...Turning Data into Action !

Data Privacy Policy

Specialist Technical Recruitment.

Wiz Analytics is a leading recruitment consultancy company working on an annual basis with thousands of candidates and clients world-wide.

This website offers you a platform to upload your CV and other personal data to improve your user experience, and to use functions such as, CV registration and job applications. You are responsible for the accuracy of the personal data inputted. If you use functions on the website which access data from external sources, such as LinkedIn, please be aware that the website will access your personal data from these sources.

Our reputation as a recruiter is reliant on the trust of people we work with, and consequently the effective and professional use of the information you provide us is paramount.

Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights.

Overview

This Privacy Policy explains what we do with your personal data, whether as part of helping you find a job, developing your career, providing you with a service that may be of interest, or simply as a result of you visiting our website.

We respect your right to privacy. Our overall aim is to ensure that our collection and use of personal information is appropriate to the provision of services to you and is in accordance with applicable data protection laws.

Contents

Important definitions in this policy
What does Wiz Analytics do?
Where does Wiz Analytics collect data from?
What information do we collect on Candidates?
What information do we collect on Client contacts?
What is our lawful basis for processing your personal data?
How do we share your personal information and who do we share it with?
International transfers
Personal information, cookies and websites
How we safeguard your personal data
Data retention
Your rights, complaints, questions and suggestions
Marketing activities
Changes to our Privacy Policy

Important definitions in this policy

"You" are a candidate, potential candidate, consultant, client, potential client or contact at any other organisation involved in the introduction and/or supply of a candidate's services, or an organisation that is deemed to require the type of candidates' Wiz Analytics offers, or an organisation that has the type of jobs that Wiz Analytics recruits for, or you work at an organisation whose business activity is logically connected with the business activity of Wiz Analytics, and hence are a legitimate business interests.

References in this policy to:

"hirer" and "client" mean any hiring organisation to which we offer and/or provide temporary and/or permanent recruitment services;

"client contact" means a responsible owner at a client;

"candidate" means a potential or actual candidate for a permanent or temporary role;

"consultant" means a person whose services are supplied via Wiz Analytics to work on temporary assignments with a hirer;

"referee and/or emergency contact" means a person whose personal details a candidate provides for the purposes of providing a reference or acting as their emergency contact

Specifically, this privacy policy provides you with details about the personal information we collect and hold about you, how we use your personal information and your rights regarding your personal information.

It does not cover any use of your personal information by:

an actual or potential employer or hirer;

an umbrella company; or

any other organisation involved in the supply of your services via us to a hirer, to whom we may provide your personal information as part of the recruitment process. That use will be governed by the relevant employer's or hirer's privacy policy.


What does Wiz Analytics do?

The core of what we do is twofold.

Firstly, it is to provide services to help candidates develop their careers. We do this through assessing and matching people with potential job opportunities, as well as providing wider services to help them in their careers, such as invitations to networking events and opportunities to take part in research.

Secondly, we work with clients to provide recruitment, consultancy and outsourcing services to help them solve recruitment, talent, technology and other related challenges.


Where does Wiz Analytics collect data from?

This privacy policy applies to the collection, storage and use of personal information collected by Wiz Analytics ("we" or "us"):

  • via our website at www.wizanalytics.com; or
  • as a result of you responding to an advertisement posted by us on a job board, online CV library or via social media; or
  • as a result of us matching your CV, as uploaded by you onto a job board, online CV library or a social media site, to a vacancy we are seeking to fill for one of our clients; or
  • as a result of personal recommendations; or
  • from company websites; or
  • from your business card; or
  • from our manual searches on LinkedIn; or
  • in the course of us providing recruitment, resourcing, outsourcing or consultancy services to you ("Services")

What information do we collect on Candidates?

Candidates:The personal information we collect about you where "you" are a candidate or placed consultant.

Wiz Analytics aims to collect the minimum data it needs to perform its role. Typically, this is name, address, job title and contact details. In addition, if you are a candidate being considered for a role it may also include your CV / resume as well as other details about your skills and experience.

We may also collect other personally identifiable data, for instance we may be engaged in equal opportunity monitoring, or need information to complete a contract for you or our client. This data can include age, identity card number, passport number, driver license number, educational certificate numbers, address, email address, user ID and passwords, gender, date of birth, marital status, occupation, income range, bank account details, financial information, contact information such as telephone, mobile, nationality, personal website or social media links or other data which may be required by local regulations.

