Privacy Notice under the EU GDPR for candidates and prospective candidates
The EU General Data Protection Regulation (GDPR) is the most significant piece of European privacy legislation in recent history, replacing that of the 1995 EU Data Protection Directive (European Directive 95/46/EC). It aims to support the rights individuals have on data about themselves which is collected and stored. It also aims to detect, identify and mitigate against data breaches or leaks for all companies in the EU, as well as enforcing reporting on these issues. This aims to create one uniform policy across the EU regardless of whether the UK is part of the European Union. Any business that deals with EU nationals and business alongside their data must comply with the legislation.
Acre Resources LTD (The Company) aims to comply with the applicable GDPR regulations as a data processor and controller. Working alongside its employees, clients, candidates and suppliers it will comply when the GDPR legislation takes effect on 25th May 2018.
Acre Resources LTD (The Company) uses Third Party suppliers and software to process, control and manage data. These systems have been audited in line with GDPR commitments and outlined below. In the context of this statement, data subject refers to the person or entity submitting data and can include employees, candidates, clients and other individuals or organisations that Acre Resources LTD (The Company) work with.
Acre Resources LTD (The Company) are predominantly a professional services company who specialise in recruitment in their main sectors. Acre Resources LTD (The Company) provides a variety of services including recruitment, psychometric assessments, business intelligence and more. For a full range and up to date list of our services please visit our website.
Acre Resources LTD (The Company) advertise opportunities and placements publicly and people submit their information freely. Data collection and processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract. The Contract a data subject enters will entail Acre Resources LTD (The Company) Terms and Conditions which is made available to them in both the signed contract, on the website and by request. The Company also have a disclaimer on all job advertisements that data submitted can be used for both current and future opportunities. By submitting data, the data subject agrees that this data can be processed and stored. We would obtain consent to process and store personal data including but not limited to; name, email and mobile number. This data is necessary to ensure the data subject is suitable for engagement including but not limited to, placements Acre Resources LTD (The Company) advertise, business opportunities with Acre Resources LTD (The Company) and other reasons for communication. Acre Resources LTD (The Company) reserve the right to contact data subjects who have submitted this data both upon submission and in the future to ensure data is accurate.
Should we ask you to provide certain information by which you can be identified, then you can be assured that it will only be used in accordance with this privacy statement.
Acre Resources LTD (The Company) is a wholly owned company and is the sole collector of all information and we are committed to protecting the privacy of your personal data. In this statement we announce our company (and website’s) policies regarding the collection, use and transfer of your personal data, the security methods Acre Resources LTD (The Company) will use to protect such data and your rights under the General Data Protection Regulation (GDPR).
Accepting this Privacy Notice
Acre Resources LTD (The Company) will process your personal data in accordance with this Privacy Notice, unless this conflicts with applicable law, whereby applicable law will prevail.
Upon submission of your personal data, you agree that:
You have read and understood this Privacy Notice and agree to the use of your personal data as set out herein.
Your personal data may be transferred and processed worldwide, including countries that may not be deemed to provide the same level of data protection as your home country, for the purposes and in the manner specified in this Privacy Notice.
You are not required to provide any requested information to us but failing to do so may result in not being able to continue your candidacy for the job for which you have applied.
All of your representations are true and correct to the best of your knowledge and belief, and you have not knowingly omitted any related information of an adverse nature. Providing any inaccurate information may make you ineligible for employment.
Please note this Privacy Notice does not form part of any contract of employment offered to candidates hired by Acre Resources LTD (The Company).
Acre Resources LTD (The Company) treats all Personal Information in a manner consistent with the requirements of the General Data Protection Regulation (GDPR). Acre Resources LTD (The Company) take reasonable steps to ensure personal data is accurate, up to date and complete for the purposes for which it is collected and used. Please read our Data Processing Notice for further information on what data we process and why, as well as where it is stored. Acre Resources LTD (The Company) have measures to ensure that our processing of personal data complies with this Privacy Notice and applicable law.
As a data subject you have the right to request access to the personal data Acre Resources LTD (The Company) have collected about you. This could be for the purpose of reviewing, modifying, or requesting deletion of the data. You also have the right to request a copy of the personal data Acre Resources LTD (The Company) have collected about you. This Privacy statement confirms that Acre Resources LTD (The Company) ensures that all of our candidates/clients have the following rights with regards to the data that we hold on them;
The right to be informed;
The right of access;
The right to rectification;
The right to erase;
The right to restrict processing;
The right to data portability;
The right to object;
Rights in relation to automated decision making and profiling.
