Welcome to the Winners Recruitment Ltd.’s privacy notice.
This Privacy Notice sets out the basis on which Winners will process personal information provided to us, this information is also referred to as ‘personal data’.
We take our obligations in respect of the privacy of personal data very seriously and we will only process personal information as detailed in this notice, unless we inform you otherwise. To ensure that the personal data we hold is accurate and up to date, we request that you inform us of any relevant changes to the personal information that we hold about you.
We help individuals to find work (either permanent or temporary) and we are also an employer. Our business activity is recruitment, whether this is directly or through supply by us and we assist hirers in introducing or supplying the staff that they require. We also recruit staff to work for us to provide our recruitment services. For this Privacy Notice, our commercial activities and services for individuals and businesses are referred to as ‘Recruitment Services’, and our actual or potential hiring customers are referred to as ‘Clients’.
Our Data Protection Officer is Katherine Clotworthy, Operations and Compliance Officer and can be contacted on 01872 264744.
If you do not wish us to process personal data per this policy, then please do not provide it to us. Please refer to Section 4 ‘Your rights’, in respect of the data that we already hold or which we receive from third parties.
This section applies to individuals wishing to use or using our Recruitment Services or looking for a role to work with us (‘a Candidate’)
The personal data we collect or receive includes the following as applicable:
We may obtain your date from the following sources (please note this list is not exhaustive):
Where you are a Candidate and we have obtained your data from a third party such as an online job board, it is our policy to advise you of the source when we first communicate with you.
The processing of your personal information may include:
1. Entering into and performing a contract with you:
To provide our Recruitment Services, we may enter into a contract with you and/or a third party. To enter into a contract, we will need certain information, for example, you name and address. A contract will also contain obligations on both your part and our part and we shall process your data as is necessary for those obligations. For example, to process payroll, a national insurance number and bank details will be required.
2. Compliance with legal obligations (regulatory and statutory obligations)
We must comply with several statutory provisions when providing our Recruitment Services, which necessitates the processing of personal data. These include the Conduct of Employment Agencies and Employment Businesses Regulations 2003, which amongst other things requires us to
Where we engage a person to work for us (whether directly or as supplied to a client) other statutory obligations must be complied with including payroll, tax, social security, HMRC reporting requirements and any other law or regulation.
We are also required to comply with statutory and regulatory obligations relating to business generally, for example complying with tax, bribery, fraud, crime prevention and data protection legislation, and co-operating with regulatory authorities such as HMRC or Information Commissioners Office.
3. Our Legitimate Interest (carrying on the commercial activity of Recruitment Services):
In providing our Recruitment Services, we will carry out some processing of personal data which is necessary for our legitimate interest, which include: Retaining records of our dealings and transactions and where applicable, use such records for:
Using your data to:
Purpose/Activity | Type of Data | Lawful basis for processing including the basis of legitimate interest |
To register you as a new candidate for work-finding services or when you make an employment application to us | Identity
Contact details Evidence of your right to work in the UK CV References Unspent criminal/motoring convictions
|
Fulfil a contract with you or with the potential employer
|
To provide you with work-finding services including sending your details of available job opportunities and job alert emails following your job search preferences and criteria, providing career advice, providing your CV to clients concerning their job vacancies, paying your wages (if you are a temporary worker) and charging clients for placements we make | Identity
Contact Details Financial Data |
Fulfil a contract (Candidate Agreements and client contracts)
Legitimate Interests Legal or regulatory duty |
Disclosing your personal information to governments and law enforcement agencies and our appointed 3rd party vendors | Identity
Contact details Evidence of your right to work in the UK CV References Unspent criminal/monitoring convictions |
Legitimate Interest
Your consent |
To manage our relationship with you including
Notifying you about changes to our Candidate Agreement or Privacy Notices Asking you to leave a review or feedback or complete a survey Administration and IT services connected with representing you for roles, placing you in temporary assignments to work for our clients, processing timesheets, payroll and other payments, tax deductions, issuing payslips etc |
Identity
Contact Profile/Survey |
Fulfil a contract
Legal or regulatory duty Legitimate interests (keeping our records up to date and to study how candidates and potential candidates and visitors to our website use our services and website, to develop and improve them and to grow our business |
Keeping your Personal Information secure to prevent it from being lost, used, accessed disclosed or altered in any way | Identity
Contact Evidence of your right to work in the UK CV Referees Unspent criminal/motoring convictions |
Legal or regulatory duty
Legitimate Interests Fulfil a contract |
To investigate issues, disputes and complaints between us and between us, you and our clients to seek to resolve them | Identity
Contact Profile |
Legitimate Interest
Fulfil a contract |
To administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | Identity
Contact Technical Data
|
Legitimate interests
Legal or regulatory duty |
Retaining your Personal Information for as long as necessary for providing you with work-finding services | Identity
Contact Details Evidence of your right to work in the UK CV Referees Unspent criminal/motoring convictions |
Legitimate interests Legal or regulatory duty |
To help us respond to queries, complaints or for other reasons such as responding to requests from regulators, government and law enforcement agencies such as the Police | Contact | Legitimate Interest
Legal or regulatory duty
|
4. Consent to our processing of your data
We may process your data on the basis that you have consented to us doing so for a specific purpose, for example, if you apply to a specific role you may have consented to our processing of the data that has been provided for progressing your application and considering your suitability for the role. In other cases, you may have provided your written or verbal consent to the use of your data for a specific reason.