If you would like a more detailed description of the personal data we collect about you, please see Appendix 1.

Referees and emergency contacts: we collect basic contact details (such as name, title, address, email and tel) so that we can contact you for a reference or as an emergency contact for one of our candidates/or contractors.


What information do we collect on Client contacts?

The personal information we collect about you where "you" are a contact at one of our clients or at an MSP, umbrella company or personal service company involved in the supply of a person's services to a hirer.

We need to collect information about you as an essential part of providing our Services.

We may collect personal information about you when:

  • we contact you with a view to providing Services to you; or
  • you email us expressing an interest in working with us;
  • you provide us with your business card or other information provided to us, given to our employees at sales and marketing events;
  • you post information or advertisements on job boards or social media websites;
  • we provide Services to you as an actual or a potential hirer of your services; or
  • we complete contractual documentation relevant to the Services,
  • we will usually collect the following information from or about you:
    • your name;
    • your postal address;
    • your phone and e-mail details;
    • details of your role, title and responsibilities within your organisation;

    where "you" are a client:

    • any opinion or feedback you share with us regarding a candidate or consultant;
    • details of any queries you raise with us regarding the Services;
    • details of any recruitment and/or resourcing requirements or plans you share with us.

What is our lawful basis for processing your personal data?

We use the data we gather to perform a number of tasks, including:

  • placement of a candidate into a particular employment role as defined by our clients; or
  • the provision of resourcing, outsourcing or consultancy
  • maintaining our records of our candidates, clients and contacts;
  • conducting marketing,
  • profiling and business development activities as well as market research and statistical analysis regarding our products and/or services;
  • complying with any legal or regulatory requirements and to make the necessary disclosure under the requirements of any applicable law, regulation, direction, court order, guideline, circular or code which are applicable to us for the prevention of crime.

Client contacts:

We use the information collected from clients to ensure that we provide business services to you. This will involve identifying candidates that will meet your requirements, or providing other business services from our portfolio.

Suppliers:

We use the data collected to ensure the business arrangements between us run smoothly.

Referees and emergency contacts:

we use the data collected to contact you for a reference or to contact you as a candidate's emergency contact in the event of an accident or other emergency.

Our lawful basis for processing your data

We consider that it is necessary for our legitimate interests as a recruitment business to process your personal data. At different stages in the recruitment processes, we also have other lawful grounds for processing your data such as compliance with our legal obligations and where it is necessary for the performance of contracts related to the recruitment process.

A full statement of our legitimate interest may be found in Appendix 6.

We think you will have an expectation that if you are looking for employment or have posted your CV or other professional information on a job board or professional networking site, that you are happy for us to collect and use your personal data to provide our recruitment services to you and to share that information with prospective employers.

During the recruitment process the client may want additional information (such as the results from psychometric evaluations or skills tests) or to confirm your references, qualifications and criminal record, where appropriate and in accordance with local laws.

We may also need to use your personal information for internal administrative purposes, such as contract administration, payroll and invoicing.

We also have our own obligations under law and we may be required to share your data in connection with those legal requirements.

Where we are required by law to obtain your consent to the processing of your personal data we will obtain it.

Candidates and consultants – for a more detailed description of how we use your data, please see Appendix 2.

Client contacts and other third parties involved in the supply of resourcing services (e.g. umbrella companies and personal service companies); We collect, store and use your name and contact details for our legitimate interests, so that we can:

  • send you the details of candidates and consultants and contact you about our Services; and
  • maintain our business relationship with you.

This allows you to be contacted to receive and administer any Services which you or your organisation has requested.The exchange of personal data of our candidates and client contacts is an essential part of what we do as a recruitment business and, as such, it is in our legitimate interests to process your data for such purpose.

In the case of contacts at umbrella companies and personal service companies this allows you to be contacted to receive, on behalf of your employer, details of current and future assignments, related timesheet data and payment details.

We do not believe that this storage and use of your personal information will unduly prejudice your rights or freedoms.

All users of the Site and our Services

We collect, store and use your personal information for the following purposes:

  • to make the Site available to you; and
  • to provide any Services that you request.