If you would like to make a request to access, review, or correct the personal data we have collected about you, or to discuss how we process your personal data, please contact us at GDPR@acre.com. Likewise, if you would like your data processing limited in anyway or delayed, please also contact GDPR@acre.com where all queries will be dealt with in in a timely way. To understand more about our Data Erasure, read our Data Erasure Form for further details.
To help protect your privacy and security, Acre Resources LTD (The Company) will take reasonable steps to verify your identity before granting you access to your personal data. Acre Resources LTD (The Company) will make reasonable attempts to promptly investigate, comply with, or otherwise respond to your requests as may be required by applicable law.
Depending upon the circumstances and the request, the Company may not be permitted to provide access to personal data or otherwise fully comply with your request; for example, where producing your information may reveal the identity of someone else. Data subjects have the right to know from the data controller as to whether or not personal data concerning them is being processed, where and for what purpose free of charge. However, Acre Resources LTD (The Company) reserve the right to charge an appropriate fee for complying with your request where allowed by applicable law should the request be deemed repetitive or excessive. Likewise, Acre Resources LTD (The Company) reserve the right to deny your requests where, in the Company’s discretion, they may be unfounded, excessive, or otherwise unacceptable under applicable law.
We do not make recruiting or hiring decisions based solely on automated decision-making. All decisions regarding recruiting or hiring decisions are made by humans.
Personal Information Collected
Acre Resources LTD (The Company) is a recruitment and search firm and as such we collect a variety of personal data necessary to provide such services in a secure and highly confidential database accessible only by Acre Resources LTD (The Company).
Personal information collected by Acre Resources LTD (The Company) is collected from both publicly available sources such as, but not limited to; third party employer websites and LinkedIn, submissions of information to our website via candidates directly and from telephone conversations and meetings with candidates where the information was directly disclosed to our consultants. Acre Resources LTD (The Company) is required to collect personal information such as name, professional experience, career history, education history, resume, salary information and contact information in order to assess candidate’s suitability to roles that they can be put forward to. It is Acre Resources LTD (The Company) legitimate interest to collect this information in order to ensure candidates are not approached for roles unnecessarily which would not be appropriate for them.
It is important to differentiate between the non-sensitive data required for recruitment purposes which are collected from candidates directly, and the sensitive data which is not requested unless we are legally required to do so at a later stage of the recruitment process. Data that is deemed non-sensitive includes personally identifiable information such as: name, professional experience, career history, education history, resume, salary information and contact information. By choosing to enter your personal information on our website and by sending this to our consultants directly, you indicate your acceptance and willingness to disclose this information to Acre Resources LTD (The Company) and to be considered, when appropriate, for one of Acre Resources LTD (The Company) confidential mandates.
What we do with the information we gather
In most standard situations, we provide personal information regarding candidates to prospective employers/our clients only if the candidate has authorised us to do so. However, on rare occasions we are engaged to conduct highly confidential searches for senior executives and on those rare occasions, prospective candidates’ personal information such as a candidate’s name, job title and employer name (only) may be provided to the client without the candidate’s prior request or knowledge. Below is a list of various ways in which we may use and/or disclose supplied non-sensitive personal information that was transmitted to Acre Resources LTD (The Company);
Acre Resources LTD (The Company) may use personal information collected regarding potential candidates to identify professional opportunities that we deem relevant and of interest for the candidate and the perspective employer/our client. We then provide this personal information to the prospective employer/our client as per agreed search requirements.
The information obtained by Acre Resources LTD (The Company) in regard to our clients, including business contact information is kept and used as part of the provision of our executive search and consultancy services.
Other situations that could involve use of personal information could include but are not limited to: updating of data; responding to inquiries; other communications; modification, improvement, refinement and validation of intellectual property and technology; accounts and records; responding to complaints and other inquiries; personal data can also be used for proposals, engagement letters, presentations, research surveys, white papers, advertising, marketing and public relations.
Acre Resources LTD (The Company) remains responsible for how the personal information we collect will be used. In some situations, Acre Resources LTD (The Company) reserves the right to work with suppliers who provide services that may include, but are not limited to; database hosting, server hosting, website hosting, IT consulting services, resume verification, background screening verification, payroll services, attorneys, accountants, and other administrative and back-office services and security services. As part of providing those services, such third parties will be provided with access to personal information only when deemed absolutely necessary in order to carry out standard business practices for the services of Acre Resources LTD (The Company). Acre Resources LTD (The Company) carefully screens and selects all of our suppliers based on their own security and personal data processes and policies and strict policies are put in place to secure all of our data held.
