Effective Date: May 25, 2018
At Right Management, privacy is important to us and we place great care in the responsible, transparent and safe handling of data. This privacy notice provides a framework of understanding about the personal data collected by Right Management Limited and our compliance to data privacy law, including the provisions of the European Union’s General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
Our registered office is in 50 Bank Street, Canary Wharf, London, E14 5NS, United Kingdom.
This privacy notice applies to:
Our candidates and recipients of our career services,
Representatives of our business partners, clients, vendors and suppliers
Users of our Sites, including Rightmanagement.co.uk, RightEverywhere® and associated platforms, and our social media channels; “Right Management UK” on Twitter and LinkedIn.
This privacy notice does not apply to Right Management employees or associates.
This privacy notice describes the types of personal data and information we collect, how we use it, how long we process and store it, how we protect it, with whom we share it, to whom we transfer it and the rights that you can exercise regarding our use of your personal data. We also describe how you can contact us to further enquire about our privacy practices or to exercise your rights. You can click on one of the links below to jump to the listed section:
When permitted by applicable law, a data subject can exercise under Articles 15 to 22 of the EU GDPR, the following specific rights:
Right of access: You have the right to access your personal data in order to verify your personal data is processed in accordance to the law. This is more commonly referred to as a Subject Access Request.
Right to rectification: You have the right to request the rectification of any inaccurate or incomplete data held about you, in order to protect the accuracy of such information and to adapt it to the data processing. If you believe that any of your data we process is incorrect or incomplete, please contact us and we will take reasonable steps to check its accuracy and correct it where necessary
Right to erasure: Otherwise known as ‘The Right to be Forgotten’; you have the right to request that we no longer processes your personal data.and erase all information about you. Please be aware that this is not an absolute right and there may be legal or regulatory reasons why data cannot be erased at the time of the request.
Right to restriction of processing: You have the right to request the Data Controller restricts the processing of your data.
Right to data portability: You have the right to request data portability, meaning that you can receive your personal data in a structured and commonly used format, or that you can request the transfer of your data to another Data Controller.
Right to object: At any time and without having to justify your decision, you have the right to object to the processing of your data for direct marketing purposes. Please note: if you withdraw your consent, the previous processing of data that we have done with your consent will remain lawful.
Right not to be subject of automated individual decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, if such profiling produces a legal effect or similarly significantly affects you. Right Management do not use processes in which automated decision-making (including profiling) takes place.
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged GDPR infringement. The supervisory authority in the UK is the Information Commissioners’ Office (ICO). More information can be found at https://ico.org.uk/
Whenever the processing is based on consent, as under art.7 of the GDPR, while you may withdraw your consent at any time, there may be circumstances where we will still need to process your data for legal or official reasons. We will inform you if this is the case. Where this is the case, we will restrict the data to only what is necessary for the purpose of meeting those specific requirements.
If you wish to exercise any of your rights in relation to data privacy, please refer to the How to Contact Us section below.How To Contact Us
Visit our Sites, including our social media channels outlined above;
Apply for/engage in career counselling / a workshop / assessment / event;
Enter your details on RightEverywhere®;
Message us via our website, our social media channels or any right.com email address;
Otherwise use our services.
We may collect a selection of personal data, including, but not limited to (as permitted under local law):
Contact information (like full name, personal email address, personal telephone number, home address);
Referral details, which may include employee ID number, job title, work address, work email address, work telephone number, contract termination date;
Other information you may provide to us during the course of career guidance or assessment, or in surveys, including, but not limited to CV details, salary details, new employment details;
Information you provide us through the "Contact Us" feature on our Sites, or through any email sent to a right.com address;
Details you provide us when you complete any web form or download a white paper on Rightmanagement.co.uk
Username and password when you register on our Sites;
User IP address;
Identification information you may be asked to provide, should you wish to exercise specific data rights.
Right Management UK collects and uses the data gathered for the following purposes (as permitted under local law):
We manage the service we provide on RightEverywhere®. A privacy notice is available on the RightEverywhere® platform for users to access;
If you participate in an assessment, we use the personal data you provide to help you determine potential career or development opportunities. This information is only shared with your current or future employer with your explicit consent. We use suppliers outside the EU for some of the personality and occupational assessments. Please skip to the Data Transfers section below for confirmation on how this transfer is GDPR compliant;
In order to support Candidates in their career transition or development, we store personal data such as CVs and notes from guidance sessions. This information helps us guide you in making the right career choices or in finding another job.
If you contact us, for example by e-mail, social media or by telephone, we can ask for your contact details. We do this to handle your query or concern and to approach you later with additional information. Your data is only accessible to those within the organization who are dealing with the handling of your query or concern.
The use of data is required for client reporting purposes; however this is grouped so that individual outcomes are anonymised.
