This privacy notice tells you about the information we collect from you when you engage with our targetconnect Link Share Vacancy Service. In collecting this information, we are acting as a data controller and, by law, we are required to provide you with information about us, about why and how we use your data, and about the rights you have over your data.
From the 25th of May 2018, we will be processing your personal data in accordance with the General Data Protection Regulations (GDPR). Up until that point we will continue to process your personal data in accordance with the existing Data Protection Act 1998 (DPA). This notice is written to comply with both the DPA and the GDPR.
We are GTI Futures, a company which is part of our parent company Group GTI. Our main address is:
The Fountain Building, Howbery Park
Benson Lane
Wallingford
Oxfordshire
OX10 8BA, UK
You can contact us by post at the above address, or via email at data.protection@groupgti.com or by telephone on +44 (0)1491 826262.
We are not required to have a data protection officer, so any enquiries about our use of your personal data should be addressed to the contact details above asking for the person responsible for data protection.
We request certain personal information from you in order for us to assist you in listing your vacancy on our or associated systems from our partner universities.
The personal information we collect are solely your contact detail, and details of your organisation.
Through the use of cookies and other similar technology we may record your interaction with our websites and systems to help improve the delivery of our services. In addition as part of our security measures we may also record the IP address from which you are engaging with us.
We do not collect or store any payment information. Any payments are done via a third party pay system (such as World Pay) for which you enter your details directly to them.
As part of the targetconnect Link Shared Vacancy Service we may receive your contact details where you have chosen from the system of a partner university to post a vacancy to a wider audience.
In some situations we may already have your records as an existing client within our systems.
We collect information about you in order to facilitate the processing of your vacancy and also to provide details for which candidates may contact you. We also may need this information for administrative purposes in case there are issues relating to your vacancy.
In addition, we sometimes use the anonymous personal data (ie. with all personal identifiers removed) for the purposes of research, industry trend reporting and for our own planning purposes and future developments.
Your information is stored in the databases that are called by our websites and other systems, which are based in the UK or Europe.
The personal information you provide is used predominantly to administer you vacancy and provide contact details for applicants. We may also use the information you provide to contact you in relation to opportunities with our websites to further promote vacancies that you have.
To be more specific your information may be used in one or more of the following ways:
In order to deliver the best possible integrated careers advice and services to you, from time to time we may transfer your personal details between our websites. This may on occasion be across different companies within our group. Before doing so we conduct a Data Protection Impact Assessment in order to ensure that any such transfers do not impact your rights. You may object to your data being processed in this manner by contacting us using the details above.
As part of the targetconnect Link Share Vacancy Service we may pass on your contact details where you have chosen via our targetconnect Link system to post your vacancy to a partner university or set of universities.
In some situations they may already have your records as an existing employer within their systems.
For the purposes of sending emails and maintaining engagement information we will maintain a secure copy of your personal data with our service partners whom provide the facilities to email users based on their preference criteria and track engagement. Access to this data is strictly controlled and we remain the data controller.
GTI may be required to share your personal information with certain public or legal authorities where there is a legislative obligation to do so.
There are no automated decision making processes that would impact you as a result of any automated processing. No judgements or decisions are made of an individual’s suitability for a particular role as a result of any processing that may take place.
The legal basis for processing under both the DPA and GDPR across our sites are outlined below:
Employer-related personal details (These are contact details associated with a person that has been supplied as part of a vacancy): Contractual necessity (Article 6(1)(b)), legal obligation (Article 6(1)(c) and legitimate interest (Article 6(1)(f))
It may be necessary for GTI to process your data in order to fulfil a contract with you such as sending your CV to an employer or recruitment consultant for a particular role you have applied for or are interested in. We also may need to process your data if you are an employer or school for the purposes of fulfilling our contractual obligations to you in the delivery of a service.
GTI may also process your data when it is in our legitimate interest to do so and in doing so it does not override any of your data protection rights. Our legitimate interests include:
You have the right to object to the processing of your data under legitimate interest should you feel that such legal basis is not warranted or feel that it overrides any of the rights that you may have.
Employer-related personal details: For the length of our relationship with you plus 6 years (Limitation Act (1980) in case the case where there may be a dispute. Some information may be required to be retained longer due to legal obligations (eg. HRMC).
By law, you can ask us what information we hold about you, and you can ask us to correct it if it is inaccurate.
You can also ask us to give you a copy of the information and to stop using your information for a period of time if you believe we are not doing so lawfully.
To submit a request by email, post or telephone, please use the contact information provided above.
In addition to the above you have the following rights under GDPR:
You can withdraw consent at any time where consent has been relied upon. If consent is the sole legal basis for processing, we will stop processing the data after the consent is withdrawn. The data will then be placed in a restricted processing mode until you have asked to exercise your right to erasure or the personal data falls outside stated retention period (whichever comes first).
We will periodically communicate with you by email, post, telephone or device notifications for the purposes of delivering our services to you. The legal purpose for which is under the legitimate interest provision under both GDPR and the Privacy and Electronic Communications Regulations (PECR).
However, should you be concerned about the content of these communications (such as unwanted marketing communications or simply want to change the way we communicate with you please log into your profile on the relevant website and change your preferences, or use the relevant unsubscribe link. Alternatively you can contact us by telephone or letter at the details provided above.
From time to time we may need to make changes to this notice. We will attempt to inform you of any changes that are made either through both email notifications or through associated websites. You can obtain the most recent version of this notice from https://groupgti.com/privacy/targetconnectlink or by contacting us directly. This privacy notice was last updated on the 10th of May 2018.
If you have a complaint about our use of your information you can do so with the relevant supervisory authority within the EU to which you are a resident, whom may refer the complaint to the UK supervisory authority.
Complaints in the UK can be made to the Information Commissioner’s Office via their website at www.ico.org/concerns/ or write to them at:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF