DATA PROTECTION AND CONFIDENTIALITY

As a company providing recruitment services, Knightway Associates is committed to protecting the personal data of clients and candidates in line with the relevant legislation (“Data Protection Law”).  The relevant legislation includes the General Data Protection Regulation (EU 2016/679) and the UK Data Protection Act 2018, as well as other potentially supporting legislation.

WHY THIS POLICY IS IMPORTANT

This policy is intended to provide information about how we will use (or “process”) personal data about individuals including our current, past and prospective clients, candidates and other third parties as well as visitors to our website. 

This information is provided in accordance with the rights of individuals under Data Protection Law to understand how their data is used.

This Privacy Notice applies alongside any other information Knightway Associates may provide about a particular use of personal data, for example when collecting data. 

RESPONSIBILTY FOR DATA PROTECTION

Knightway Associates must process personal data to provide recruitment services to its clients and candidates.  Nigel Allen is appointed as Data Protection Manager (DPM) to oversee its compliance with the data protection law and to deal with all requests and enquiries concerning Knightway Associates use of your personal data (see section on Your Rights below). 

Nigel Allen may be contacted by:

• e-mail:                  nigel@knightway.co.uk

• telephone:            01276 817122

• post:                     Knightway Associates, suite 3, 2nd floor, Knightway House, Park Street, Bagshot, Surrey, GU19 5AQ

 

WHY THE KNIGHTWAY ASSOCIATES NEEDS TO USE PERSONAL DATA

In order to carry out its ordinary duties to clients and candidates Knightway Associates may need to process a wide range of personal data about current, past and prospective clients and candidates as part of its daily operation.

Knightway Associates will need to carry out some of this activity in order to fulfil legal rights, duties or obligations – including those under a contract with its clients.

Other uses of personal data will be made in accordance with Knightway Associates legitimate interests, provided that these are not outweighed by the impact on individuals.

Knightway Associates expects that the following uses may fall within the category of its “legitimate interests”:

• The provision of recruitment services;

• Maintaining relationships with clients, candidates and the business community;

• For the purposes of management planning;

• For security purposes; and

• Where otherwise reasonably necessary for Knightway Associates purposes, including to obtain appropriate professional advice and insurance.

 

TYPES OF PERSONAL DATA OBTAINED BY THE KNIGHTWAY ASSOCIATES

This will include by way of example:

• names, addresses, telephone numbers, e-mail addresses and other contact details;

• candidates’ CVs and working history;

• candidates’ experience, training and qualifications;

• bank details and other financial information;

• passwords. 

HOW KNIGHTWAY ASSOCIATES COLLECTS DATA

Generally, Knightway Associates receives personal data from the individual directly in the ordinary course of interaction or communication (such as verbally, by e-mail or by written documents).

However, in some cases personal data may be supplied by third parties (for example a former employer, either directly or from other organisations working with that individual).

 

 DATA COLLECTED THROUGH THE KNIGHTWAY ASSOCIATES WEBSITE

Knightway Associates may collect the following information from visitors to its website:

• IP addresses and information about the location of the visitor

• the way that a visitor uses the website, including the pages viewed, dates, times and duration

• data to show where visitors navigated to or from our website and searches made on our website.

This data is used to enable Knightway Associates to:

• run the website ensuring that it works properly

• improve the information on the website

• maintain the websites security

Cookies are a piece of data which a website sends to a user’s computer. It is stored on the user’s computer and can be used to collect information on their site usage.  Knightway Associates uses cookies to identify how many users visit each page of its website so that it can improve the websites value to its visitors.  Knightway Associates does not use cookies in any way which would allow it to identify visitors to its website.  If you want to block cookies then you can do so through your web browser or through other software but in doing so you may find that you will be unable to visit some or all of Knightway Associates website.

WHO HAS ACCESS TO PERSONAL DATA AND WHO KNIGHTWAY ASSOCIATES SHARES IT WITH

To enable Knightway Associates to provide its recruitment services it will be required to share candidates’ personal data with prospective employers. 

