Marcus Donald People Limited
Privacy notice for Candidates
Marcus Donald People Ltd is committed to respecting your privacy and providing quality services to you. This notice outlines our ongoing obligations to you in respect of how we manage your personal information.
Who we are?
Marcus Donald People Ltd specialise solely in the Information Technology sector; supplying permanent and contract IT staff across the UK, mainland Europe and the United States of America.
Marcus Donald is a trading name of Marcus Donald People Ltd that is registered in United Kingdom and is registered with the Information Commissioner's Office. The data controller is: Marcus Donald People Ltd. Marcus Donald will ensure that all the information submitted via its website or through our office is only used for the purposes explained in this privacy notice and is compliant with the General Data Protection Regulation (GDPR).
You can contact us in any of the following ways:
Email: lets_talk@marcusdonald.com
Phone: 0203 328 0400
Website: www.marcusdonald.com
Post: 60 Cannon Street, EC4N 4NP
What is personal data?
Personal data is the data that relates to a living individual who can be identified from this data or other information which is in possession of, or is likely to come into the possession of, the data controller. This also includes sensitive personal data which consists of information regarding race or ethnic origin, political opinions, religious beliefs, trade union membership, physical or mental health, sexual orientation and criminal records.
Sensitive data will only be used:
– with explicit written consent;
– where it is needed to establish, bring or defend legal claims;
– where needed to carry out our legal obligations relating to employment law, social security law or social protection law; and
– where it is needed to assess working capacity on health grounds, subject to appropriate confidentiality safeguards.
What data do we collect?
- Name
- Telephone numbers
- Address
- Cover letter
- CV
- Education and employment history, qualifications and skills
- Passport, visa or other right to work or identity information
- National insurance and tax information
- Bank details
- Next of kin details
- Referee contact details
- Information from references and pre-employment checks from third parties
- Marketing preferences
- DBS (if required)
- Sensitive personal data (explained above)
Where do we collect your data from?*
- Our website
- You (application or registration form, CV)
- Online jobsites
- A client
- Other candidates
- Social Media
- Marketing databases
- Search engines
- Telephone calls
*This list is not exhaustive
Why we need your data?
- To collect, store and process it
- To assess and review your suitability for job roles
- To provide recruitment services to you and to facilitate the recruitment process
- To inform you, by email or telephone, of job opportunities or contract assignments that may be of interest to you
- To market our recruitment services
- To allow details of your skills and experience, to be viewed by our clients whom we feel may be interested in engaging your services. This will only be done if you have given your consent to us to do so
- To send information to third parties which relate to our recruitment services
- To carry out our obligations arising from any contracts entered into between you and us
- To notify you of any changes to our services
- To provide information to regulatory authorities or statutory bodies
- From time to time we may seek your consent to process, use or disclose your information for any other purpose not listed above
Our lawful basis to process your data is our legitimate interests and also consent, contract and legal obligation for more specific cases.
- Legitimate interests– in order to provide our services, the processing of your data is necessary for our and third parties’ legitimate interests. We may use your data for assessing your suitability for job roles; contacting you regarding our services and job opportunities.
- Consent– in order to process your data for some cases, we may need your consent. Such cases are when you apply for a role and agree to for us to process your data in order to assess your suitability and progress your application or when you consent to receive direct marketing or other services. You may withdraw your consent at any time.
- Contract– in order to provide our services, we may enter into a contract with you and/or a third party. To do so, certain information is needed from you such as your name and address. The contract may include us processing your data for payroll on your behalf.
- Legal obligation– in order to provide our services, sometimes we may need to process personal data and, where appropriate and in accordance with local laws and requirements, sensitive personal data to exercise or defend legal claims. We must comply with statutory provisions that include payroll, tax, social security, HMRC reporting requirements, and any other law or regulation. It also applies to the business generally when complying with fraud/crime prevention, data protection legislation and co-operating with regulatory authorities such as Information Commissioner’s Office or HMRC.