You may withdraw your consent to our processing of your personal information for a particular purpose at any stage. However, please note that we may continue to retain or otherwise use your personal information thereafter where we have a legitimate interest or a legal or contractual obligation to do so. Our processing in that respect will be limited to what is necessary for the furtherance of those interest or obligations. Withdrawal of consent will not have any effect on the lawfulness of any processing based on consent before its withdrawal.
Part of our business activity involves researching information relating to individuals to find and fill job roles. This may include obtaining personal data from online sources, for example, we may obtain information from social media sites such as LinkedIn and job boards, some information being publicly available but others being from sites or providers to which we subscribe. From time to time we may also receive personal information about you from hiring organisations, colleagues and former employers, or from the person for whom you have provided services or been otherwise engaged.
Where information for this party is of no use to us. Or where you have notified us that you do not want us to provide you with services, we shall discard it, however, we may maintain a limited record to avoid the duplication of process. Where we consider that information may be of use to us in pursuance to the provision of our Recruitment Services, any processing will be under this Privacy Notice. You do have the right to object to processing, please see Section 4 your rights.
Sensitive Personal Data is information which is intensely personal to you and is usually irrelevant to our consideration of your suitability for a job role. Examples of SPD include information which reveals your political, religious or philosophical beliefs, sexual orientation, race or ethnic origin or information relating to your health.
Regardless of the basis for your dealings with us, we request that you do not provide us with any sensitive personal data unless necessary. However, to the extent that you do provide with any sensitive personal data, such as data which you choose to share with us in conversation, we shall only use that data for our relationship with you or the provision of our Recruitment Services. This will be for more one or more of the following reasons:
Who we share your data with:
We will not share your personal information unless we are entitled to do so. The categories with whom we may share your personal information include:
We do not use any automated decision-making software
This section applies where you are an individual working for a third party with whom we have dealings. For example, a client or a payroll company.
We may collect your data during our dealings and this may include the following:
We may collect your data from the following sources (please note this list is not exhaustive):
How we will use your data:
We will process your data in the context of our dealings with the third party for whom you work and as part of our Recruitment Services. Processing may include:
We have put in appropriate security measures to prevent your data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Also, we limit access to your data to those employees, agent’s contractors and other third parties who have a business need to know. They will only process our data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedure to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We will only retain your data for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements.
To determine the appropriate retention period of personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your data, the purposes for which we process your data and whether we can achieve those purposes through other means and applicable legal requirements.
By law, we have to keep basic information about clients and candidates for 6 years after they cease being a customer or candidate for tax and contractual purposes.
We take the protection of your data very seriously and it important that you know your rights within that context which include:
Where you have consented to the Company processing your personal data and sensitive personal data you have the right to withdraw that consent at any time by contacting the Data Protection Officer or any other representative of the Data Controller (in this case Winners Recruitment).
If you wish to complain about this privacy notice or any of the procedures set out in it, please contact Winners Recruitment on 01872 264744. You can speak to any member of the team as they are all representatives of the Data Controller or the Data Protection Officer, Katherine Clotworthy, Operations and Compliance Officer.
You also have the right to raise concerns with Information Commissioner’s Office on 0303 123 1113 or at https://ico.org.uk/concerns/, or any other relevant supervisory authority should your data be processed outside of the UK, if you believe that your data protection rights have not been adhered to.