The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR) and has replaced the Data Protection Act 1998. The Act sets new standards for protecting personal data. Gives people more control over the use of their data and assists in the preparation for a future outside of the EU.
For the purposes of application data protection laws (Including the EU General Data Protection Regulation 2016/679 – “GDPR”), the data controller is Torex Staff Agency.
Torex Staff Agency is the trading name of Torexstaff Ltd (Company registration number 12981811). Our registered office is located at Unit-29, Craven Park Training & Enterprise Centre, Preston Kingston Upon Hull HU9 5HE, United Kingdom.
Data Controller: The Data Controller for www.torexstaffagency.co.uk is Torex Staff Agency. This means that we are responsible for deciding how and why we hold and use your personal data.
Account: Means an account required to access and/or uses certain areas and features of Our Site and Services.
Our Site: Our website and all associated subpages at www.torexstaffagency.co.uk
Personal Data: means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to Us via Our Site, or via any other of Our Services. This definition shall, where applicable, incorporate the definitions provided in the Data Protection Act 2018 and the EU Regulation 2016/679 – the General Data Protection Regulation (“GDPR”).
Policy: Torex Staff Agency believes that all data, required for the delivery of the service and the lawful running of the organisation must be collected, handled, maintained and stored in accordance to the requirements of the Data Protection Act 2018.
Who we are and what we do
We collect information about you solely for the purposes of carrying out our core business and ancillary activities.
What we collect from you
Torex Staff Agency collects Personal Data directly from you (via email, website forms, phone, and email or otherwise) as well as from other available sources to the extent relevant and permitted under the GDPR legislation. In order to provide the best possible tailored employment opportunities in the social sector, we need to process certain information about you. We only ask for details that we think will genuinely help us to help you. These include:
- Full name,
- Contact Details,
- Email ID
- Your competences, skills, experience and education, e.g. your CV or resume, previous employments, educational details and qualifications, third party references
- Where you are an Employer providing necessary Employer information, e.g., for job posting purposes
- Other relevant information you choose to share with us
We will only collect sensitive personal data about you when absolutely necessary for the recruitment process. We will only process this data if you have given your consent for us to do so. Where appropriate and in accordance with local laws and requirements, we will also collect information related to your health, diversity information or details of any criminal convictions.
Information automatically collected about you when you use Torex Staff Agency
We gather certain information automatically when you visit our site. This information includes:
- Your activity on our Site, including the jobs you search for, view, and apply to
- Your internet protocol (IP) address and internet service provider (ISP)
- Your browser type
- the files viewed on our site (e.g., HTML pages, graphics, etc.)
- the operating system, date/time stamp, and/or clickstream data
This data is collected about you automatically and is processed for Torex Staff Agency’s legitimate interest. We combine this information with personal data to help detect and prevent fraud. We also combine this data with your profile and resume data to return the best job search results to you.
How do we use the information?
The information you provide to us is used by us to:
(a) provide our services to you, whether you are an employer, candidate or a user of our website;
(b) enable you to submit your CV generally, to apply for specific jobs or to subscribe to our mailing lists;
(c) provide information on suitable job opportunities to people who register with us, to match your profile with suitable job vacancies and to assist us in finding a position that is most suitable for you including the evaluation of your data against vacancies which we may have that we determine may be suitable for you;
(d) answer your enquiry;
(e) provide other services related to or supplementary to the above; services directly to you to your professional or business email address; and
(f) where we have a bona fide requirement by law to disclose it to third parties in relation to the detection of crime, the collection of taxes or duties, in order to comply with any applicable law and court order.
(g) improve our Services, maintain product quality and protect users; and
(h) match Job Seekers with Employer Job Listings.
This list is not exhaustive and we may seek to process, use or disclose your information for any other purpose which has not been listed above always with your explicit consent. The more information we have about you the more bespoke we can make our service.
Where appropriate, we will seek your consent to undertake some of these activities.
We may also use the information you send to us via the websites and/or services, to communicate with you via email and, possibly, other means, or to send you our newsletter, if this is in accordance with your marketing preferences. However, you will always be able to opt-out of such communications at any time (see the “Your Rights” section below).
Who is this information shared with?
Your information is shared with:
- Employers and Job Seekers (e.g., if a Job Seeker decide to apply for a job);
- Third-party service providers who help us with our operations, e.g. for data storage or fraud detection.
What will we do with your data?
We will process your data only for the purpose of providing you with the legal services described in the enclosed client care letter. If the scope changes, we will tell you. With your consent, we may also use the data for advising you of our other products and services which we think may be of interest to you.
We will never sell your personal data to anyone.
