Your data matters
Company Name: Chase Medical Limited ('the Company') Company Contact Details: Janine Ellis ('Data Protection Officer and Director')
Date: 16/4/2018
The Company acts as both a recruitment business and a recruitment agency, which provides work-finding services to its clients and work-seekers. The Company must process personal data (including sensitive personal data) so that it can provide these services – in doing so, the Company acts as a data controller.
You may give your personal details to the Company directly, such as on an application or registration form or via our website, or it may be collected from another source such as a job board. The Company must have a legal basis for processing your personal data. For the purposes of providing you with work-finding services and/or information relating to roles relevant to you the Company will only use your personal data in accordance with the terms of the following statement.
1. Collection and use of personal data
a. Purpose of processing and legal basis
The Company will collect your personal data (which may include sensitive personal data) and will process your personal data for the purposes of providing you with work-finding services. The legal bases for data collection are:
- Legitimate Interests and
- Legal Obligation
b. Legitimate interest
The Company relies on a legitimate interest to process your personal data as follows:
The Company requires personal data in order to provide workfinding services. It is essential to send relevant information and work opportunities, to the relevant staff to ascertain if and where they are interested in working, check the identity of those candidates, assess their right to work, authority to work in the role and qualifications as well as process pay and manage entitlement to certain statutory rights. It is in the legitimate interests of all parties involved, namely the recruiter, the work seeker and the client, that the recruitment business can process personal data.
c. Your personal data is required by law
Your data is necessary to enter into a contract and is required to adhere to legislative, or regulatory obligations.
This is the case for a DBS (which is required under the Conduct Regulations) and your Work Health Assessment information, which is needed in order to ensure that appropriate adjustments can be made where apt and that you have the relevant vaccinations needed, to perform the role.
- If this information is not provided, then it may not be possible for you to perform the work.
d. Recipient/s of Data
The Company will process your personal data and/or sensitive personal data with the following recipients:
- A client, for whom you would like to work a shift/take up a post.
- Our current payroll provider at any given time.
- Any authority, who has a right to access certain information, such as the NMC, or HMRC.
2. Overseas Transfers
Chase Medical adheres to UK GDPR regulations and ensures that any data transferred between the UK and the EEA is done so under the appropriate safeguards, in line with UK data protection law, which aligns closely with the EU GDPR. The Company will only transfer the information you provide to us to countries outside the European Economic Area ('EEA') for the purposes of providing you with work-finding services. Steps will be taken to ensure adequate protections are in place to ensure the security of your information. The EEA comprises the EU member states plus Norway, Iceland and Liechtenstein.
3. Data Retention
The Company will retain your personal data only for as long as is necessary. Different laws require us to keep different data for different periods of time.
The Conduct of Employment Agencies and Employment Businesses Regulations 2003, require the Company to keep work-seeker records for at least one year from (a) the date of their creation or (b) after the date on which it last provided with work-finding services. A Medical venue can be inspected at any time, or a patient/NMC/CQC compliant could be received, so The Company retains your work seeker records, for 2 years, from the date that you leave the bank/no longer wish The Company to provide you with work finding services, in order to ensure your documents can be provided when this is required. The term in which work finding services are being offered, is while the Company is sending you job options / information to consider and/or when you are participating in work via the Company.
The Company must also retain payroll records, holiday pay, sick pay and pensions auto-enrolment records for as long as is legally required by HMRC at such time and under the associated national minimum wage, social security and tax legislation.
4. Your Rights
Please be aware that you have the following data protection rights:
- The right to be informed about the personal data the Company processes on you;
- The right of access to the personal data the Company processes on you;
- The right to rectification of your personal data;
- The right to erasure of your certain personal data in certain circumstances;
- The right to restrict processing of your personal data;
- The right to data portability in certain circumstances;
- The right to object to the processing of your personal data that was based on a public or legitimate interest;
- The right not to be subjected to automated decision making and profiling; and
- The right to withdraw consent at any time.
If you have any queries regarding your rights, please feel free to ask The Company at any time. While the company does not rely on consent to process your personal data, should an occasion arise where data is required, which does rely on your consent, you have the right to withdraw that consent at any time by contacting Janine Ellis.
5. Automated decision-making
The company does not carry out Automated decision-making.
6. Complaints or Queries
If you wish to complain about this privacy notice or any of the procedures set out in it please contact: Janine Ellis. (Director and person, with responsibility for Data). You also have the right to raise concerns with Information Commissioner's Office.