Sometimes, our use of your personal information is for purposes which are ancillary to the provision of the Site and then Services, or which are desirable in order to make them to operate more effectively. In those circumstances, we believe we have a legitimate interest in handling your personal information, and do not believe that this storage and use of your personal information will unduly prejudice your rights or freedoms.

For more detail about these circumstances, please see Appendix 3.


How do we share your personal information and who do we share it with?

Your personal data provided to us is processed Wiz Analytics. We will ensure that:

  • access to your personal data is restricted to staff who are required to process such data as part of their job;
  • only necessary information is released to the relevant employees;
  • we seek your consent before sharing your details with any prospective employer or user of your services.

Referees: unless you specify otherwise we may share your information with any of our client(s) in relation to whose vacancy your reference was given. We will disclose information under the following circumstances:

Service and Site usage information: When we share anonymous information generated by our Services with our clients.

Third-party service providers: When we share information with third-party service companies for them to facilitate and support us in the provision of the Services. This includes:

  • IT support service providers;
  • providers of credit reference, vetting and screening services;

payment processors and software providers;

These organisations are appointed by Wiz Analytics as data processors and authorised to use your personal information only as necessary to provide the relevant services to us. These organisations are required to process such information based on our instructions and in accordance with this privacy policy. They do not have any independent right to share this information.

Compliance with laws and legal proceedings:

When we respond to court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims. When we believe it is necessary to share information in order to investigate, prevent or take actions against illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our terms of use, or as otherwise required by law.

Merger or acquisition: When we need to transfer information about you if we are acquired by or merged with another company. If we are involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified by email and/or a prominent notice on our Site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

Recruitment and resourcing services: When we are using your personal information in the context of our recruitment and resourcing services, then we may share your personal information with clients where we believe that you may be appropriate for a particular role or vacancy with that client.

Umbrella companies and personal service companies: When you inform us that you are supplying or intend to supply your services via Wiz Analytics to a client through an umbrella company or personal service company.

Recruitment Process Outsourcing and Managed Service Providers: In certain cases, there may be an organisation such as a managed service provider acting as a gateway for the supply of Services made via Wiz Analytics to the hirer. Where this is the case, we will share your information with such organisations to the extent that it is necessary for the purposes of the supply.

Where personal information is shared with clients, hirers, umbrella companies, personal services companies or managed service providers in the circumstances described above, then those organisations will handle your personal information in line with their own privacy policies.


International transfers

We want to make sure that your data is stored and transferred in a way which is secure. We will only transfer data outside of the European economic area where the recipient is compliant with the data protection legislation and the means of transfer provides approved safeguards. These will include contractual clauses, the EU – US privacy shield framework, or where the country concerned has been found adequate by the European commission in respect to the levels of data protection.

Wiz Analytics is a global company and to effectively provide the best service to both candidates' and clients we may send your information to entities which may exist outside of Europe, to overseas clients or to clients within your country who may in turn transfer your data internationally. We have ensured that we have an appropriate business relationship to ensure privacy of your data.

The data may also be stored on cloud-based storage for parts of our overall business process.

Please be aware that countries which are outside the European Economic Area may not offer the same level of legal protection for your personal information as under UK law, although any collection, storage and use of your personal data by us (or on our behalf) will continue to be governed by this privacy policy.


Personal information, cookies and websites

Our website may offer you the opportunity to pass your personal information to us in relation to a particular role which is of interest to you. This information may be routed through one of our 3rd party suppliers before it is delivered electronically to us. All of our 3rd party suppliers have been vetted to ensure that they will meet our own privacy and security standards in the collection and processing of your personal information.

Our website may also link or direct you to other websites or external content which are not within our control. Links to other websites may be provided for your convenience and information. While we will use our best endeavour to ensure that we link or direct you only to websites that share our privacy and security standards, we are not in the position to guarantee the same and we will not be responsible for the protection and privacy of any personal data which you provide on those websites. These sites have their own privacy statement in place, and we recommend you review these if you visit any linked website. You should therefore exercise caution including reviewing the privacy policy of those websites before disclosing any personal data.

Technologies such as cookies, beacons, tags and scripts are used by us and our affiliates, or analytics or service providers. These technologies are used in analysing trends, administering the Site, tracking users’ movements around the Site and to gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis.

