Collection of Personal Data
You have provided us with your CV, either directly or via a jobs website, which contains personal data including your name, email address, phone number, education and employment records. We store and process this data on the basis of “legitimate interest” i.e. so that we can match your skills with job opportunities. We will email you to confirm that we have received your CV, how long we intend to store it for and how it will be processed (the right to be informed and the right of access).
Use and Sharing of Your Personal Data
We will only use your CV data for the purpose for which it was provided to us, i.e. for matching with suitable job opportunities. Your CV will not be shared outside our organisation. Unless you specify otherwise, we may share your information with any of our group companies.
Your data may be stored on hosted systems, provided by third parties (“data processors”). Any such third parties will only use your data in support of our services to you and for no other purpose. Your data will never be sold on to any third party.
Any party with whom we share your data will have provided sufficient written guarantees of their compliance with the GDPR in relation to the storage and processing of your personal data.
Duration of Storage
We will hold on to your data for as long as there is a continued legitimate interest. If we have not had meaningful contact with you for a period of 2 years, we may contact you to ascertain if there may be a renewed legitimate interest (e.g. you may be seeking a job opportunity now or in the near future) or if your data should be deleted from our systems.If we do not receive a response from you, we will remove you from our database.
Security of Your Data
Whenever we store or process your information, we will ensure that we always keep your Personal Data rights in high regard. All electronic CV data is hosted on third party servers with providers who are within the EU, are GDPR compliant and have sufficiently secure physical and technological processes in place.
Any printed data that we have is stored in a physically secure manner.
We take every measure to ensure that your data is safe. However, in the event of a data breach we will conform with the GDPR and report any breach that is likely to result in a risk to your rights and freedoms to the Data Commissioner and where the data breach is likely to result in a high risk of adversely affecting your individual rights & freedoms, the breach will be reported to you directly.
Updating or Viewing Your Data
You can send us updates relevant to the services we provide at any time so that we can keep our records up to date and accurate (the right to rectification). That might be an updated CV, employment status, contact details, etc. You can contact us at firstname.lastname@example.org or in writing to our postal address in the Contact Us section of our website.
If you want to know what data we hold about you, you can request access to that data – this is known as a Data Subject Access Request (the right of access). We will grant such requests in a timely manner and at the latest, within one month of receipt of the request. We will provide the data in a suitable format (the right to portability) In limited circumstances we may decline your request but will explain why we have declined. You will be required to identify yourself before we can grant such a request.
Removing Your Data or Restricting the Processing of Your Data
If you no longer want Allagi to keep your CV and related data (the right to erasure), we will remove it on receipt of a written request, where one of the following grounds applies:
- the personal data is no longer necessary for the purpose which we originally collected or processed it for;
- you withdraw consent previously given;
- you object to the processing of your data, and there is no overriding legitimate interest to continue this processing;
- your data is being processed for direct marketing purposes and you object to that processing;
- your data has been processed unlawfully;
- we have to delete your data to comply with a legal obligation.
You may also contact us if you wish to restrict the processing of your data in any way (the right to restrict processing).
You can write to us to request removal or restriction at email@example.com or to our postal address in the Contact Us section of our website. You will be required to identify yourself before we can grant such a request.