Members of the mailing lists, recipients of the permission-based e-mails. These mailing lists send emails and alerts to Candidates and Employers. The members of these mailing lists are referred to as “Subscribers”.
Legal Basis on Which Torex Staff Agency Collects Your Personal Data
The legal bases we rely on to process your personal data which is covered by the Data Privacy Laws are as follows:
1. Performance of our contract with you under Article 6(1)(b) GDPR
2. Compliance with a legal obligation to which we are subject, under article 6(1)(c) GDPR
3. Consent under article 6(1)(a) GDPR, where you have given consent to the processing of your personal data for one or more specific purposes as listed in our Consent Form. Otherwise, we rely on (1) and (2)
If the information you provide us contains special category data, such as health, religious or ethnic information the legal basis in GDPR we rely on to process it is:
- Consent under article 9(2)(a)
- Establishment, exercise or defence of legal claims under article 9(2)(f)
- Consent for processing information relating to criminal convictions under the Data Protection Act 2018 Schedule 1 Part (3)(29)
- Legitimate Interest
A ground relied upon by Torex Staff Agency for other types of processing of your Personal Data is that it is necessary for the purposes of legitimate interests pursued by Torex Staff Agency or an Employer. Such legitimate interests will include where Torex Staff Agency sends you marketing about its services, where we believe you have a reasonable expectation that we will perform a particular type of processing on your behalf, where such processing is strictly necessary for fraud detection and prevention, or where we manage and optimise the performance of our services. Torex Staff Agency will only rely on such a ground where an assessment has been performed balancing the interests and rights involved and the necessity of the processing in order to provide our services and features to you.
- Compliance with a Legal Obligation
A third ground relied upon for certain types of processing is that it is necessary in order to allow Torex Staff Agency to comply with a legal obligation. An example of this would be where the Torex Staff Agency is required to retain business records for fixed periods of time in order to comply with local legal requirements.
Finally, Torex Staff Agency relies on your consent in order to process your Personal Data. Where Torex Staff Agency requires your consent in order to collect and process certain Personal Data, we seek your consent at the time of provision, and such processing will only be performed where consent is secured. For example, your consent will be sought where you provide your CV when you provide it yourself on our Site to help you apply for Job posts. You can withdraw your consent by sending us an email provided in the Contact section below.
Safety of information
We use appropriate technical, organisational and administrative security measures to protect any information we hold in our records from loss, misuse, and unauthorised access, disclosure, alteration and destruction.
While Torex Staff Agency takes all due care in ensuring the privacy and integrity of the information that you provide to us, we recognise that no data transmission over the internet can be 100% guaranteed as secure. The possibility exists that this information could be unlawfully observed by a third party while in transit over the internet. Torex Staff Agency accepts no liability should this occur.
The GDPR and Data Protection Act 2018 provide you with a number of rights. Your key rights are set out below. Further information may be obtained from the Information Commissioner’s Office.
- Right of access – you can ask for copies of your personal information. There are some exemptions, which means you may not always receive all the information we process
- Right to rectification – you can ask us to rectify information you think is inaccurate, or incomplete
- Right to erasure – in certain circumstances, you can ask us to erase your personal information
- Restriction of processing – in certain circumstances you can ask us to restrict processing to specified activities
- Objection to processing – for example, to direct marketing
- Data portability – you can ask us to transfer the information you gave us to another firm, or to give it to you
How long will we use your personal data for?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In general, your personal data will be retained for a period of five years from the date of your last contact with us.
In some circumstances, you can ask us to delete your data. You can send us an email for the request to erase your data.
In some circumstances, we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
We hope that we can resolve any query or concern you raise about our use of your information. To lodge a complaint, you can get in touch through the details provided in the Contact section below.
The General Data Protection Regulation also gives you right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/make-a-complaint or telephone: 0303 123 1113.
Children’s privacy protection
Our services are not designed for, or intentionally targeted at, children 18 years of age or younger. We do not intentionally collect or maintain data about anyone under the age of 18 and shall delete it if we discover it was provided without parents/guardians consent.
Where your data is processed and stored
Whilst we store our data in the United Kingdom (or the European Economic Area, to which equivalent protections apply) we will, with your consent, transfer your data to third countries if your matter requires. You must be aware that third countries do not offer the same degree of protection as the UK and in particular email, the correspondence might be subject to government surveillance or other interception or monitoring. We are not responsible for data security in third countries. If requested we will agree to suitable password protection [or other encryption] for email correspondence.
© Torexstaff Agency 2021. All Rights Reserved.
Designed by Kamila Plachetkova.
Torexstaff Ltd- t/a Torexstaff Agency
Company Registration Number: 12981811
Craven Park Training & Enterprise Centre, Preston
Kingston Upon Hull