Third parties:
Where reasonable and practicable to do so, we will collect your personal data only from you. However, in some circumstances we may be provided with information by third parties. In such a case we will take responsible steps to ensure that you are made aware of the information provided to us by the third party.
Data transfer:
To provide our recruitment services we may transfer your personal data outside the United Kingdom (UK). Marcus Donald wants to make sure that your data is stored and transferred in a secure way, therefore we will only transfer your data where it is compliant with data protection legislation in accordance with GDPR. If this is not the case, it is our policy to take steps to identify risks and ensure that appropriate safeguards are in place.
Security of personal data
Your personal data is stored in a manner that reasonably protects it from misuse and loss and from unauthorised access, modification or disclosure. When your personal data is no longer required for the purpose for which it was obtained, we will take reasonable steps to destroy or permanently de-identify your personal data.
Maintaining the quality of your personal data
It is important to us that your personal data is up-to-date. We will take reasonable steps to make sure that your personal data is accurate, complete and up-to-date. If you find that the information we have is inaccurate, please advise us as soon possible so we can update our records and ensure we can continue to provide quality services to you.
Data retention:
Your data will be stored for up to 6 years to ensure we have records of service, payments, and other interactions we have with you.
In order to provide our services to you, we use recognised third parties to take payment, manage timesheets, conduct credit reports and other checks, manage our company accounts and provide banking services. We will store transactions, payment and order data for up to 6 years or for as long as required by UK financial and company regulations. These third parties may operate outside the UK, if this is the case we will ensure precautions are in place to protect your data.
Your rights:
- Right to be informed about the collection and use of your personal data.
- Right to access your personal data and supplementary information. If you would like to make a request for information, please contact consent@marcusdonald.com.
- Right to rectification when your data is inaccurate or incomplete. We will respond to such a request within 1 month.
- Right to erasure where there is no compelling reason for personal data to be further processed. Agencies are required to keep certain records such as ID or right to work checks and payroll records for certain periods of time. These obligations will override any request to erase data or any objection to processing for so long as they must keep the data.
- Right to restrict processing of your personal data in certain circumstances.
- Right to data portability when you want to obtain and reuse your personal data across different services.
- Right to object of your data where that processing is based upon legitimate interest and there are no compelling grounds for the continued processing of that data;
- Object to our processing of your data where that processing is based upon legitimate interest and there are no compelling grounds for the continued processing of that data; any decision, which significantly affects you, being taken solely by a computer or via another automated process; direct marketing.
- Withdraw your consent to our processing of your personal data for a particular purpose at any stage. However, please note that we may continue to retain, or use your personal information thereafter where we have a legitimate interest or a legal or contractual obligation to do so. Our processing in that respect will be limited to what is necessary in furtherance of those interests or obligations. Consent can be withdrawn by emailing to consent@marcusdonald.com.
- Make a complaint or enquiry to our EU Representative.
- Make a complaint to the Information Commissioner’s Office.
Should you wish your personal data to be removed from our database earlier, please email us on unsubscribe@marcusdonald.com.
Changes to our privacy notice:
We keep our privacy notice under regular review and may be updated from time to time to reflect changes in our business, or legal or commercial practice. Where an update is relevant to our processing of your data, we shall notify you of the same.
Complaints:
If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law you can complain to us by emailing to: consent@marcusdonald.com or the Information Commissioner’s Office (ICO).
Contact:
Should there be any queries, please do not hesitate to contact us at: consent@marcusdonald.com or by writing to:
Data Controller
Marcus Donald People Ltd
60 Cannon Street
London
EC4N 4NP
Should you wish to speak to our EU Representative, please do not hesitate to contact them at: contact@gdprlocal.com or by writing to:
Adam Brogden
INSTANT EU GDPR REPRESENTATIVE LTD
Office 2
12A LOWER MAIN STREET
LUCAN CO. DUBLIN
K78 X5P8
IRELAND
