CAnnection is committed to ensuring that your privacy is protected in accordance with the UK Data Protection Act 2018 including its applied General Data Protection Regulation (GDPR) provisions. Should we ask you to provide certain information by which you can be identified, then you can be assured that it will only be used in accordance with this privacy policy. Our policy purpose is to advise our clients and candidates (‘individuals’) of (CA)nnection Limited’s (‘CAnnection’) policy and why data is collected and processed, and what data is in focus as well as how it is processed. CAnnection is committed to full compliance with the UK Data Protection Act 2018 in so far as the utilisation and disclosure of individuals personal information (PI) is concerned. Please read this Privacy Notice to learn about your rights, what information we collect, how we use and protect it.
We are (CA)nnection Limited, based at 57 Cottenham Park Road, London, SW20 ODR.
Company registration number: 12930070
Registered Office: First Floor, Connect House, 133-137 Alexandra Road, Wimbledon, London, United Kingdom, SW19 7JY.
Directly. We obtain personal data directly from individuals in a variety of ways, including obtaining personal data from individuals who complete our online forms, supply a CV or application form, complete and submit a registration form, register for webinars, attend meetings or events we host, subscribe to job alert e-mails or linked-in messages. We may also obtain personal data directly when, for example, we are establishing a business relationship or performing professional services through a contract.
Indirectly. We obtain personal data indirectly about individuals from a variety of sources, including our clients.
We generally obtain the following categories of personal data through direct interactions with you or from our consultants and through other situations including those described in this Privacy Notice.
Personal data. Here is a list of personal data we commonly collect to conduct our business activities.
• Contact details (e.g., name, job title, company name, work and mobile telephone numbers, work and personal email and postal address).
• Professional details (e.g., job, salary and career history, educational background and professional memberships).
Special Categories of Personal Data. We typically do not collect special categories of personal data about individuals other than our own employees. In some circumstances it is necessary for CAnnection to process special categories of personal data of our employees and other third parties. Other than where such personal data is made public by the individual themselves, such processing would only be undertaken as necessary for CAnnection to exercise its rights and obligations as an employer (including for occupational health purposes), protect the vital interests of individuals, establish or defend legal claims or with the explicit consent of the individual(s) concerned. Examples of special categories of personal data we may obtain, or otherwise hold, include:
• Personal identification documents that may reveal race, religion or ethnic origin, possibly biometric data of private individuals, or applicants.
• Adverse information about potential candidates that may reveal criminal convictions or offences information.
• Diversity and equal opportunity information volunteered by candidates in certain recruitment processes.
Location-based data. We may process geographical locations you enter when seeking a new career opportunity.
We may rely on the following lawful reasons when we collect and use personal data to operate our business and provide our services:
Contract. We may process personal data in order to perform our contractual obligations owed to (or to enter into a contract with) the relevant individuals.
Consent. We may rely on your freely given consent at the time you provided your personal data to us.
Legitimate interests. We may rely on legitimate interests based on our evaluation that the processing is fair, reasonable and balanced. These may include:
• Delivering services to our clients – To deliver the professional services our clients have engaged us to provide including information on our services.
• Monitor our IT systems – Prevent fraud or criminal activity and protect our IT systems.
• Corporate responsibility – Comply with our corporate and corporate social responsibility commitments.
Legal obligations. We may process personal data in order to meet our legal and regulatory obligations or mandates.
Vital Interests. We may process personal data to protect the vital interests of the individual or another natural person.
We aspire to be transparent when we collect and use personal data and tell you why we need it, which typically includes:
• Providing recruitment activities to our business clients.
• Promoting our recruitment capabilities to existing and prospective business clients.
• Sending invitations and providing access to candidates attending our events and webinars or our sponsored events.
• Administering, maintaining and ensuring the security of our information systems, applications and websites.
• Seeking qualified candidates, and forwarding candidate career inquiries to our Career CAnnectors, which may be governed by different privacy terms and policies.
• Processing online requests, including responding to communications from individuals or requests for proposals and quotations.
• Complying with legal and regulatory obligations relating to anti-money laundering, terrorist financing, fraud and other forms of financial crime.
• Compiling health and safety data (directly or indirectly) following an incident or accident. Indirect data can take many forms including an incident report, first aider report, witness statements and CCTV footage.
We may occasionally share personal data with trusted third parties to help us deliver efficient and quality services. These recipients are contractually bound to safeguard the data we entrust to them. We may engage with several or all of the following categories of recipients:
• Parties that support us as we provide our services (e.g., providers of telecommunication systems and IT system support).
• Professional advisers, including lawyers and insurers.
• Law enforcement or other government and regulatory agencies (e.g., HMRC) or to other third parties as required by, and in accordance with, applicable law or regulation.
CAnnection will not transfer the personal information you provide to any third parties for their own direct marketing use.
• Access – You can ask us to verify whether we are processing personal data about you, and if so, to provide more specific information.
• Correction – You can ask us to correct our records if you believe they contain incorrect or incomplete information about you.
• Erasure – You can ask us to erase (delete) your personal data after you withdraw your consent to processing or when we no longer need it for the purpose it was originally collected.
• Processing restrictions – You can ask us to temporarily restrict our processing of your personal data if you contest the accuracy of your personal data, prefer to restrict its use rather than having us erase it, or need us to preserve it for you to establish, exercise, or defend a legal claim. A temporary restriction may apply while verifying whether we have overriding legitimate grounds to process it. You can ask us to inform you before we lift that temporary processing restriction.
• Data portability – In some circumstances, where you have provided personal data to us, you can ask us to transmit that personal data (in a structured, commonly used, and machine-readable format) directly to another company if is technically feasible.
• Right to Object to Direct Marketing including Profiling – You can object to our use of your personal data for direct marketing purposes, including profiling. We may need to keep some minimal information to comply with your request to cease marketing to you.
• Right to Withdraw Consent – You can withdraw your consent that you have previously given to one or more specified purposes to process your personal data. This will not affect the lawfulness of any processing carried out before you withdraw your consent. It may mean we are not able to provide certain products or services to you and we will advise you if this is the case.
If you would like to exercise your Data Subject Rights, you can email nicole@cannection.com. We may need to request specific information from you to help us confirm your identity and ensure your right to access the information or to exercise any of your other rights. This helps us to ensure that personal data is not disclosed to any person who has no right to receive it. No fee is required to make a request unless your request is clearly unfounded or excessive. Depending on the circumstances, we may be unable to comply with your request based on other lawful grounds.
We have put appropriate technical and organisational security policies and procedures in place to protect personal data (including sensitive personal data) from loss, misuse, alteration or destruction. We aim to ensure that access to your personal data is limited only to those who need to access it. Those individuals who have access to the data are required to maintain the confidentiality of such information.
We have put appropriate technical and organisational security policies and procedures in place to protect personal data (including sensitive personal data) from loss, misuse, alteration or destruction. We aim to ensure that access to your personal data is limited only to those who need to access it. Those individuals who have access to the data are required to maintain the confidentiality of such information.
If you have questions or comments about this Privacy Notice or how we handle personal data, please direct your correspondence to: CAnnection, 57 Cottenham Park Road, London, SW20 ODR or email nicole@cannection.com. We aim to respond within 30 days from the date we receive privacy-related communications.