We use cookies, for example, to remember users’ settings (e.g. language preference) and for authentication. Users can control the use of cookies at the individual browser level. If you reject cookies, you may still use our Site, but your ability to use some features or areas of our Site may be limited.

Please read more about how we use cookies in Appendix 4.


How we safeguard your personal data

Wiz Analytics is passionate about protecting your information. To this end we have put in place appropriate measures that are designed to prevent unauthorised access to and misuse of your personal data. These include measures to deal with any suspected data breach. If you suspect any misuse or loss of or unauthorised access to your personal information, please let us know immediately by emailing DPO@wizanalytics.com.

Your information is held on servers hosted by us or our Internet Services Provider. The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.


Data Retention

We don’t keep data for any longer than is necessary. For most people where we have limited contact it will be for a maximum of two years from the date of last contact with us. Where we have engaged with you more extensively, for instance we have worked with you as client, or interviewed / placed you as a candidate, we may retain data longer.

We will delete it after that time except where we need to keep any personal information to comply with our legal obligations, resolve disputes, or enforce our agreements.

For more information on our data retention policy please contact DPO@wizanalytics.com.


Your rights, complaints, questions and suggestions

You have certain rights in relation to your personal information which are outlined in this notice. If you would like to exercise any of your rights under the GDPR, please send an email with your Name, and Request to DPO@wizanalytics.com

More details on your rights may be found here in Appendix 5.

Wiz Analytics tries to meet the highest standards when collecting and using personal information. We take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate.

If you wish to complain about this policy or any of the procedures set out in it please contact our Data Protection Officer via DPO@wizanalytics.com.

In the EEA, you may also make a complaint to our supervisory body for data protection matters (the Information Commissioner's Office in the UK) or seek a remedy through local courts if you believe your rights have been breached.


Marketing activities

Periodically we may send you information that we think you will find interesting or to ask for your expertise in completing a survey. We may also send you information to:

  • market our full range of services
  • send you details of networking and client events and information about the industry sectors we think may be of interest to you.
  • Subject to any applicable local laws and requirements we will not, as a matter of course, seek your consent when sending marketing materials relating to the above but we will always give you the option to unsubscribe of any such mails.
  • Where we have previously engaged with you (for example where you have submitted an application or CV to us) or where you have posted your details on a job board we will assume that you have given permission for us to contact you with details of roles which we believe will be of interest to you. You will have the right to withdraw such permission at any time.

Profiling, Anonymous data & Third party sites

Profiling:

Wiz Analytics does not utilise any form of automated profiling at this time. All of our recruitment activities involve human decision-making during the process. This may change in the future if we implement automated technologies or machine learning, but we will only do so where appropriate and in accordance with local laws and regulations. Any changes to this policy will be notified as set out below.

Third party sites:

This website contains links to other websites operated by third parties. Please note that this privacy policy applies only to the personal information that we collect through the Site or the Services, and we cannot be responsible for personal information that third parties may collect, store and use through their website. You should always read the privacy policy of each website you visit carefully.


Changes to our Privacy Policy

This privacy policy was last updated on 04/01/2020.

Please check back regularly to keep informed of updates to this privacy policy. Where we make significant changes to this privacy policy, and we have your email address, we will send you notification of the changes.


Appendices

Appendix 1

We may collect personal data when :
  • you access and browse the Site (including when you submit personal information to us through data entry fields on the Site); or
  • you respond to an advert posted by us whether via a job board, LinkedIn or other social networking site; or
  • we download details uploaded by you onto a job board, LinkedIn or other social networking site in relation to a vacancy we are seeking to fill for one of our clients; or
  • we download details uploaded by you onto a job board, LinkedIn or other social networking site in connection with our internal market research ; or
  • you contact us by phone, email or otherwise; or
  • we provide Services to you or to an actual or a potential hirer of your services; or
  • we contact you with a view to providing Services to you; or
  • we provide on-boarding services to a hirer of your services,

we may collect the following information from or about you:

