The EU General Data Protection Regulation (GDPR) is the most significant piece of European privacy legislation in recent history, replacing that of the 1995 EU Data Protection Directive (European Directive 95/46/EC). It aims to support the rights individuals have on data about themselves which is collected and stored. It also aims to detect, identify and mitigate against data breaches or leaks for all companies in the EU, as well as enforcing reporting on these issues. This aims to create one uniform policy across the EU regardless of whether the UK is part of the European Union. Any business that deals with EU nationals and business alongside their data must comply with the legislation.
Chiltern Hill (“we” / “us”) aims to comply with the applicable GDPR regulations as a data controller. Working alongside its employees, clients, candidates and suppliers it will comply when the GDPR legislation takes effect on 25th May 2018.
Chiltern Hill uses Third Party suppliers and software to process, control and manage data. These systems have been audited in line with GDPR commitments and outlined below. In the context of this statement, data subject refers to the person or entity submitting data and can include employees, candidates, clients and other individuals or organisations that Chiltern Hill work with.
Who we are?
Chiltern Hill is predominantly a professional services company who specialises in recruitment services – we advertise opportunities and placements publicly and people submit their information freely.
Data collection and processing is necessary for the performance our business operations. By submitting data, the data subject agrees that this data can be processed and stored. We obtain consent to process and store personal data including but not limited to; name, email and mobile number. This data is necessary to ensure the data subject is suitable for engagement including but not limited to, job placements, business opportunities with Chiltern Hill and other reasons for communication. Chiltern Hill reserve the right to contact data subjects who have submitted this data both upon submission and in the future to ensure data is accurate.
Our Terms of Business and Contracts with our clients will also include safeguards to protect any contact information and customer data that is shared through our business services.
Accepting this Privacy Notice:
Chiltern Hill process your personal data in accordance with this Privacy Notice, unless this conflicts with applicable law, whereby applicable law will prevail.
Upon submission of your personal data, you agree that:
- You have read and understood this Privacy Notice and agree to the use of your personal data as set out herein.
- Your personal data may be transferred and processed worldwide, including countries that may not be deemed to provide the same level of data protection as your home country, for the purposes and in the manner specified in this Privacy Notice.
- You are not required to provide any requested information to us but failing to do so may result in us not being able to continue our services for which you have applied.
- Please note this Privacy Notice does not form part of any contract of employment offered to candidates or clients engaged by Chiltern Hill.
As a data subject you have the right to request access to the personal data Chiltern Hill have collected about you. This could be for the purpose of reviewing, modifying, or requesting deletion of the data. This Privacy statement confirms that Chiltern Hill ensures that all of our candidates and clients have the following rights with regards to the data that we hold on them;
- The right to be informed;
- The right of access;
- The right to rectification;
- The right to erase;
- The right to restrict processing;
- The right to data portability;
- The right to object;
If you would like to make a request to access, review, or correct the personal data we have collected about you, or to discuss how we process your personal data, please contact us at [email protected].
Depending upon the circumstances and the request, we may not be permitted to provide access to personal data or otherwise fully comply with your request; for example, where producing your information may reveal the identity of someone else.
Personal Information Collected:
Chiltern Hill is a recruitment and search firm and as such we collect a variety of personal data necessary to provide such services in a secure and highly confidential database accessible only by Chiltern Hill.
Personal information collected by Chiltern Hill is collected from both publicly available sources such as, but not limited to; third party employer websites and LinkedIn, submissions of information to our website via candidates directly and from telephone conversations and meetings with candidates where the information was directly disclosed to our consultants. Chiltern Hill is required to collect personal information such as name, professional experience, career history, education history, resume, salary information and contact information in order to assess candidate’s suitability to roles that they can be put forward to. It is Chiltern Hill’s legitimate interest to collect this information in order to ensure candidates are not approached for roles unnecessarily which would not be appropriate for them.
We collect information about you to make your job search as easy and safe as possible. This data is important; we understand that. This is why we’re committed to protecting your privacy online.
We will collect your personal details, including but not limited to your name and contact details (together with your e-mail address) and other relevant information from your Curriculum Vitae ("CV"). On occasion this will also include sensitive personal information such as details of criminal convictions and ethnic origin. When we receive your details and CV electronically, this may be through a direct application on one of our websites or an application that you have made through a third party job board.
How will we use your personal data?
We use the information we collect to provide you the best possible service. This includes notifying you of future job opportunities, improving our websites and answering your questions. We may also use your information to contact you about industry updates, events, promotions and competitions. More uses listed below:
- to provide our services to you;
- to maintain our business relationship, where you are a user of our website, a client or candidate;
- to enable you to submit your CV for general applications, to apply for specific jobs or to subscribe to our job alerts. Please see the separate section on your CV below which outlines additional uses and disclosures;
- to match your details with job vacancies, to assist us in finding a position that is most suitable for you and to send your personal information (including sensitive personal information) to clients in order to apply for jobs;
- to retain your details and notify you about future job opportunities other than the specific role for which you have contacted us;
- to answer your inquiries;
- to direct-market products and services, advise you of news and industry updates, events, promotions and competitions, reports and other information. Before we do so, you will be given an option to opt-out of such communications and an option to unsubscribe will also be provided with each communication;
- to fulfill contractual obligations with our clients;
- to provide further services to you by sharing your personal information with other companies within our Group of companies as well as trusted third parties. Further details about this are set out in the separate section below on Sharing your Personal Information;
- to release personal information to regulatory or law enforcement agencies, if we are required or permitted to do so;
Who will you share my personal data with?
We may share your information with any member or employee of Chiltern Hill, and other trusted third parties, to help us deliver our services to you. Under certain circumstances, we may occasionally be required by a regulatory body or law enforcement agency to disclose certain personal information.
How long will we keep your personal data for?
We will store your data only for as long as necessary. What’s more, we conduct regular data-cleansing and updating exercises to make sure the information we have is relevant and accurate.
We are committed to ensuring that your information is secure. In order to prevent your Personal Data against unauthorised access, accidental loss, improper use and disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect. However, the internet itself is not completely secure and although we will do our best to protect your Personal Data the transmission of your data to us is done so at your own risk.
Despite these precautions and measures taken to protect data security, Chiltern Hill cannot guarantee that unauthorised persons will not obtain access to your personal information.
Your personal data may be accessed by recruiters and interviewers working in the country where the position for which you are applying is based, as well as by recruiters and interviewers working in different countries within the Chiltern Hill organisation. Individuals performing administrative functions and IT personnel within Chiltern Hill may also have limited access to your personal data in order to perform their jobs.
If at any time you’d like to withdraw your consent to Chiltern Hill holding your data, then please do so by [email protected].
Should you wish to report an alleged data breach under the General Data Protection Regulation (GDPR), please email [email protected].
If you would like a copy of the information held on you, please [email protected].
Chiltern Hill may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. Please check our website regularly to keep up-to-date.
Last updated: 3rd June 2019.