us to another data controller. We will help with this - either by directly transferring your data for you, or by providing you with a copy in a commonly used machine-readable format.
Right to lodge a complaint with a supervisory authority: You also have the right to lodge a complaint with your local supervisory authority – The Information Commissioner’s Office.
You can read more about these rights here:
How do we safeguard your personal data?
Complaints or queries
This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects collection and use of personal information. However, we are happy to provide any additional information or explanation needed.
If you want to make a complaint about the way we have processed your personal information, you can contact us to discuss your concerns. If appropriate concerns can also be raised to the Information Commissioner’s Office (ICO) in their capacity as the statutory body which oversees data protection law – www.ico.org.uk.
Access to personal information
To make a request for any personal information we may hold you need to put the request in writing
If we do hold information about you, you can ask us to correct any mistakes.
Disclosure of personal information
Changes to this privacy notice
How to contact us