Privacy, Data Protection and Information Security
This document covers our website, and AV Production services, and Usage Terms and Conditions (see Our Terms & Conditions). It also covers how we collect, retain and process personal data in respect of the Data Protection Act 2018 (the UK implementation of GDPR) and other applicable legislation.
Introduction
Jacobs Massey Ltd (“the Company/We/Us”) is registered as a data controller with the Information Commissioner’s Office. For details of the Company’s Data Registration (Z8083889) visit https://ico.org.uk/. We will use our best efforts to ensure that the personal information you submit to us is kept private and confidential and only used for the purposes described in our Data Registration and this Privacy Policy. By continuing to use our services or this website you consent to us processing information supplied by you as explained in this Privacy, Data Protection and Information Security Policy.
Principles
JacobsMassey is committed to upholding the principles underlying data protection, privacy, and information security. We believe that fulfilling this commitment is essential to meeting the objectives of our business. JacobsMassey fully recognises its duties and responsibilities under data protection laws, and, at all times, we use our best efforts to ensure that the personal or confidential information we receive is kept private and secure, and only used for the purposes for which it is provided.
Information About Visitors (“General Information”)
When visitors come to our website, we log the user’s IP address which is automatically recognised by the web server.
Graeme Massey
Managing Director
JacobsMassey
Principles
JacobsMassey is committed to upholding the principles underlying data protection, privacy and information security. We believe that fulfilling this commitment is essential to meeting the objectives of our business. JacobsMassey fully recognises its duties and responsibilities under data protection laws, and at all times we use our best efforts to ensure that the personal or confidential information we receive is kept private and secure, and only used for the purposes for which it is provided.
Information About Visitors (“General Information”)
When visitors come to our website, we log the user’s IP address and browser information which is automatically recognised by the web server. This is done, in part, by the use of cookies.
Cookies and Your Activity on Our Website
- Unless you have indicated your objection by refusing them when you first visited our website, our system will issue cookies to your computer when you log on to the site. Cookies are small pieces (files) of information regarding your browsing habits (“General Information”) that are stored on your computer. These small files are known as cookies. They are not used to identify you personally.
- Cookies can make it easier for you to log on to and use the site during future visits. They also allow us to monitor website traffic and may be used to customise the site for you.
- We also use Google Analytics for such purposes, it sets cookies to accurately track visits to the website and stores information on the pages you visit, how long you are on the site, how you got here and what you click on. It does not collect or store personal information, so this information cannot be used to identify who you are.
- The information generated by the cookies about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google undertakes not to associate your IP address with any other data held by Google.
- If you prefer, it is possible to block some or all cookies or even to delete cookies that have already been set. This can usually be done through your browser’s settings – click on the Help function within your browser to find out more.
- We also use Google Analytics for such purposes, it sets cookies to accurately track visits to the website and stores information on the pages you visit, how long you are on the site, how you got here and what you click on. It does not collect or store personal information, so this information cannot be used to identify who you are.
- You can opt out of Google’s use of Cookies by amending your Google Ad settings: https://www.google.com/settings/ads. Note, by turning off your personalisation across the web and on Google Search, you may still see adverts.
- Our use of the Twitter and the videos that we display on the website also result in cookies being set. You can stop these cookies being used by “Blocking third-party Cookies” in your browser’s Preferences.
- We may share General Information with our website consultants from time to time in order to help us develop this website.
- Our Website (https://jacobsmassey.co.uk) may include hyperlinks to other websites that are not operated or controlled by us. This privacy policy only applies to our Website and we are not responsible for the content or the privacy practices of third party websites.
- Visit www.aboutcookies.org for further information about cookies.
Privacy and Data Protection Notice
This Notice tells you what to expect in relation to personal information about you that is collected, handled and processed by Jacobs Massey Limited (JacobsMassey). JacobsMassey, of 48 Warwick St, London W1B 5AW, is the Data Controller.
JacobsMassey acknowledges and agrees that any personal data of yours that we handle will be processed in accordance with all applicable data protection laws in force from time to time. Currently, with effect from 25 May 2018, the Data Protection Act (GDPR) came into force, changing the law on privacy and data collection. We fully acknowledge and respect your rights under this legislation.
Information collected in the course of our normal business activities
During our normal business activities we may collect and store your contact information (name, organisation, email address, etc) and use this for occasional communications about our company, products and services. For this, as well as our internal systems, we may sometimes use Mailchimp to send our emails. The Mailchimp Privacy Policy can be found at: https://mailchimp.com/legal/privacy/
How we use the information
The above information is used to provide our services to you in our capacity as an AV Production business to find you assignments based on your requirementsand skills. We will only pass your personal details or CV to a third party, such as our current or prospective clients, with your express permission and consent.
