Privacy Policy

Right Management UK Privacy Notice

Effective Date: May 25, 2018

At Right Management, privacy is important to us and we place great care in the responsible, transparent and safe handling of data. This privacy notice provides a framework of understanding about the personal data collected by Right Management Limited and our compliance to data privacy law, including the provisions of the European Union’s General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Our registered office is in 50 Bank Street, Canary Wharf, London, E14 5NS, United Kingdom.

This privacy notice applies to:

  1. Our candidates and recipients of our career services,

  2. Representatives of our business partners, clients, vendors and suppliers

  3. Users of our Sites, including Rightmanagement.co.uk, RightEverywhere® and associated platforms, and our social media channels; “Right Management UK” on Twitter and LinkedIn.

This privacy notice does not apply to Right Management employees or associates.

This privacy notice describes the types of personal data and information we collect, how we use it, how long we process and store it, how we protect it, with whom we share it, to whom we transfer it and the rights that you can exercise regarding our use of your personal data. We also describe how you can contact us to further enquire about our privacy practices or to exercise your rights. You can click on one of the links below to jump to the listed section:


 

Your Rights as Data Subject

When permitted by applicable law, a data subject can exercise under Articles 15 to 22 of the EU GDPR, the following specific rights:

  1. Right of access: You have the right to access your personal data in order to verify your personal data is processed in accordance to the law. This is more commonly referred to as a Subject Access Request.

  2. Right to rectification: You have the right to request the rectification of any inaccurate or incomplete data held about you, in order to protect the accuracy of such information and to adapt it to the data processing. If you believe that any of your data we process is incorrect or incomplete, please contact us and we will take reasonable steps to check its accuracy and correct it where necessary

  3. Right to erasure: Otherwise known as ‘The Right to be Forgotten’; you have the right to request that we no longer processes your personal data.and erase all information about you. Please be aware that this is not an absolute right and there may be legal or regulatory reasons why data cannot be erased at the time of the request.

  4. Right to restriction of processing: You have the right to request the Data Controller restricts the processing of your data.

  5. Right to data portability: You have the right to request data portability, meaning that you can receive your personal data in a structured and commonly used format, or that you can request the transfer of your data to another Data Controller.

  6. Right to object: At any time and without having to justify your decision, you have the right to object to the processing of your data for direct marketing purposes. Please note: if you withdraw your consent, the previous processing of data that we have done with your consent will remain lawful.

  7. Right not to be subject of automated individual decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, if such profiling produces a legal effect or similarly significantly affects you. Right Management do not use processes in which automated decision-making (including profiling) takes place.

  8. Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged GDPR infringement. The supervisory authority in the UK is the Information Commissioners’ Office (ICO). More information can be found at https://ico.org.uk/

Whenever the processing is based on consent, as under art.7 of the GDPR, while you may withdraw your consent at any time, there may be circumstances where we will still need to process your data for legal or official reasons. We will inform you if this is the case. Where this is the case, we will restrict the data to only what is necessary for the purpose of meeting those specific requirements.

If you wish to exercise any of your rights in relation to data privacy, please refer to the How to Contact Us section below.How To Contact Us

 

We process your data from the moment you:

  1. Visit our Sites, including our social media channels outlined above;

  2. Apply for/engage in career counselling / a workshop / assessment / event;

  3. Enter your details on RightEverywhere®;

  4. Message us via our website, our social media channels or any right.com email address;

  5. Otherwise use our services.

Information We Collect

We may collect a selection of personal data, including, but not limited to (as permitted under local law):

How We Use the Information We Collect

Right Management UK collects and uses the data gathered for the following purposes (as permitted under local law):

All processing will be carried out based on adequate legal grounds which may fall into a number of categories, including:

  1. Explicit consent from you, where required by applicable law e.g. when you tick a box to receive specific content. For certain processing we ask for your permission/consent in advance. If you do not give permission and/or object to the processing, this may have consequences for the service we provide to you;

  2. Statutory or contractual requirement compliance;

  3. Legitimate interest of the Data Controller e.g. letting the user access the website to be provided with the services offered. Please see our section on Legitimate Interests below to learn more about these interests and when we may process information in this way.

Legitimate Interest

We may process personal data for certain legitimate business purposes, which includes some, or all, of the following:

Whenever we process data for these purposes we will ensure that we keep your rights in high regard and take account of these rights. You have the right to object to such processing (more details in section Your Rights as a Data Subject, below). Please bear in mind that if you exercise your right to object, this may affect our ability to carry out and deliver services to you for your benefit.

How We Protect Personal Information

We maintain administrative, technical and physical safeguards designed to protect the personal data you provide against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.

How long we Process and Store the Data

We process the personal data we collect for the purposes defined in this notice and for a period only as long as is necessary for the purposes we collected it. Different laws and contractual obligations may also require us to process different data for different periods of time.

We will keep your personal identifiable information for the duration necessary to achieve the purposes described in this Privacy Notice, taking into account applicable statute of limitation periods and records retention requirements under applicable law. Subject to applicable law, we will retain your personal data as required by the company to meet our business and compliance obligations, for example, to comply with our tax and accounting obligations.

We store your personal data, in a way that allows identification, for no longer than is necessary, based on the purposes for which it was collected. We determine the period of time by taking into account:

Information We Share

We do not disclose personal data that we collect about you, except as described in this privacy notice or in separate notices provided in connection with particular activities. We may share personal data with vendors who perform services on our behalf based on our instructions. When we use the services of other parties to process data on our behalf, we ensure due diligence takes place to ensure they are GDPR compliant and, where necessary, that processing agreements are in place with these parties, so that they too handle your personal data carefully. We never sell your data to third parties.

In addition, we may disclose personal data about you on the following basis:

  1. If we are required to do so by law or legal process;

  2. To law enforcement authorities or other government officials based on a lawful disclosure request; and

  3. When we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.

We also reserve the right to transfer personal data we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganisation, dissolution or liquidation).

If we share data with our US parent company and affiliated ManpowerGroup companies, we will ensure that there are appropriate safeguards for the protection of your data.

Data Transfers

We may transfer personal data to countries outside of the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which the data was provided. When we transfer your information to other countries, we will protect that data as described in this Privacy Notice and such transfers will be in compliance with applicable law.

The countries to which we may transfer the personal data we collect about you may be:

When we transfer personal data from within the European Union to countries or international organizations that are based outside the European Union the transfer takes place on the basis of:

  1. Adequacy decision by the European Commission;

  2. Standard data protection clauses (formerly called the Model Clauses) adopted by the European Commission

Updates to Our Privacy Notice

This privacy notice (including any addenda) may be updated periodically to reflect changes in our privacy practices and legal updates. For significant changes, we will notify you by posting a prominent notice on our Sites indicating at the top of each Notice when it was most recently updated.

How To Contact Us

If you have any questions/comments about this privacy notice, if you would like to exercise your rights, or you think you have identified any weakness or data privacy related concern on one of our Sites, please email us at: ukprivacy@right.com

Or write to us at:

The Data Privacy Officer
Right Management UK
50 Bank Street
Canary Wharf
London E14 5NS
United Kingdom


 top