Data Privacy Recruitment

Data Privacy Notice – Recruitment at Crest Solutions

This privacy notice is specific to the recruitment process of the HR Department of Crest Solutions Ltd and its subsidiary, Crest TS UK Ltd (Crest Solutions). Here at Crest Solutions Ltd we take your privacy seriously and will only use that information to manage you through our recruitment process. The intended audience of this notice includes candidates who wish to seek employment with Crest Solutions.

Your personal data – what is it?

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation 2016/679 (the “Regulations”).

Who are we?

Crest Solutions Ltd and its subsidiary, Crest TS UK Ltd is the data controller and data processor (contact details below). A data controller is the legal body who controls and is responsible for the keeping and use of personal information on computer or in structured manual files. A data processor is the legal body who processes personal data on behalf of the data controller.

What personal data do we process?

The HR department collect and process the below mentioned personal data of recruitment candidates. This data is collected in a number of manners including from the Data Subject themselves by applying for employment with Crest Solutions, publicly accessible platforms such as Irish Jobs, Linked In etc. Crest Solutions are fully compliant with the terms of use of these platforms and once our HR team reaches out to the data subject and confirms that they are still seeking employment/opening to discussing employment opportunities, the data shall be further processed in the same manner as if it was collected directly from the data subject.

While the table below comprises of a myriad of data topics not all of these are held on every candidate. This is primarily due to Company guidelines on particular data retention periods

Name To source employment
AddressTo source employment and to understand preferred geographical location
Phone NumberTo source employment and contact you regarding roles
Email AddressTo source employment and contact you regarding roles
Current EmployerTo source employment and determine notice period
Current Job TitleTo source employment
CV and Cover LetterTo source employment and understand level of experience
Salary expectationsTo source and negotiate suitable employment
Social Media LinksTo source employment
ReferencesTo verify CV details

How do we process your personal data?

Crest Solutions Ltd complies with its obligations under the Regulations by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

We use your personal data for the following purposes;

  • To recruit candidates for current or future vacancies

What is the legal basis for processing your personal data?

  • In order to process this information, which may or may not include special categories of personal data per Article 9 of the GDPR, Crest Solutions relies on the consent of the data subject. This is collected and gathered at the point of initial contact, it is logged in our recruitment portal, HireHive, and is tracked appropriately. The data subject is informed of the processing activity and what data shall be processed for what reasons. The data subject is informed of their own rights.
  • The processing is necessary for compliance with a legal obligation e.g. application forms and interview notes are maintained for 12 months post application to enable feedback or challenge legal action taken against the Company
  • The processing is necessary for the performance of a contract. Once the candidate has been successful in securing employment, then they are subject to a contract of employment for which certain data processing activities are essential in order to perform the contract

Sharing your personal data

Crest Solutions is committed to protecting the security of your data. We have an effective data protection regime in operation along with in house procedures to secure and protect your data from unauthorised access and use.

All the personal data we process is processed by our staff in Ireland and the UK however for the purposes of IT hosting and maintenance, this information is located on servers within the European Union and hosted by an external partner.

During the process of sourcing employment for the candidate the following information is shared. When data is shared with the HR department, it is done so in a secure manner using our recruitment database, HireHive or via password protected email.  Hardcopy formats of the CV may be printed for interview stage and are locked in secure storage within the HR department along with interview notes following the interview.

Information

Shared with

Reason

Name

Internally and third-party client where applicable

To source employment

Address

Internally only

To source employment and to understand preferred geographical location

Phone Number

Internally and third-party client where applicable

To source employment and contact you regarding roles

Email Address

Internally and third-party client where applicable

To source employment and contact you regarding roles

Current Employer

Internally and third-party client where applicable

To source employment and determine notice period

Current Job Title

Internally and third-party client where applicable

To source employment

CV and Cover Letter

Internally and third-party client where applicable

To source employment and understand level of experience

Salary expectations

Internally only

To source and negotiate suitable employment

Social Media Links

Internally only

To source employment

References

Internally only

To verify CV details

How long will we keep it?

Crest Solutions Ltd will keep your personal data for a period of 12 months to contest any legal actions taken against the Company by an unsuccessful candidate.

Some personal data may be held beyond this time frame to enable the Company to consider the applicant for future opportunities with the organisation.  In such cases, explicit consent will be sought from the Data Subject.  Extensions to this time limit may be sought on an annual basis and you can unsubscribe after the retention period via return email.

What are your rights?

Unless subject to an exemption under the Regulations, you have the following rights with respect to your personal data:

  • Subject access
  • To have inaccuracies corrected
  • To have information erased
  • To object to direct marketing
  • To restrict the processing of their information, including automated decision-making
  • Data portability

Transfer of Data Abroad

Crest Solutions Ltd does not transfer personal data outside the EEA unless explicit consent is granted by the Data Subject.

Automated Decision Making

Crest Solutions Ltd does not operate an automated decision-making platform.

Contact Details

Our HR Manager is Gráinne Hegarty and you can contact her at grainne.hegarty@crestsolutions.ie