PRIVACY POLICY

The purpose of this document is to set out the privacy entitlements of Data Subjects (living persons), as defined in the General Data Protection Regulation (GDPR). Privacy can only apply to information that is not already in the public domain and GDPR only applies to such personal data.

The General Data Protection Regulation (GDPR) is a European Union Regulation that sets out the data entitlements of data subjects and the obligations of those who process the personal data of data subjects. GDPR seeks to protect and enhance the rights of data subjects. These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data and the unrestricted movement of personal data within the EU.

Our company collects data from you and uses that data to place you in employment with third parties which involves making telephone contact with you, emailing you with positions that may be of interest to you, and sharing your data with potential employers. When you contact us, you are engaging in a contractual arrangement whereby our company is acting as an agent for you in your pursuit of an employment position with a third party on either a permanent or temporary basis until you either opt out (which you can do at any stage) or we decide to desist in promoting you to potential employers.

Our company in its capacity as your agent works is a Data Controller in respect of your data.

We collect personal data about you from the application forms and questionnaires you may be asked to complete; we also gather personal data from records of our correspondence, phone calls, emails and details of your visits to our website, including but not limited to personally identifying information like Internet Protocol (IP) addresses. This information can be used to identify visitors to our website and to collect statistics about the behaviour of visitors to our website.

Our website uses cookies; a cookie is a text file that a Web browser stores on a user’s machine. Cookies are a way for Web applications to maintain application state. They are used by websites for authentication, storing website information/preferences, other browsing information and anything else that can help the Web browser while accessing Web servers. If you do not wish to have cookies placed on your computer, you should set your browser to refuse cookies before using our website.

Data Minimisation Principle: We will only collect the information we need so that we can ensure adequate information is provided to our employer/clients consistent with the requirements of the placement relevant to you.

This agency does not sell or broker your data.

This company relies upon the following legal bases for data collection:

• Information is required to perform our role as the employment agent between you the candidate and potential employers. The basis of data gathering in that instance is contractual requirements. This will include identification information such as but not limited to name, address, date of birth, information regarding education/qualifications and reference checks.
• Information is required in order to perform our statutory obligations such as tax returns and compliance with employment permit legislation. This information will include PPS numbers and where relevant GNIB card copies.
• Information is sought on your express and explicit consent in relation to training options.
• Information is processed in the legitimate interests of the business of the employment agency, and where so processed, it will be in accordance with and subject to your data subject rights and entitlements.

Through agreeing to this privacy notice you are consenting to us processing your personal data for the purposes outlined. You can withdraw consent at any time by emailing dpo@facilitas.ie or writing to us, at the address provided in section 9 of this document.

• A necessity of our contractual engagement is that we share your personal data with our employer/clients. We have in place Data Sharing Agreements or Data Processing Agreements with all such employer/clients and we have done our utmost to ensure that all such parties process your data in a manner that is consistent with this Privacy Notice and GDPR. Our employer/clients may themselves be subject to third-party audits either in the form of ethical audits, governmental/statutorily required audits or legal obligations, these are deemed a necessity of the contract of engagement between you and our company and on this legal basis your personal data will be shared to comply with these requirements.

• We do not broker or pass on information gained from your engagement with the agency. However, we may disclose your Personal Information to meet legal obligations, regulations or valid governmental requests. The agency may also enforce its Terms and Conditions, including investigating potential violations of its Terms and Conditions to detect, prevent or mitigate fraud or security or technical issues; or to protect against imminent harm to the rights, property or safety of our company, its clients and/or the wider community.

We will process personal data for the duration of any contract. After the contract has expired we will continue to store personal data only for the periods needed to meet any legal obligations as set out in the table below. After these periods any personal data not needed will be deleted.

Data is held in Ireland in our Private Cloud Solution in Cork Internet Exchange (CIX) and with our web-hosting service provider, TMD Hosting in Amsterdam (TMD Hosting). We do not store personal data outside the EEA.

Your rights as a data subject

For the entirety of the time that we are in possession of your data, you have the following rights:

1. Right of access: you have the right to request a copy of the information that we hold about you.
2. Right of rectification: you have a right to correct data that we hold about you that is inaccurate or incomplete.
3. Right to be forgotten: in certain circumstances, you can ask for the data we hold about you to be erased from our records.
4. Right to restriction of processing: where certain conditions apply you have a right to restrict the processing.
5. Right of portability: you have the right to have the data we hold about you transferred to another organisation.
6. Right to object: you have the right to object to certain types of processing such as direct marketing.
7. Right to object: to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling.

These rights may on occasion need to be modified/curtailed by statutory or competing obligations, for example, you may request that we delete your data, however, if we have been your employer will only do so after the statutory period of record retention has expired. In the event that we are obliged to refuse your request in accordance with your data subject rights, or if we are obliged to place conditions on our assent to your request, we will provide you with a reason as to why which you have the right to legally challenge.

At any time following a request from you we can confirm what information we hold about you, as well as how and why it is being processed.

Access to personal data will require proof of identification.

We will accept as valid the following forms of ID when information on your personal data is requested

• A copy of your national ID card, driving license, passport, birth certificate and a utility bill not older than three months.
• A minimum of one piece of photographic ID listed above and a supporting document is required.
• If we are dissatisfied with the quality, further information may be sought before personal data can be released.
• All requests should be made to dpo@facilitas.ie or in writing to us at Attn: Data Protection Office, Unit 10B Santry Business Park, Santry, Dublin 9

You can request any of the following personal data at any time.

• Identity and the contact details of the person or organization that has determined how and why to process your data.
• Contact details of the data protection officer, where applicable.
• The purpose of the processing as well as the legal basis for processing.
• If the processing is based on the legitimate interests of our company or a third party such as one of its clients, information about those interests.
• The categories of personal data collected, stored and processed.
• Recipient(s) or categories of recipients that the data is/will be disclosed to.
• How long the data will be stored.
• Details of your rights to correct, erase, restrict or object to such processing.
• Information about your right to withdraw consent at any time.
• How to lodge a complaint with the supervisory authority (Data Protection Regulator).
• Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data.
• The source of personal data if it wasn’t collected directly from you.
• Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.