Acre Resources LTD (The Company) may also analyse your personal data or aggregated/pseudonymized data to improve our recruitment and hiring process and augment our ability to attract successful candidates. Acre Resources LTD (The Company) will also use your data for business intelligence purposes regarding the markets we hire in. This concerns using title, remuneration and location to analyse current markets and average salaries.
Acre Resources LTD (The Company) will retain your personal data in order to consider you for future employment opportunities. In such an event, Acre Resources LTD (The Company) will seek your consent, either prior to or after you formally apply for a job opportunity.
Acre Resources LTD (The Company) reserves the right to disclose or transfer, any and all personal information that we collect in connection with the provision of our services in the event of a sale of our company, a merger or consolidation involving Acre Resources LTD (The Company).
Acre Resources LTD (The Company) have variable data retention policies depending upon the date of personal data and whether both parties continue to do business together. If you accept an offer of employment by Acre Resources LTD (The Company), any relevant personal data collected during your pre-employment period will become part of your personnel records and will be retained for 7 years and/or in accordance with specific country requirements.
If Acre Resources LTD (The Company) do not employ you, the Company may nevertheless continue to retain and use your personal data for a period of 5 years (which may vary depending on the country) for system administration purposes, to consider you for potential future roles, and to perform research.
Acre Resources LTD (The Company) collects personal data on its candidates and clients for the sole purpose of efficiently providing our recruitment services. We only collect the minimum personal data required from candidates and clients in order to assess candidate’s suitability for a role and in order to maintain an effective relationship with our clients.
We are committed to ensuring that your information is secure. In order to prevent your Personal Data against unauthorised access, accidental loss, improper use and disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect. However, the internet itself is not completely secure and although we will do our best to protect your Personal Data the transmission of your data to us is done so at your own risk.
Acre Resources LTD (The Company) will not sell, resell, lease or license your Personal Data to any third parties.
Your Personal Data will be stored on our secure server and database with our carefully selected service providers. Third Party providers and suppliers are required to sign non-disclosure agreements and policies to ensure the security of personal data. Alongside this, only authorised personnel from third parties can access data and this may be limited in part depending upon security permissions. Moreover, their own employees are signed into non-disclosure and confidentiality agreements and are trained in maintaining compliance.
Nevertheless, despite these precautions and measures taken to protect data security, Acre Resources LTD (The Company) cannot guarantee that unauthorised persons will not obtain access to your personal information.
International Data Transfers
We may transfer your Personal Data to countries outside the EEA where the level of protection may not be as comprehensive as it is within the EEA. Acre Resources LTD (The Company) will explicitly ask your permission to do so prior to transferring your personal data. We have procedures in place to ensure that your Personal Data is adequately protected when doing so.
Your personal data may be accessed by recruiters and interviewers working in the country where the position for which you are applying is based, as well as by recruiters and interviewers working in different countries within the Acre Resources LTD (The Company) organisation. Individuals performing administrative functions and IT personnel within Acre Resources LTD (The Company) may also have a limited access to your personal data in order to perform their jobs.
Acre Resources LTD (The Company) has legal and contractual mechanisms to ensure adequate protection of personal data that may be processed by Acre Resources LTD (The Company) partners and suppliers.
Cookies and other tracking technologies
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Controlling your personal information
We may use your personal information to send you promotional information of which we think you may find interesting, if you tell us that you wish this to happen. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time emailing us at GDPR@acre.com.
Our marketing emails will have an unsubscribe link at the bottom of correspondence. By clicking unsubscribe this will unsubscribe you from our marketing emails. To unsubscribe completely or to query what data we have please email GDPR@acre.com
If at any time you’d like to withdraw your consent to Acre Resources LTD (The Company) holding your data, then please do so by emailing GDPR@acre.com.
If you believe that any information we are holding on you is incorrect or incomplete, please email us as soon as possible at GDPR@acre.com.
Should you wish to report an alleged data breach under the General Data Protection Regulation (GDPR), please email GDPR@acre.com.
If you would like to directly contact our Data Protection Officer at Acre Resources LTD (The Company) please contact our Operations Team using firstname.lastname@example.org.
All persons under the General Data Protection Regulation (GDPR) are entitled to contact the supervisory authority in order to lodge a concern you may have with any of the Acre Resources LTD (The Company) data processing activities.
You may request details of personal information which we hold about you under the General Data Protection Regulation (GDPR). If you would like a copy of the information held on you, please email GDPR@acre.com.
All complaints, requests for information access or removal will be acknowledged within seven working days and we will endeavour to resolve all queries within thirty days.
Acre Resources LTD (The Company) may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. Please check our website regularly to keep up-to-date.
This policy is effective from December 2012 and was last updated May 2018.