The Data Controller is: Central Recruitment Services Ltd

Registered Company Number: 3713353

Address: Studio 1.4, Islington Studios, Marlborough Road, London, N19 4NF

Information Commissioner’s Office Registered Number: Z9681737

Data Protection Lead: Steven Patten, Director

Central Recruitment Services Ltd, trading as Central, Central Care and Central Training is a recruitment agency, a supplier of temporary staffing services (sometimes referred to as an employment business), a provider of contingency staff management systems and a provider of training solutions.

Our customers are organisations that use recruitment, temporary staffing, contingency staff management systems and training services.

Our Preferred Supplier List (PSL) agencies are also recruitment agencies, suppliers of temporary staffing services and providers of training services.

Central is a data controller who holds and processes information about our applicants, temporary workers, employees, customers, suppliers and PSL agencies’ applicants and temporary workers.

Our customers are data controllers who will also gather, hold and process information about our applicants and temporary workers, and PSL agencies’ applicants and temporary workers.

Central is also a data processor for our customers and PSL agencies, gathering, holding and processing information about their applicants, temporary workers and employees, our applicants and temporary workers, and PSL agencies’ applicants, temporary workers, and employees.

Our customers are also data processors for Central and PSL agencies who will gather, hold and process information about our applicants and temporary workers and PSL agencies’ applicants and temporary workers.

PSL agencies are also data processors for Central and our customers who will gather, hold and process information about their applicants and temporary workers.

Central, our customers and PSL agencies are legally obliged to protect this information and for this reason, Central is a registered data controller with The Information Commissioner’s Office (ICO).

Central fully endorses and complies with the 6 principles within Article 5 of the GDPR, which states that all personal data must be:

1. Processed fairly, lawfully and in a transparent manner in relation to the data subject
2. Collected for specified, explicit and legitimate purposes and not further processed for other purposes incompatible with those purposes
3. Adequate, relevant and limited to what is necessary in relation to the purposes for which data is processed
4. Accurate and, where necessary, kept up to date
5. Kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed
6. Processed in a way that ensures appropriate security of the personal data including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures

• Identity information: name, date of birth, gender, national insurance number
• Location: home address, work addresses
• Contact details: phone numbers, email addresses
• Health information: disability, health, sickness,
• Ethnicity and nationality
• Right to work in the UK, passport, visa status,
• Education, qualifications, training, skills, experience
• Criminal convictions, alleged criminal activity, and related information
• Salary, tax, bank details
• Work history
• References
• Next of kin and emergency contact details
• Work availability
• CCTV images

• To send information to third parties with whom we have or intend to enter into arrangements which are related to our services
• To register and recruit to positions working with vulnerable adults and children
• To notify applicants and workers of potential roles or opportunities
• To assess and review suitability for job roles
• For staff administration
• To retaining a record of our transactions
• To pay wages or to facilitate the payment of wages by a third party
• To provide information about other services we offer that are similar to those have already been provided with or enquired about
• To perform tasks in connection with legal proceedings or obtaining legal advice
• To comply with our legal and regulatory obligations
• To ensure we do not discriminate against people on the grounds of race, gender, age, disability, religion or sexuality
• To account for the work our customers do for the commissioning organisations that fund them
• To perform tasks carried out in the public interest or discharge our statutory rights
• To collate market or sector specific information and provide the same to our clients
• To provide information to regulatory authorities or statutory bodies, and our legal or other professional advisers including insurers
• To market our services
• To establish quality, training and compliance with our obligations and best practice
• Backing up information on our computer systems
• Personalise your experience and our offering, whether via our website or otherwise
• Prevention or detection of a crime

Central and our customers process personal data for legitimate business interests and this is the legal basis for processing personal data.

We will also rely on the following for specific uses of personal data:

Contract

We will rely on contract if we are negotiating or have entered into a placement agreement with you or your organisation or any other contract to provide services to you or your organisation, or receive services from you or your organisation.

Legal Obligation

We will rely on legal obligation if we are legally required to process information relating to you to fulfil our legal obligations.

Consent

We will rely on consent for particular uses of personal data from time to time and on such occasion you will be asked for your specific consent. An example of when consent may be the lawful basis for processing personal data includes processing your ethnicity and nationality for the purposes of monitoring diversity.

Automated decisions

We do not use automated decision making in processing your personal data.

As a recruitment agency, a supplier of temporary staffing services and a provider of contingency staff management systems, Central introduces workers to customers for permanent employment and temporary placements. The exchange of personal data of our applicants, workers, our customer, PSL agency contacts and their applicants and workers is a fundamental and essential part of this process.

In order to provide recruitment services to our applicants, workers and our customers we require a database of worker and customer personal data containing historical information as well as current requirements.

This means that for our commercial viability and to pursue these legitimate interests, we may continue to process your personal data for as long as we consider necessary for these purposes.

