Privacy Policy
Privacy Policy
iiConnection, part of Carbon & Finch Ltd (“we”), is committed to protecting your privacy and complying with our data protection obligations under the Data Protection Act 2018 (the DPA 2018), the General Data Protection Regulation 2016/679 (the GDPR), and any other applicable UK legislation (together, Data Protection Law).
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. We keep certain basic information when you visit our website and recognise the importance of keeping that information secure and letting you know what we will do with it.
Introduction
This Privacy Policy explains how iiConnection (“we”, “us”, “our”) collects, uses, discloses, and protects your information when you visit our website www.iiConnection.com and use our recruitment services. This policy applies to all users of our Site, including job seekers, clients, and partners.
Data Controller Information
· Data Controller: iiConnection, Epsom Workhub 6-7 Derby Square, Epsom High Street, KT19 8AG
· Contact Information DPO: Alexandra Jakobsen , support@iiconnection.com, +44 020 4525 9093
Data Collection Types of Data Collected
· Personal Data:
o Name
o Email address
o Postal address
o Phone number
o Employment history
o Current employment information
o Job title
o Educational background
o Resume/CV
o Job preferences
o IP address
o Browsing behavior on our Site
· Non-Personal Data:
o Browser type
o Operating system
o Visit duration
o Page views
o Referral source
o IP Address
o Cookies
Methods of Data Collection
· Direct Collection: Through forms on our website when you register, apply for a job, or contact us.
· Automated Technologies: Using cookies, server logs, and other similar technologies.
Data is stored in a range of different places, including in your personnel file, in iiConnection ATS and in other IT systems (including iiConnection email system).
Legal Basis for Processing
We process your personal data under the following legal bases:
· Consent: For sending marketing communications and processing job applications. Candidate screening for recruitment purposes.
· Contract: When processing is necessary for the performance of a contract with you.
· Legal Obligations: To comply with legal requirements.
· Legitimate Interests: For improving our services, enhancing user experience, and ensuring website security.
Use of Personal Data
Your personal data is used for the following purposes:
· To provide and manage our recruitment services
· To process job applications and match candidates with job opportunities
· To communicate with you, including sending job alerts and updates
· To improve our website and services
· To monitor and analyse usage and activities
· To comply with legal obligations
Personal Data Retention Periods
We may retain your personal data for as long as it is reasonably needed to maintain and expand our relationship and provide you with our Services and offerings; in order to comply with our legal and contractual obligations; or to protect ourselves from any potential disputes (e.g. as required by laws applicable to log-keeping, records and bookkeeping, and in order to have proof and evidence concerning our relationship, should any legal issues arise following your discontinuance of use), all in accordance with our data retention policy and at our reasonable discretion. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of such data, the potential risk of harm from unauthorized use or disclosure of such data, the purposes for which we process it, and the applicable legal requirements. If you have any questions about our data retention policy, please contact us by email at support@iiconnection.com.
When deletion is requested or otherwise required, we will anonymise the data of data subjects and/or remove their information from IT Systems, Electronic Devices, Media used for processing.
If you would like to request deletion of personal data, please contact DPO Alexandra Jakobsen at support@iiconnection.com.
Sharing of Personal Data
We may share your personal data with:
· Clients: Companies seeking candidates for job openings.
· Service Providers: Companies that provide services on our behalf, such as data analysis, email delivery, hosting services, and customer service.
· Business Partners: Partners with whom we collaborate to provide you with certain services.
· Legal Authorities: If required by law or to protect our legal rights.
Your information may be shared internally, including between iiConnection and Carbon and finch Ltd , members of the HR and recruitment team, payroll, your line manager, managers in the business area in which you work and IT staff if access to the data is necessary for performance of their roles.
We may your data with third parties in order to obtain pre-employment references from other employers, obtain employment background checks from third-party providers and obtain necessary criminal records checks from the Disclosure and Barring Service. We may also share your data with third parties in the context of a sale of some or all of its business or with our clients’ in relation to providing services related to finding suitable work. In those circumstances, the data will be subject to confidentiality arrangements.
We may also share your data with third parties that process data on its behalf, in connection with payroll, administering your pension, the provision of benefits and the provision of occupational health services.
Erasure
Request deletion of your personal data under certain conditions. However, iiConnection can refuse to comply with an erasure request in the following limited circumstances:
· (a) To exercise iiConnection‘s right of freedom of expression and information;
· (b) To comply with a legal obligation or for the performance of a public interest task;
· (c) For archiving purposes in the public interest, scientific research, historical research, or statistical purposes; or
· (d) For the establishment, exercise, or defence of legal claims.
If we remove your Personal Data per your request for erasure, then we will confirm this with you.
If we have disclosed any of your Personal Data to a third party and you submit an erasure request to us, then we will inform (1) you about the recipients and (2) any such third parties of your erasure request unless doing so is impossible or involves disproportionate efforts. We will respond to your erasure request without undue delay. Please note that, for your and iiConnection’s protection, we cannot respond to an erasure request until we have verified the identity of the person making the request. This verification process may extend the response timeframes set forth in this paragraph.
International Transfers
If your data is transferred outside the EEA, we ensure it is protected by:
· Standard Contractual Clauses: Ensuring that third parties guarantee an adequate level of data protection.
· Adequacy Decisions: Transferring data to countries recognised by the European Commission as having adequate data protection laws.
User Rights
You have the following rights regarding your personal data:
· Access: Request access to your personal data.
· Rectification: Request correction of inaccurate or incomplete data.
· Erasure: Request deletion of your personal data under certain conditions.
· Restriction: Request restriction of processing under certain circumstances.
· Data Portability: Request to receive your data in a structured, commonly used, and machine-readable format.
· Objection: Object to processing based on legitimate interests or direct marketing.
· Automated Decision-Making: Not be subject to decisions based solely on automated processing, including profiling.
To exercise any of these rights, please contact us at support@iiconnection.com.
Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
· Encryption
· Access controls
· Secure storage
· Regular security assessments
In the event of a data breach, we will notify affected individuals and relevant authorities as required by law.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
· Enhance your experience on our Site
· Analyse usage patterns
· Deliver personalised content and advertisements
You can manage your cookie preferences through your browser settings.
Children and our services
Our services and website aren’t directed to children, and you can’t use our services if you are under the age of 18.
Policy Updates
We may update this policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
Contact Information
If you have any questions or complaints about this policy or our data protection practices, please contact us at: Email: support@iiconnection.com
DPO contact: Alexandra Jakobsen Address: iiConnection, Epsom Workhub 6-7 Derby Square, Epsom High Street, KT19 8AG
Effective Date: 27/06/2024