  • your name;
  • your postal address;
  • your phone and e-mail details;
  • your bank details
  • a copy of your passport details including your passport photograph;
  • your current and previous employment/work details, including job title and employer;
  • recruitment-specific details such as any professional certifications, education and qualifications, skills, career history, salary range, right to work status, citizenship, referee details and any other information relevant or required by law to enable us provide the Services;
  • any other information which you include in your CV or a completed application form;
  • any information which has been published or made available on a social media profile or job board (whether by you or a third party), or in any news media;
  • details of your umbrella company or personal service company;
  • the contract for services we hold with your umbrella company or personal service company relating to the work you do or will do for our client, including timesheet data and charge rates relating to the work you perform under that contract;
  • details of your referees and emergency contacts
  • references from third parties such as previous employers and nominated referees;
  • the results of pre-employment screening or vetting checks which we are asked or required to undertake in relation to you (including the results of any Disclosure and Barring checks and any information you provide relating to current and/or spent criminal convictions carried out on behalf of the hirer during the on boarding process);
  • any email communications, including attachments, which you send to us
  • the results of right to work checks.

You can update your CV or personal data at any time by forwarding a copy to cvs@wizanalytics.com


Appendix 2

We collect, store and use information that we obtain in relation to you for our legitimate interests:

  • so that we can contact you (via email, SMS or phone) about opportunities and assignments that we believe you may be interested in;
  • to help us to provide suitable candidates and consultants for our clients who engage us to assist them fulfil their recruitment and resourcing requirements;
  • to provide a channel through which you may submit your CV for general applications, to apply for specific jobs or to subscribe to our job alerts;
  • to match your details with vacancies, to assist us in finding a position that is most suitable for you and to send your information to clients for potential jobs. Please note that we will always obtain verbal or written consent before presenting your personal details to a client.
  • to enter into contracts which are necessary in order for your service to be supplies or made available to a hirer;
  • to provide recruitment-related support;
  • to carry out market research for our internal use;
  • to develop an industry-relevant database of candidates and clients to help meet our clients' resourcing requirements and connect candidates with work opportunities;
  • for internal record keeping purposes;
  • to carry out services that we, you or our client have requested including work-related references, qualifications and criminal references checking services, verification of the details you have provided from third party sources, psychometric evaluations or skills tests.

This storage and use of your personal information allows you to be contacted about roles which may be of interest to you, now or in the future, and we do not believe that this storage and use will unduly prejudice your rights or freedoms.

We will store and use your personal information in order to comply with relevant legal obligations to which Wiz Analytics is subject, including carrying out:

  • verification of your identity to comply with The Conduct of Employment Agencies and Employment Businesses Regulations 2003;
  • right to work checks to comply with relevant immigration legislation;

In other, relatively limited circumstances, we will carry out further relevant background checks as may be requested by our client. In these circumstances we will be acting on behalf of our client and the handling of your personal data will be governed by the client's privacy policy.

Where you are successful in securing temporary assignment work with one of our clients we will store and use your personal information for the purposes of completing and administering contracts with your chosen personal service company or umbrella company and for processing payment to such company in respect of services you have performed for our client. Such processing will be for our legitimate interests so that we can provide Services to you and our client. We do not believe that this storage and use of your personal information will unduly prejudice your rights or freedoms.

Such processing will also be necessary for the performance of a contract to which you are party (i.e. your contract with the umbrella company or your personal service company relating to the supply of assignment services) and/or in order to take steps prior to you entering into such contract. If our client requires us to collect, store and use your health data and/or any Disclosure and Baring Checks we will, on our client's behalf, seek your consent to processing such data. You can withdraw your consent at any stage but this may prevent us from being able to deliver our recruitment services to you.


Appendix 3

The relevant circumstances are:

  • detecting and preventing fraud;
  • keeping our Site, apps, products and IT systems secure;
  • ensuring that our own processes, procedures and systems are as efficient as possible;
  • analysing and enhancing the information that we collect;
  • determining the effectiveness of our promotional campaigns and advertising; and
  • contacting you with products and services which we think may interest you.

In some, relatively limited, circumstances we need to handle your personal information in a certain way to be able to comply with our legal obligations. For example if we:

  • are requested to disclose your personal information to regulatory bodies;
  • need to demonstrate our compliance with applicable law;
  • are subject to any enquiry from the Employment Agencies Standards Inspectorate or HMRC.

Appendix 4

A cookie (small text files that store information on your hard drive) may be used in the processing of your personal data. A copy of this text file is sent to your computer and/or device whenever it communicates with our server. Cookies help us to understand which sections of our websites are frequently visited. With this information we are able to adapt our website to suit your demands and provide you with a more customised and personalised user experience.