Occasionally, Knightway Associates will also need to share personal information with third parties, such as professional advisers (lawyers and accountants) or relevant authorities.

Apart from this, for the most part, personal data collected or accessed by Knightway Associates will remain within the company, and will be processed by appropriate individuals only in accordance with access protocols (ie. on a “need to know” basis).  Knightway Associates will, where appropriate, ensure that their personnel access or Process Personal Data only for the purpose of performing services to clients and candidates in accordance with instructions given by the clients or candidates to Knightway Associates from time to time. 

In accordance with Data Protection Law, some of Knightway Associates processing activity is carried out on its behalf by third parties, such as cloud services and storage providers. 

Whenever personal data is stored with a third party it is always subject to undertakings from such third parties that personal data will be kept securely and only in accordance with Knightway Associates specific direction and of course in compliance with the Data Protection Law.

Knightway Associates shall not cause or allow Personal Data to be transferred and/or processed in a county or territory which is outside of the European Economic Area without prior written consent. 

HOW LONG KNIGHTWAY ASSOCIATES KEEPS PERSONAL DATA

Knightway Associates will retain personal data securely and only in line with how long it is necessary to keep for a legitimate and lawful reason.  

If you have any specific queries about how this policy is applied, or wish to request that personal data that you no longer believe to be relevant is considered for erasure, please contact the DPM.  However, please bear in mind that Knightway Associates may have lawful and necessary reasons to hold on to some data.

 

SECURITY

Knightway Associates has implemented and shall maintain appropriate technical and organisational security measures, processes and controls to safeguard all Personal Data processed by them against unauthorised and unlawful processing and accidental loss, disclosure or destruction. 

YOUR RIGHTS

Individuals have various rights under Data Protection Law to access and understand personal data about them held by Knightway Associates, and in some cases ask for it to be erased or amended or for Knightway Associates to stop processing it, but subject to certain exemptions and limitations.

Any individual wishing to access or amend their personal data, or wishing it to be transferred to another person or organisation, should put their request in writing to the DPM. 

Knightway Associates will endeavour to respond to any such written requests as soon as is reasonably practicable and in any event within the statutory time-limits, which is one month in the case of requests for access to information.  Knightway Associates will be better able to respond quickly to smaller, targeted requests for information.  If the request is manifestly excessive or similar to previous requests, Knightway Associates may ask you to reconsider or charge a proportionate fee, but only where Data Protection Law allows it.  Knightway Associates shall also provide its customers with such assistance as the customer reasonably requests in order to comply with its obligations and to fulfil a data subject’s rights. 

You should be aware that certain data is exempt from the right of access.  This may include information which identifies other individuals, or information which is subject to legal professional privilege. 

CONSENT

Where Knightway Associates is relying on consent as a means to process personal data, any person may withdraw this consent at any time.  Please be aware however that Knightway Associates may have another lawful reason to process the personal data in question even without your consent.  That reason will usually have been asserted under this Data Protection and Confidentiality provision or may otherwise exist under some form of contract or agreement with the individual (for example: an employment contract).

DATA ACCURACY AND SECURITY

Knightway Associates will endeavour to ensure that all personal data held in relation to an individual is as up to date and accurate as possible.  Individuals must please notify the DPM of any changes to information held about them.

An individual has the right to request that any inaccurate or out-of-date information about them is erased or corrected (subject to certain exemptions and limitations under Act): please see above.

Knightway Associates will take appropriate technical and organisational steps to ensure the security of personal data about individuals, including policies around use of technology and devices, and access to company systems.  All staff will be made aware of this policy and their duties under Data Protection Law and receive relevant training.

QUERIES AND COMPLAINTS

Any comments or queries on this policy should be directed to the DPM.

If an individual believes that Knightway Associates has not complied with this policy or acted otherwise than in accordance with Data Protection Law, they should notify the DPM.  An individual can also make a referral to or lodge a complaint with the Information Commissioner’s Office (“ICO”), although the ICO recommends that steps are taken to resolve the matter with the Knightway Associates Data Controller or Processor before involving the regulator.