1. Information About Us
Our Site is owned and operated by Citrus Recruit, a limited registered in England and Wales under company number 15041646.
Data Protection Officer: Hannah Elson.
Email address: email@example.com.
2. What’s Your Rights?
Under the Data Protection Legislation, you have the following rights, which we will always work to uphold:
b) The right to access the personal data we hold about you. Part 6 will tell you how to do this.
c) The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete. Please contact us using the details in Part 6 to find out more.
d) The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data that we hold. Please contact us using the details in Part 6 to find out more.
e) The right to restrict (i.e. prevent) the processing of your personal data.
f) Rights relating to automated decision-making and profiling. We do not use your personal data in this way.
For more information about our use of your personal data or exercising your rights as outlined above, please contact us using the details provided in Part 6.
It is important that your personal data is kept accurate and up-to-date. If any of the personal data we hold about you changes, please keep us informed as long as we have that data.
If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office. We would welcome the opportunity to resolve your concerns ourselves, however, so please contact us first, using the details in Part 6.
3. What Personal Data We Collect and How?
On seeking new employment with Citrus Recruit, we will require your name, your email address, your address, any other contact information in some case date of birth, information to confirm your right to work in the UK and any other information which you choose to give us to support your job application. For the purposes of the Data Protection Legislation, we are the data controller responsible for such personal data. We will store your personal data on our CRM system, which is contract with a third party for hosting and data storage purposes:
The lawful basis under the Data Protection Legislation that allows us to use such information is article 6(1)(f) of the UK GDPR which allows us to process personal data when it is necessary for the purposes of our legitimate interests. If you contact us as described above, you will be required to consent to our use of your personal data to contact you. In this case, our lawful basis for using your personal data will be article 6(1)(a) of the UK GDPR, which allows us to use your personal data with your consent for a particular purpose or purposes.
4. How and Where Do You Store My Data?
Your data will be stored on a 3rd party CRM system, which we will ensure the same levels of personal data protection that apply under the Data Protection Legislation. For further information, please refer to the Information Commissioner’s Office.
Personal data security is essential to us, and to protect personal data, we take the following measures:
· limiting access to your personal data to those employees, agents, contractors, and other third parties with a legitimate need to know and ensuring that they are subject to duties of confidentiality.
· procedures for dealing with data breaches (the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, your personal data) including notifying you and/or the Information Commissioner’s Office where we are legally required to do so;
5. How Can I Access My Personal Data?
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it. This is known as a “subject access request (SAR)”.
All subject access requests should be made in writing and sent to the email addresses shown in Part 6.
There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
We will respond to your subject access request within 28 days and, in any case, not more than one month of receiving it..
6. How Do I Contact You?
To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details for the attention of Gareth Burford:
Email address: firstname.lastname@example.org.