We use various IT resources and productivity tools, such as e-mail, to communicate with each other and with you. We keep a history of this for as long as is needed for follow-up, accountability and security. We use cloud suppliers outside the EU. Please skip to the Data Transfers section below for confirmation on how this transfer is GDPR compliant;
To comply with and enforce all applicable legal requirements, relevant industry standards, contractual obligations and our policies, the use of personal data is essential;
To identify, protect against, and attempt to prevent fraud and other unlawful activity, claims and other liabilities;
To generate invoices and process payment for services provided;
We use personal data for the effective operation, evaluating and improving our business (including developing, enhancing, analysing and improving our services; managing our communications; performing data analytics; and performing accounting, auditing and other internal functions;
We may use your data to communicate with you about, and administer participation in, special events, promotions, programs, offers, surveys, contests and market research in an effort to continually improve the service we offer and;
All processing will be carried out based on adequate legal grounds which may fall into a number of categories, including:
Explicit consent from you, where required by applicable law e.g. when you tick a box to receive specific content. For certain processing we ask for your permission/consent in advance. If you do not give permission and/or object to the processing, this may have consequences for the service we provide to you;
Statutory or contractual requirement compliance;
Legitimate interest of the Data Controller e.g. letting the user access the website to be provided with the services offered. Please see our section on Legitimate Interests below to learn more about these interests and when we may process information in this way.
We may process personal data for certain legitimate business purposes, which includes some, or all, of the following:
Where the process enables us to enhance, modify, personalise or otherwise improve our services/communications for the benefit of our clients, candidates and associates;
To identify and prevent fraud;
To enhance security of our network and information systems;
To better understand how people interact with our websites;
For direct marketing purposes;
To determine the effectiveness of promotional campaigns;
To provide postal communications to you which we think will be of interest to you;
Whenever we process data for these purposes we will ensure that we keep your rights in high regard and take account of these rights. You have the right to object to such processing (more details in section Your Rights as a Data Subject, below). Please bear in mind that if you exercise your right to object, this may affect our ability to carry out and deliver services to you for your benefit.
We maintain administrative, technical and physical safeguards designed to protect the personal data you provide against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use.
We process the personal data we collect for the purposes defined in this notice and for a period only as long as is necessary for the purposes we collected it. Different laws and contractual obligations may also require us to process different data for different periods of time.
We will keep your personal identifiable information for the duration necessary to achieve the purposes described in this Privacy Notice, taking into account applicable statute of limitation periods and records retention requirements under applicable law. Subject to applicable law, we will retain your personal data as required by the company to meet our business and compliance obligations, for example, to comply with our tax and accounting obligations.
We store your personal data, in a way that allows identification, for no longer than is necessary, based on the purposes for which it was collected. We determine the period of time by taking into account:
The necessity to store the personal data collected in order to offer services established with the user;
To enable us to respond to any queries or concerns about the service provided;
The existence of specific legal or contractual obligations that make the processing and related storage necessary for specific periods of time;
In order to safeguard a legitimate interest of the Data Controller, as described in the purposes.
We do not disclose personal data that we collect about you, except as described in this privacy notice or in separate notices provided in connection with particular activities. We may share personal data with vendors who perform services on our behalf based on our instructions. When we use the services of other parties to process data on our behalf, we ensure due diligence takes place to ensure they are GDPR compliant and, where necessary, that processing agreements are in place with these parties, so that they too handle your personal data carefully. We never sell your data to third parties.
In addition, we may disclose personal data about you on the following basis:
If we are required to do so by law or legal process;
To law enforcement authorities or other government officials based on a lawful disclosure request; and
When we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.
We also reserve the right to transfer personal data we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganisation, dissolution or liquidation).
If we share data with our US parent company and affiliated ManpowerGroup companies, we will ensure that there are appropriate safeguards for the protection of your data.
We may transfer personal data to countries outside of the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which the data was provided. When we transfer your information to other countries, we will protect that data as described in this Privacy Notice and such transfers will be in compliance with applicable law.
The countries to which we may transfer the personal data we collect about you may be:
Within the European Union
Outside the European Union
When we transfer personal data from within the European Union to countries or international organizations that are based outside the European Union the transfer takes place on the basis of:
Adequacy decision by the European Commission;
Standard data protection clauses (formerly called the Model Clauses) adopted by the European Commission
This privacy notice (including any addenda) may be updated periodically to reflect changes in our privacy practices and legal updates. For significant changes, we will notify you by posting a prominent notice on our Sites indicating at the top of each Notice when it was most recently updated.
If you have any questions/comments about this privacy notice, if you would like to exercise your rights, or you think you have identified any weakness or data privacy related concern on one of our Sites, please email us at: firstname.lastname@example.org
Or write to us at:
The Data Privacy Officer
Right Management UK
50 Bank Street
London E14 5NS