GDPR Privacy Notice. Last updated January 2022.
This Privacy Notice (“Notice”) describes how KSR collects and uses your Personal Data in accordance with the EU General Data Protection Regulation (“GDPR”). It tells you what Personal Data KSR collects, why we need it, how we use it and what protections are in place to keep it secure.
“KSR” “we” “us” and “our” mean Kenmore Sloane Recruit Ltd, a company incorporated in England and Wales under company number 11747498 and whose registered office address is at The Old Barn, Wood Street, Swanley, England, BR8 7PA.
“KSR Personnel” means KSR’s prospective, present and past partners, employees, consultants and agency staff, and people connected to such persons.
“Personal Data” means information about you and from which you could be identified.
KSR is the Data Controller in relation to your Personal Data and is committed to protecting your privacy rights.
Data Protection Manager
4.1 KSR is not required under the GDPR to appoint a Data Protection Officer and, following a detailed analysis does not consider it appropriate to do so on a voluntary basis. KSR has, however, appointed a Data Protection Manager, (“DPM”) who is responsible for overseeing KSR’s compliance with the GDPR and any other applicable data protection legislation and regulation.
4.2 The DPM can be contacted at firstname.lastname@example.org or at the correspondence address for KSR set out above.
How does KSR obtain your Personal Data?
In some circumstances, we may obtain your Personal Data from you directly including through this website or the services that we provide to you. It may also be the case that we obtain your Personal Data from a third-party source. In most circumstances, you directly provide KSR with most of the data we collect.
When registering with us, all KSR Personnel will have access to your data. If you apply for a position advertised by us, the Recruiter who is working on this position will have access to it.
Personal Data about others that you provide to KSR?
We may obtain personal information about you from searching for potential candidates from third-party sources, such as LinkedIn, other job sites and social media. If you ‘follow’ our page on LinkedIn or ‘follow’ us on Twitter we will receive your personal data from those sites.
If you provide information to us about someone else you must ensure that you are entitled to disclose that information to us and that, without our taking any further steps, we may process that information in accordance with this Notice.
What Personal Data does KSR collect from and about you?
We collect data and process the data you put on your CV, and any additional information you send to us. Typically, this includes your name, contact details, including phone number, email and postal address, current and previous employers, and details of your work, skills and experience, education and qualifications. Remuneration including pension, benefits, desired salary or rate, photo identification such as a copy of driving licence and/or copy of passport.
We will then store pertinent details of our relationship which could include details such as records of interviews, opportunities we have put you forward for, information you have provided to us such as CV and copies of correspondence.
We may store further information where we have placed you which could include start and end dates.
It is not in our policy to seek sensitive personal data unless requirement for further recruitment purposes, legally required or reasonably necessary for ongoing relationship with you. If you do provide sensitive data for any reason, we accept this as your consent to use such data in ways of described in this Privacy Notice.
Why do we need to collect and use your Personal Data?
We may need to collect and use your Personal Data for a number of reasons, the primary purpose being to provide services to you which may involve the use of your Personal Data. We may also process your Personal Data for effective business management purposes. We will hold your personal data;
To be able to match you to the most suitable position according to your experience and background
We may use your personal information to contact you to discuss a suitable opportunity
We may use your data for the purpose of identification to comply with our legal obligations
What is KSR’s legal basis for processing your Personal Data?
Under the GDPR, KSR must identify a lawful basis for processing your Personal Data which may vary according to the type of Personal Data processed and the individual to whom it relates.
KSR is entitled to process the Personal Data it requires in order to fulfil its obligations to you, which may include:
To advise you of changes to our terms;
To advise you of any security concerns;
To advise you of new suitable employment opportunities; or
To protect the legitimate interests of KSR or a third-party.
KSR processes some of your Personal Data on the basis that it is in its legitimate interests and/or the legitimate interests of a third-party to do so. KSR’s legitimate business interest in such instances is the proper performance of its function as a digital recruiter.
10. Direct Marketing
We may use your contact details to send you marketing materials, provided we are permitted to do so by law. You always have the right to unsubscribe from any marketing. You can do so by clicking on the relevant link in the next email we send you, or by contacting us/the DPM directly using the details provided.
Who receives your Personal Data?
We may disclose your Personal Data to third parties (outside of KSR and KSR Personnel) if, but only when, we have a legal basis to do so.
How do we protect your Personal Data?
We take appropriate organisational and technical security measures and have rules and procedures in place to ensure that any Personal Data we hold is not accessed by anyone unauthorised to access it.
When we use third-party organisations to process your Personal Data on our behalf, they must also have appropriate security arrangements, must comply with our contractual requirements and instructions, and must ensure compliance with the GDPR and any other relevant data protection legislation.
What are your rights?
13.1 The GDPR generally affords individuals a right to access their Personal Data, to object to the processing of their Personal Data, to rectify, to erase, to restrict and to port their Personal Data.
13.2 We will, at all times, respect your Personal Data and seek to be as transparent as possible but please be aware that, in some instances, we may be restricted from even acknowledging that we process your Personal Data.
You can request full visibility of the information we have for you within one month of request, subject to our statutory rights under the GDPR. You also have the right to request removal or correction of your personal data without explanation.
How to make a complaint
If you are unhappy with the information provided in this Notice or have concerns about the way in which KSR processes your Personal Data you may in the first instance contact us at email@example.com or at the correspondence address for KSR set out above. If you remain dissatisfied, then you may apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted at: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF www.ico.org.uk