We may collect the following information during your visit to our website and/or the fully qualified domain name from which you accessed our site, or alternatively, your IP address:

  • the date and time you access each page of our website
  • the URL of any web page from which you accessed our site (the referrer)
  • the web browser that you are using and the pages you accessed.

Some webpages may require you to provide a limited amount of personal information in order to enjoy certain services on a website (system login credentials, email addresses and contact information). This personal information will only be used for its intended purpose, i.e. to respond to your message or deliver the requested services. You may configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is sent.


Appendix 5

You have the right to request that we:

  • provide access to any personal information we hold about you;
  • update any of your personal information which is out of date or incorrect;
  • delete any personal information which we are holding about you;
  • restrict the way that we process your personal information;
  • prevent the processing of your personal information for direct-marketing purposes;
  • provide your personal information to a third party provider of services;
  • provide you with a copy of any personal information which we hold about you; or
  • consider any valid objections which you have to our use of your personal information.

We will consider all such requests and provide our response within a reasonable period (and in any event within any time period required by applicable law). Please note, however, that certain personal information may be exempt from such requests in certain circumstances.

If an exception applies, we will tell you this when responding to your request. We may request you provide us with information necessary to confirm your identity before responding to any request you make.

You may request to unsubscribe from job alerts and marketing material at any time. If you wish to contact us with respect to the above matters please email us at DPO@wizanalytics.com.


Appendix 6

GDPR Legitimate Interest of Wiz Analytics / GDPR Legal Basis of Processing Wiz Analytics

1 INTRODUCTION

Wiz Analytics consider the protection and confidentiality of personal data to be very important and we are committed to protecting and respecting Personal Data in accordance with the provisions of the various data acts and laws and regulations that apply to the company. The purpose of this Appendix is to identify the lawful basis of processing for Wiz Analytics.

2 LEGAL BASIS OF PROCESSING

The regulations state that you must have a valid lawful basis to process personal data. Looking at the regulation we have determined that our legal basis processing will be on “legitimate interests”. We have determined that this is appropriate because we use data in a way that the data subject would reasonably expect and we believe there is a minimal privacy impact.

The justification for this is that Wiz Analytics is a recruitment consultancy. Our primary business purpose is twofold:

  • to provide services to help candidates develop their careers. We do this through assessing and matching people with potential job opportunities, as well as providing wider services to help them in their careers, such as invitations to networking events and opportunities to take part in research.
  • work with clients to provide recruitment, consultancy and outsourcing services to help them solve recruitment, talent, technology and other related challenges.

Any data subject who contacts Wiz Analytics will have a reasonable expectation that we will need to store their personal information to perform our business purpose. In other words, the data subject would reasonably expect us to use and process their personal data.

Our legitimate interests therefore are to:

  • develop business relationships with clients, and client staff, to help them solve their recruitment, career or outsourcing and technology and leadership consulting and assessment work;
  • challenges.
  • To look for, and encourage candidates, to contact Wiz Analytics when they are interested in potential job opportunities.
  • To process prospective candidates interests in employment and service contract opportunities with our clients.
  • To process and retain information required to provide advice and support for personal development and leadership improvement for our clients.

In this regard we are also mirroring the legitimate interest of any client looking to fill an employment requirement acting as a data processor.

To perform these, we need to collect appropriate information and to store this information as required by other legal obligations. The processing of data is essentially manual. Our consultants will look at client requirements and the information we have stored from potential candidates to determine the best candidates to put forward to the client for consideration.

By appropriate information – we will store no more information than is required to perform the purpose or is required by subsequent regulation.

In this regard we are operating within the Data Subject ’s interests – by which we mean they have an interest in a new recruitment role which we are able to facilitate or their career or leadership development – but within this, we will maintain the rights and freedoms to the Data Subject, data as defined by the regulation.

With regard to the processing of personal data and third parties that may be used, Wiz Analytics considers that it is the controller as defined by the regulations and the third parties that may be used are processors.

