StaffMatters Recruitment Specialists Privacy Policy – Compliant with GDPR
May 2018
This Privacy Policy set out how StaffMatters Recruitment Specialists collects, processes and protects your personal information, in accordance with the EU General Data Protection Regulation 2016/679 (GDPR) which came into force on 25 May 2018.
We are committed to protecting your privacy – in this privacy policy, we set out how we collect your personal data, how we use it, and what rights and choices you have in relation to the personal data we hold and process.
Who decides why and how we process your personal data?
S.M. StaffMatters Recruitment Specialists Ltd, located at Corner Anexartesias & Kyriakou Matsi Limassol Tower Office 4B, 4th Floor Limassol, Cyprus (StaffMatters or we), determines why and how we process your personal data.
What information do we collect about you?
- Personal information: Information such as your name, job title, postal address, business address, telephone number, mobile number, fax number and email address.
- Payment data: Data necessary for us to process payments including bank account numbers and other relevant billing details, under the circumstances when payments are being made by us to our employees, suppliers, clients or candidates.
- Business details: Business information which we necessarily process as part of our instructions or projects we are involved in or otherwise provided by you voluntarily.
- Information specific to candidates: We may hold information on candidates such as:
- – name, city of residence, contact details (including email address and telephone numbers), date of birth, nationality.
- – details of your qualifications, skills, experience and employment history, your entitlement to work in the EU, information supplied by you during a screening process or an interview in response to the questions typically and reasonably asked during an interview, such as your reason for wishing to leave your curr Privacy Policy | StaffMatters Recruitment Specialists
ent employer, your current level of remuneration and benefits, your desired salary, your notice period, specific companies or industries that you wish to avoid, your preferred working hours;
- – personal data collected directly from candidates as well as from other available public sources to the extent relevant and permitted under the GDPR;
- – personal data such as the vacancies advertised by us for which you had applied and the date of such an application, interviews scheduled with potential employers and the result of any such interviews, and a log of all contact made between you and us, which would include telephone conversations, text messages and emails.
- Aggregated data: We may also collect aggregated personal data and statistics for the purpose of monitoring website usage in order to help us develop our website and our services.
When do we collect your personal data?
We may collect personal data about you in various cases, such as for example:
- When a client engages us to provide our services and you hold an office or an interest in or have certain relationships with that client; or
- When you or your organisation, such as a supplier, provide services to us, or otherwise offer to do so.
- When you or your organisation seek our services – i.e. to provide assistance in finding a suitable employee or a suitable employment opportunity;
- When you or your organisation make an enquiry through our website, in person, over email or over the telephone;
- When you attend an event we may organise, or sign up to receive communications from us;
- We may collect information about you from third parties in certain cases, such as references from former employers should a potential employer so require. This usually only occurs when a job offer has been made or is likely to be made. We will obtain such a reference only from a contact person supplied by you, and always with your consent.
What purpose do we collect and retain your information for?
- StaffMatters collects and retains your personal data in our capacity as a recruitment business.
- The personal data that we collect from you is integral to the process of recruitment, namely introducing you as a potential candidate to clients who are seeking employees for vacancies in their company, or communicating with clients in relation to such employees.
- Your personal data and the historic information that we retain on your record enable us to offer you an accurate and relevant service.
- We may utilise statistical data, such as information about qualifications and job sectors to monitor recruitment statistics, but such statistics would not contain identifiable information about any individuals.
What is our legal basis for collecting and retaining your information?
Depending on which of the above Permitted Purposes we use your personal data for, we may process your personal data on one or more of the following legal grounds:
- Because processing is necessary for the performance of a client instruction or other contract with you or your organisation or a Third Party Entity;
- To comply with our legal obligations (e.g. to keep pension records or records for tax purposes);
- Because processing is necessary for purposes of our legitimate interest or those of any third party recipients that receive your personal data, provided that such interests are not overridden by your interests or fundamental rights and freedoms;
- We may also process your data based on your consent where you have expressly given that to us.
How do we keep your personal data safe?
We take appropriate technical and organisational measures to keep your personal data confidential and secure, in accordance with our internal policies and procedures regarding storage of, access to and disclosure of personal data. We may keep your personal data in our electronic systems, in the systems of our contractors, or in paper files.
What do we do with your personal data?
- We use personal data in the first instance to communicate with you in relation to our business, either in relation to sourcing a suitable employee or employment position, or otherwise for the purposes of you providing services to us.
- In relation to candidates, we may assess data about you against vacancies which we believe may be suitable. This process is not done by an automated system since we do not undertake automated decision making.
- Where you apply through us or provide us with your CV for a specific vacancy, we may contact you to inform you of other opportunities which may be of interest to you. We will not in any event share your personal data with any person outside StaffMatters in relation to such other opportunities without first obtaining your express consent. You can at any time contact us to ask that we stop doing so by contacting us on dataprotection@smstaffmatters.com.
- We will use your contact details to contact you by telephone call, text message or email about vacancies we believe you may be interested in.
Who do we share your personal data with?
- Personal data of candidates and clients, or individuals who have a relationship with our clients, is available and accessible to the recruitment consultants, administrators and IT staff employed by StaffMatters, exclusively for the purposes of the recruitment procedure.
- We will share the CVs of candidates with potential employers only with the candidate’s explicit consent, and at first without any information which allows you to be identified, such as your name, address, telephone numbers or email address.
- Only when a potential employer wishes to meet with you in an interview and you have agreed that you wish to meet with potential employer, will we disclose your name to the potential employer.
