Cpl Resources Plc, as Data Controller, is committed to protecting all personal and special categories of data held on you. This Data Protection Notice sets out the foundation on which all personal data that Cpl Resources plc and/or its subsidiary companies (the “Cpl Group”) collect from you, the “data subject”, or that you provide to us via several sources will be processed by us. We also want you to be clear as to what rights you can invoke to help you to protect your privacy. In this regard, it is important that you read this Data Protection Notice and understand our use of your personal data. Please note that we reserve the right to update this Data Protection Notice as required.
What do we use your personal data for?
Cpl will only process information that is necessary for the purpose for which it has been collected. We collect your personal data for any of the following purposes:
|Purpose||Description||Lawful Basis for Processing|
|Recruitment services||For data subjects who are candidates, we may use your personal data for the following activities:
· Evaluate your data against client roles which Cpl may have that we determine may be suitable for you;
· With your permission, send your personal data to Cpl clients to assess your eligibility for client roles;
· Submit your CV to apply online for jobs; and
· Communicate with you about job opportunities, provide career guidance and support.
|The processing is necessary for legitimate interests pursued by the Data Controller.
Data subjects have given consent to the processing of their personal data.
|Cpl Client data (Client being organisation using Cpl recruitment services)||Personal data belonging to employees of CPL clients may be processed by us in order to provide the requested services.||Processing is necessary for the performance of contract.
Data subjects have given consent to the processing of their personal data.
|Third party sharing||To allow us to conduct and carry out functions with third party service providers that enable us to deliver our services.||Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.|
|Marketing||Cpl will use your personal data to support you in your career guidance and communicate with you directly with useful information, advice, and support materials through email, messaging, or mobile/web notification.||Data subjects have given explicit consent to the processing.|
Who do we share your personal data with?
We may share personal data with other parties (e.g. clients) in the course of our duties. When this is done, we adhere to the following principles:
- The transfer is based on a legal obligation, the performance of a contract, or explicit consent.
- Where data is transferred to another party, we ensure appropriate technical and organisational safeguards are used to protect your personal data.
- Where we engage a third party to provide a service to us, we ensure the provider has taken appropriate technical and organisational measures to process, store, and safeguard your personal data.
International Data Transfer
The information that you have provided to us may be made available to personnel working in the Cpl Group, our affiliate companies, our clients, and the third parties as set out above. Your personal data is wholly stored and processed within the European Economic Area (EEA).
Where your personal information is required to be sent outside the European Economic Area, we will contact you for your permission prior to the disclosure of your personal information. In the event that we need to transfer your personal information outside the European Economic Area we will take the appropriate steps to guarantee that your privacy rights continue to be protected as detailed in this Data Protection Notice.
How long do we retain your personal data?
Cpl will only collect your personal data for as long as it is required to provide the requested services and will delete/retain your personal data in an identifiable format for longer than is necessary.
Data breaches and how to make a notification
We take appropriate technical and organisational steps to safeguard your personal data and will notify the Data Protection Commission of data breaches where a risk is identified, not later than 72 hours from awareness.
When the personal data breach is likely to result in a high risk to your rights and freedoms, Cpl will communicate to you in clear and plain language the personal data breach without undue delay.
Security of your personal data
We are committed to the protection of Personal Data submitted to us. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. We use a variety of security technologies and procedures to help protect your personal information from unauthorised access, use, or disclosure. While the Cpl Group takes all due care in ensuring the privacy and integrity of the information that you provide, we recognise that no data transmission over the Internet can be guaranteed to be 100% secure. The possibility exists that this information could be unlawfully observed by a third party while in transit over the Internet. Cpl Croup Limited accepts no liability should this occur.
What are your rights?
Unless any restrictions apply, you have the following rights in relation to your personal data to exercise:
- Right of confirmation
You have the right to obtain from Cpl the confirmation as to whether or not personal data which concerns you is being processed.
- Right of access
You have the right to obtain from Cpl information about your personal data processes at any time and a copy of such information.
- Right to rectification
You have the right to obtain from Cpl the rectification of inaccurate personal data held on you.
- Right to erasure (Right to be forgotten)
You have the right to request from Cpl the erasure of personal data held on you.
- Right of restriction of processing
You have the right to request from Cpl restriction of processing of personal data held on you. The accuracy of the personal data is contested by the stakeholder, for a period enabling the controller to verify the accuracy of the personal data.
- Right to data portability
You have the right to receive the personal data held on you, which was provided to Cpl, in a structured, commonly used and machine-readable format.
- Right to object
You have the right to object, on grounds relating to your particular situation, at any time, to processing of personal data held on you.
- Right to withdraw the consent
You have the right to withdraw the consent at any time in some circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time
You may execute any of the above rights by contacting us by email to email@example.com or in writing to:
8-34 Percy Place
t: +353 1 614 6000
f: +353 015 227 338
Data Protection Officer
We have appointed a Data Protection Officer (“DPO”) to oversee compliance with this policy. You may, at any time, contact our DPO directly with all questions and suggestions concerning data protection. All enquiries on data protection matters should be directed by email to: firstname.lastname@example.org
Changes to Data Protection Notice
Our Data Protection Notice may change from time to time and any changes to the statement will be communicated to you by way of an e-mail or a notice on our website.