3 LEGITIMATE INTEREST

  • Our legitimate basis is the pursuit of our business services as detailed above
  • the storage and processing of personally identifiable information is necessary for this purpose - to this end we will store and process only the information required to fulfil our business services and to meet other legal regulations in relation to job placement activities.
  • We do not conflict with the Data Subjects interest in this manner and base this assumption on the fact that they will have a reasonable expectation that we will need to store and process their data order to perform our business services;

3.1 Legitimate interest assessment

3.1.1 Why are we processing the data?

Our purpose is to supply clients with suitable candidates for job requirements, provide consultancy on recruitment or talent and leadership related topics, or provide outsourcing solutions. In order to do this we have to store personal information regarding people, candidates, and client contact details.

In recruitment, we match candidate information against requirements provided by clients. We capture and store client contact details to communicate our services and submit candidates for consideration.

3.1.2 Benefit

In terms of benefit, we benefit from being able to pursue our legitimate and commercial interests in providing outsourcing and consulting services .

In recruitment the candidate or services company benefits through our supporting in helping to potentially find an employment opportunity or contract and the client benefits because we can help them fill their recruitment requirements with the minimum of effort on their part.

There are no wider public benefits.

3.1.3 Impact

If we were unable to operate in the above way, our business and our employees would suffer significantly.

3.1.4 Use of data

We will not use the data in any unethical or unlawful way.

3.2 Necessity

  • The processing furthers the interests of the company, the interests of the client and the interests of the candidates.
  • The processing of data and the matching of candidates is reasonable and fair.
  • There is no way that we can best serve the clients interest by collecting less data or operating in a less intrusive way.

3.3 Balancing

3.3.1 Our relationship with the Data Subject or candidate is that of a facilitator and career adviser.

3.3.2 Some of the data that we are required to collect (such as salary, bank details, passport information, diversity information, right to work or Visa information, criminal record checks, is considered particularly sensitive and private information but is only collected when required by other legal requirements or the client requires this information to make an employment decision.

Where the information collected is required by regulation, we would expect candidates to understand that we are required to collect this information for regulatory purposes. Other sensitive information required by the client – for example diversity information – we would be happy to explain the requirement to the candidate and if they object we would not be ableto pursue interests on their behalf.

3.3.3 Possible impacts As far as the storage and processing of personal information is concerned we do not believe there is any possible in the impact on the Data Subject because of the storage. If we or one of our processes have a data breach then there is significant impact on the Data Subject in terms of personal privacy. The significant risk to Wiz Analytics and the reputation of Wiz Analytics is therefore the possibility of a data breach.

We do not evaluate or record any vulnerabilities of our data subjects. For completeness – we do not store or process any data regarding children.

3.3.4 Safeguards We will be implementing a number of safeguards across our systems. As per the regulation we will be implementing privacy and protection by design, enhanced by software to ensure data loss prevention.

We will also provide for the data rights of the Data Subject including opt outs. However, it should be noted that a candidate for example cannot opt out of any data required by regulations or clients. If they are unwilling to provide this information, or have it stored or processed, we will be unable to offer recruitment services to them.

4 STAYING IN TOUCH

Legitimate interests will also apply to activities where we stay in touch with contacts via email, telephone call or social media, such as through inviting to career events, taking part in research or presenting job opportunities, as our use of personal data is proportionate, within their interest and reasonable expectation and has a minimal privacy impact.

5 FURTHER INFORMATION REGARDING LEGITIMATE INTEREST.

We are awaiting article 29 working party to publish further guidelines and guidance on legitimate interests under the GDPR, however no dates have been given as to when this may appear.

6 LEGAL BASIS FOR PROCESSING AND INDIVIDUAL RIGHTS

The first principle of the regulations requires that we process all personal data lawfully, fairly and in the transparent manner. Processing is only lawful if you have a lawful basis under article 6.

6.1 Article 6 - lawfulness of processing

Processing is only lawful if at least one of the following applies:

  • (a) Consent: the Data Subject has given clear consent for you to process their personal data for a specific purpose.
  • (b) Contract: the processing is necessary for a contract you have with the Data Subject, or because they have asked you to take specific steps before entering into a contract.
  • (c) Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations).
  • (d) Vital interests: the processing is necessary to protect someone’s life.
  • (e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.
  • (f) Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the Data
  • Subject ’s personal data which overrides those legitimate interests. (This cannot apply if you are a public authority processing data to perform your official tasks.)

It is the intention of Wiz Analytics to utilise 1, 2 3, and or 6 as a definition for our legal basis of processing depending on the services provided to our clients.