How long do we keep personal data for?
- We retain personal data only for as long as we need it to fulfil the purposes for which it was originally collected and where you are happy for us to do so.
- The criteria we use to determine whether we should retain your personal data includes:
- – the nature of the personal data;
- – its perceived accuracy;
- – our legal obligations;
- – whether an interview or placement has been arranged; and
- – our recruitment expertise and knowledge of the industry by country, sector and job role.
- Specifically in relation to candidate data, due to the nature of finding and continuing in employment, in our experience a candidate will typically apply for various vacancies as they become available over a period of time, and we continue to keep a candidate’s data in an active status, available to be taken into consideration for vacancies as they become available. We may reach out to candidates on our database after an initial inquiry, to inform such candidates of similar or other positions which may be of interest. Therefore, your personal data is retained until you wish for us to put your record into an inactive status on our database. We run routine data checks to deactivate records that we no longer have a reason to maintain.
- We may archive part or all your personal data or retain it on our financial systems only, deleting all or part of it from our main Customer Relationship Manager (CRM) system. We may pseudonymise parts of your data, particularly following a request for erasure of your data, to ensure that we do not re-enter your personal data on to our database, unless requested to do so.
Your Data Status
It is important for StaffMatters to correctly understand any requests you make regarding your data on our database. To avoid any confusion or misunderstanding, please take note of the following terms used in relation to the status of your data:
- Active / Activated
- – Your record is in an active status.
- – We will communicate with you by email, telephone call or text message regarding vacancies for which you had applied.
- – We continue to consider your profile and CV also for any other current or future vacancies.
- – If such a job opportunity might come up, we will contact you by an email, telephone call or text message to let you know.
- – We will never submit your CV to a client unless you give us permission to do so.
- In-active / Deactivated
- – Your record in is an in-active status.
- – Your data is invisible when CVs are considered for vacancies and your CV will therefore not be considered for any vacancies and we will not contact you with any job opportunities.
- – All your personal data remains on our records should you contact us in the future to make use of our service again.
- – In keeping with the GDPR we will occasionally assess your record to decide whether to continue to store your data. We will contact you by email, telephone call or text message for your consent before taking any action such as erasing your data.
- Erase
- – You have invoked your right for your data to be erased from our records.
- – We will erase all your personal data, except if it is required by law for us to keep it.
- – We will have 30 days in which to comply with your request to erase.
- – Please note that to have your record erased like this would mean that, should you decide in the future to make use of our service again, we will have no record at all of any vacancies for which you had previously applied, or any companies with whom you previously had interviews, any of your job search preferences, and so on.
If you wish to make any changes regarding the status of your data on the StaffMatters database, please contact us on dataprotection@smstaffmatters.com
What are your rights?
Subject to certain conditions under applicable legislation, you have the right to:
- request a copy of the personal data which we hold about you;
- have any inaccurate data we hold about you corrected;
- object to or restrict our use of your personal data;
- request that we erase your personal data;
- submit a complaint if you have concerns about the way in which we are handling your data.
To do any of the above, please contact us at dataprotection@smstaffmatters.com. To enable us to process your request, we may require that you provide us with proof of your identity, such as by providing us with a copy of a valid form of identification – this is to ensure that we appropriately protect the personal data we hold from unauthorised access requests and comply with our security obligations.
In relation to complaints, we will promptly respond to your requests and complaints. In the event that you are unhappy with our response, you may submit a complaint to the relevant privacy regulator, which is the Office of the Commissioner for the Protection of Personal Data in Cyprus. The details of the Commissioner are as follows:
1 Iasonos street, 1082 Nicosia
PO Box 23378, 1682 Nicosia
Tel: +357 22818456
Fax: +357 22304565
Email: commissioner@dataprotection.gov.cy
Get in touch
We would be happy to hear your views about our website and this Privacy Policy – please let us know any questions, comments or clarifications you may have at dataprotection@smstaffmatters.com.
Cookies
We may obtain data about you from cookies. These are small text files that are placed on your computer by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site. Cookies also enable us to deliver more personalised content.
The cookie-related information is not used to identify you personally and the pattern data is fully under our control. These cookies are not used for any purpose other than those described here. The only third-party cookies we use on our site are Google Analytics (please see below on Google Analytics)
- Strictly necessary cookies
These cookies are needed for effective site usage and, as such, cannot be turned off.
These cookies do not gather information about you that could be used for other purposes, such as marketing or tracking your Internet usage.
- Performance cookies
These cookies help us monitor and improve the performance of our website, counting visits, identifying traffic sources and judging site popularity. We use Google Analytics for this purpose, but all information gathered is anonymous.
- Functionality cookies
These cookies remember choices you made, and data entered when visiting our website, including user name, email address or previously viewed links. Functionality cookies serve to assist your actions when applying for a vacancy.
Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). This service uses cookies to help us analyse how users navigate and interact with the site. The information generated by the cookie includes your IP address and is transmitted to and stored by Google on servers in the United States. It uses this
information to create reports on website activity for StaffMatters and providing other services relating to website activity and internet usage. Google may send this information to third parties where required to do so by law, or if such third parties use the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
Most web browsers allow some control of most cookies through the browser settings.
Changes to this Privacy Policy
This Privacy Policy was last updated on 16 June 2018. We have the right to update the contents of this Privacy Policy from time to time to reflect any changes in the way in which we process your personal data or to reflect legal requirements as these may change. In case of updates, we will post the revised Privacy Policy on our website. Changes will take effect as soon as the revised version is made available on our websites.