The information outlined above may be used as follows:
- To match your skill sets with job vacancies to assist in finding you the assignments that most suit you
- To put forward your details to our current and prospective clients for you to be considered
- To keep you informed of available opportunities as they arise
- To keep you informed of the services offered by us
- For the administrative, market research and promotional purposes of the Company.
The personal information above may also be used as follows:
- To establish that you have the right to work in the UK or other countries as required by the assignment
- To deal with any medical and health and safety issues relating to certain positions
- To put in place contractual arrangements and documentation once a role has been identified
- To ensure you are paid in a timely manner when you are provided with assignments.
How we hold the information
All the personal data we have is stored on our databases in the UK & EEA.
We adopt appropriate data collection, storage and processing practices, and data security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data generated by your engagement with our recruitment services, use our website, eTimesheets App or Vacancy Updates service that is stored on our servers. In the event of a data security breach, we will take immediate steps to mitigate any damage and will notify affected users soon as is practicable
Disclosure of your information
Other third parties that we may share your data with are as follows: HM Revenue and Customs, pension scheme providers, legal advisors and other companies for the purpose of undertaking pre-engagement checks for the assignment, or for paying you.
The legal basis for processing the information?
We will rely on your explicit consent and ‘Legitimate Interest’ (as outlined by the ICO – https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/legitimate-interests/when-can-we-rely-on-legitimate-interests/) to process your information (as outlined above).
Your rights
Under Data Protection Act (see EU General Data Protection Regulation), you have a number of specific rights over your personal information:
- Right of access – if you want to know if we are storing or processing any personal data about you, you can contact us to find out. If this is the case, you may find out what purpose it is being stored for and request a copy of your data by contacting us. Your data will be supplied as soon as is practical in a CSV (comma separated value) file format which can be opened as a simple text file or as a spreadsheet. There is no charge for making a request or for the electronic data file, but if the number and frequency of requests is unreasonable we may charge an admin fee.
- Right to correction – if you believe that any information we are holding on you is incorrect or incomplete, please contact us as soon as possible. We will promptly correct any information found to be incorrect.
- Right to erasure – if you want to remove your personal data from our records, you can request this by contacting us. We will remove the data as far as it is practically within our power, and where we are not legally obliged to retain it.
- Right to object – if you no longer want us to process your data you can request this by contacting us.
- Right to complain – if you are unhappy with how we are managing your personal data, you can lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO).
Retention of your data
Your data will be retained for no longer than is necessary or required by law, and in accordance with this Privacy Policy. We will review our data retention regularly, and at a minimum of every 2 years.
Data Access Control
We have a robust joiners, movers and leavers’ process, which together with role profiling, ensures access is granted on a “least privilege” basis to reflect the requirements of the role and is lowered or removed immediately when it is no longer relevant. When a member of staff leaves the company their user account is disabled immediately, and all other access to systems is revoked.
Withdrawal of consent
If you have provided us with your consent to process your data, for the purpose of using our services and us finding you suitable work, you have the right to withdraw this consent at any time. In order to do so you should contact us by emailing dataconsent@jacobsmassey.co.uk.
Concerns
If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to Information Commissioners Office at https://ico.org.uk/concerns/.
How We Protect Your Information
- We adopt appropriate data collection, storage and processing practices, and data security measures to protect against unauthorised access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data generated by your use of our website stored on our servers or eTimesheets App. In the event of a data security breach, we will take immediate steps to mitigate any damage and will notify affected users soon as is practicable.
- If our business enters into a joint venture with or is sold to or merged with another business entity, your information may be disclosed to our new business partners or owners.
- Countries outside the European Union do not always have strong data protection laws. However, we will always take steps to ensure that your information is used by third parties in accordance with this policy.
- Unless required to do so by law, we will not otherwise share, sell or distribute any of the information you provide to us without your consent.
Data Updates
- We make best efforts to ensure that all information held relating to you is kept up-to-date, accurate and complete. In this regard, we also rely on you to notify Us if your information requires updating or deleting. We will respond to requests from you to update or delete your information in an efficient and timely manner.
Your Acceptance of this Policy and Our Terms & Conditions
- By using this website or downloading and installing our eTimesheets Mobil App, you signify your acceptance of this policy. If you do not agree to this policy, please do not use our Website or App. Your continued use of the website or our eTimesheets App will be deemed acceptance by you of this Privacy Policy and Our Terms & Conditions.
Contact
Please address any questions, comments, or requests regarding our data processing practices to Graeme Massey, Compliance and Assurance Director: dataconsent@jacobsmassey.co.uk We will endeavour to respond as promptly as possible.
Review
- This Policy will be reviewed each year, unless new legislation is introduced that needs to be reflected in the policy.