Updated: 22/05/18
EyeSpy Recruitment (Gibraltar) Limited (company number 115329) ("EyeSpy") is committed to protecting the privacy of our candidates, clients and users of our website. We want to provide a safe and secure user experience. We will ensure that the information you submit to us via our website or through any of our offices is only used for the purposes set out in this policy.
The Information We Collect and How We Use It
Candidate details
In order to provide the best possible employment opportunities that are tailored to you, we need to process certain information about you. We only ask for details that will genuinely help us to help you, such as your name, age, contact details, education details, employment history, emergency contacts, immigration status and financial information (where we need to carry out financial background checks).
Client data
We use information about you, or individuals at your organisation, in the course of providing you services such as: (i) finding Candidates who are the right fit for you or your organisation; (ii) providing you with a Managed Service Provider ("MSP") programme (or assisting another organisation to do so); and/or (iii) providing you with Recruitment Process Outsourcing ("RPO") services (or assisting another organisation to do so).
Supplier data
We need a small amount of information from our Suppliers to ensure that things run smoothly. We need contact details of relevant individuals at your organisation so that we can communicate with you. We also need other information such as your bank details so that we can pay for the services you provide (if this is part of the contractual arrangements between us).
This information is held, used and disclosed by us as follows:
- To provide our services to you;
- To maintain our business relationship, where you are a user of our website, a client or candidate;
- To enable you to submit your CV for general applications, to apply for specific jobs or to subscribe to our job alerts. Please see the separate section on your CV below which outlines additional uses and disclosures;
- To match your details with job vacancies, to assist us in finding a position that is most suitable for you and to send your personal information (including sensitive personal information) to clients in order to apply for jobs;
- To answer your enquiries;
- To direct-market products and services, advise you of news and industry updates, events, promotions and competitions, reports and other information. Where we do so, you will be able to unsubscribe from such communications;
- To fulfil contractual obligations with our clients;
- Where you are registered as a candidate on our database, your personal information may be accessible by or transferred or duplicated to our offices globally wherever they are based (e.g. in Europe, Asia, the Americas and Australasia) to enable them to provide you with recruitment services and for the purposes of business development, systems development and testing. We will notify you in the event we wish to transfer your data in order to explore job opportunities for you outside the European Economic Area (EEA) and we will give you the opportunity to withhold your consent to such transfer.
- To trusted third parties where we have retained them to provide services that you or our clients have requested, such as reference, qualification and criminal reference checking services (as required), verification of the details you have provided from third party sources, psychometric evaluations or skills tests. These third parties comply with similar and equally stringent undertakings of privacy and confidentiality as EyeSpy Recruitment;
- To third parties who perform functions on our behalf and who also provide services to us, such as professional advisors, IT consultants carrying out testing and development work on our business technology systems, research and mailing houses and function co-ordinators. These third parties comply with similar undertakings of privacy and confidentiality as EyeSpy Recruitment;
- We may also release personal information to regulatory or law enforcement agencies, if they require us to do so. We will also disclose your information where we are permitted and requested to do so by law; and
- We may also seek your consent to collect, hold, and use and disclose your personal information for any other purpose not listed above.
How do we collect your data?
Whether you are a candidate, a client or a supplier there are three main ways in which we may collect your data:
- Directly from you
- From a third party (such as a career website you have signed up to such as LinkedIn)
Where do we store your data?
We store your data:
- Within our website back office
- On our cloud database system and within its connected cloud files
- Openly available information from media online and offline
CV
We give you the option of submitting your CV via our website or by providing your CV to one of our consultants. You can do this either to apply for a specific advertised job or for consideration by our recruitment consultants for positions as they come up. Your CV will be stored in our database, and will be accessible by EyeSpy employees.
You can update your CV at any time, simply by following the same procedure to submit a new CV.
How long do we keep your information for?
We will only retain your data for as long as there is either a statutory requirement for us to do so or to be able to provide a service to you. This will usually require us to retain your personal data for a maximum of 3 years before we will require updated information from you.
How do we let you know if our policy changes?
Any policy changes, either due to business reasons or future changes in legislation, will be posted on this page.
Your rights
Right to object: If we are using your data because we deem it necessary for our legitimate interests to do so, and you do not agree, you have the right to object. We will respond to your request within 30 days (although we may be allowed to extend this period in certain cases). Generally, we will only disagree with you if certain limited conditions apply.
Right to withdraw consent: Where we have obtained your consent to process your personal data for certain activities (for example, for profiling your suitability for certain roles), or consent to market to you, you may withdraw your consent at any time.
Data Subject Access Requests: You have the right to ask us to confirm what information we hold about you at any time, and you may ask us to modify, update or Delete such information. At this point we may comply with your request or, additionally do one of the following:
- We may ask you to verify your identity, or ask for more information about your request; and
- Where we are legally permitted to do so, we may decline your request, but we will explain why if we do so.
Right to erasure: In certain situations (for example, where we have processed your data unlawfully), you have the right to request us to "erase" your personal data. We will respond to your request within 30 days (although we may be allowed to extend this period in certain cases) and will only disagree with you if certain limited conditions apply. If we do agree to your request, we will delete your data but will generally assume that you would prefer us to keep a note of your name on our register of individuals who would prefer not to be contacted. That way, we will minimise the chances of you being contacted in the future where your data are collected in unconnected circumstances. If you would prefer us not to do this, you are free to say so.
Right of data portability: If you wish, you have the right to transfer your data from us to another data controller. We will help with this – either by directly transferring your data for you, or by providing you with a copy in a commonly used machine-readable format.
Right to lodge a complaint with a supervisory authority: You also have the right to lodge a complaint with your local supervisory authority.
If you would like to make a request for information, please contact [email protected].