• To maintain, expand and develop our business we need to record the personal data of candidates, workers, and customer contacts
• Retaining records of our dealings and transactions and where applicable, use such records for the purposes of
• establishing compliance with contractual obligations with customers or suppliers
• addressing any query or dispute that may arise including establishing, exercising or defending any legal claims
• protecting our reputation
• evaluating quality and compliance including determining staff training and system requirements
• maintaining a backup of our system, solely for the purpose of being able to restore the system to a particular point in the event of a system failure or security breach

Central will disclose your personal information to third parties including our customers and PSL agencies:

• For the purposes of providing our services including recruitment, temporary staffing and contingency staff management systems
• If we are under a duty to disclose your personal data in order to comply with any legal or contractual obligation, or to protect our customers’ or others rights, property, or safety
• Investigation of misconduct
• Prevention or detection of crime

This includes exchanging information with other companies and organisations to:

• Account for the work they do for the commissioning organisations that fund them
• Perform tasks carried out in the public interest or discharge our statutory rights
• Perform tasks in connection with legal proceedings or obtaining legal advice
• Comply with their legal and regulatory obligations
• Ensure they do not discriminate against people on the grounds of race, gender, age, disability, religion or sexuality
• Prevent fraud
• Comply with a court order
• Report a criminal act
• Prevent serious risk to yourself or others
• To maintain records of our dealings to address any later dispute, including but not limited to the establishment, exercise or defence of any legal claims

The lawful basis for the third party processing will include:

• Their own legitimate business interests in processing your personal data
• To fulfil their legal obligations
• For the purpose of a contract in place or in contemplation;
• Satisfaction of their contractual obligations to us as our data processor

There may be circumstances where we require you to provide data which is necessary for us to meet statutory or contractual obligations, or perform our services.

If you do not wish to provide us with information we request, then please notify us. However, please be aware that as a result we may be unable to provide you with our services, and in some cases, this may result in a breach of the contract we have with you.

It is our policy to only store your personal data for as long as is necessary for us to comply with our legal and contractual obligations and for our legitimate business interests including providing you with our work finding services. Central retains data for 7 years from the last point at which we provided any services or otherwise engaged with you to comply with the Limitation Act 1980 before deleting it.

Some information is kept for longer than a 7 year period where we have a legal or contractual obligation to do so, or we form the view that there is otherwise a continued basis to do so (e.g. serious incidents, safeguarding concerns or complaints) in which case we may continue to process your personal data for as long as we consider necessary for these purposes.

Central Recruitment Services Ltd is the sole owner of the information collected on this site. We will not sell, share, or rent this information to others. Central Recruitment Services Ltd collects information from our users at several different points on our website.

We request information from the user on our online registration forms. Here a user must provide contact information and information regarding the type of work you are seeking and your skills, qualifications and experience. This information is used to enable us to provide you with work-finding services. If we have trouble processing your application, this contact information is used to get in touch with you. Central Recruitment Services Ltd does not use this information for any other purpose.

A cookie is a piece of data stored on the user's hard drive containing information about the user. Usage of a cookie is in no way linked to any personally identifiable information while on our site. Once the user closes their browser, the cookie simply terminates. For instance, by setting a cookie on our site, the user would not have to log in a password more than once, thereby saving time while on our site. If a user rejects the cookie, they may still use our site.

We use IP addresses to analyse trends, administer the site, track user's movement, and gather broad demographic information for aggregate use. IP addresses are not linked to personally identifiable information.

We may share aggregated demographic information with our clients. This is not linked to any personal information that can identify any individual person.

We partner with other parties to provide specific services. When the user signs up for these services, we will share names, or other contact information that is necessary for the third party to provide these services. These parties are not allowed to use personally identifiable information except for the purpose of providing these services.

This web site contains links to other sites. Please be aware that Central Recruitment Services Ltd is not responsible for the privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every web site that collects personally identifiable information. This privacy statement applies solely to information collected by this Web site.

This website takes every precaution to protect our users' information. When users submit sensitive information via the website, your information is protected both online and off-line.

When our registration form asks users to enter sensitive information (such as contact information), that information is encrypted and is protected with Thawte Premium Server CA. While on a secure page, the lock icon on the bottom of Web browsers such as Netscape Navigator and Microsoft Internet Explorer becomes locked, as opposed to un-locked, or open, when you are just 'surfing'. While we use encryption to protect sensitive information online, we also do everything in our power to protect user-information off-line.

All of our users' information, not just the sensitive information mentioned above, is restricted in our offices. Only employees who need the information to perform a specific job (for example, our accounts clerk or a marketing assistant) are granted access to personally identifiable information. If you have any questions about the security at our website, you can send an email to privacy@centralcare.co.uk

If your personally identifiable information changes (such as contact details), we will endeavour to provide a way to correct, update or remove the personal data provided to us. This can usually be done by emailing work@centralcare.co.uk.

If we decide to change our privacy policy, we will post those changes on our website so our users are always aware of what information we collect, how we use it, and under circumstances, if any, we disclose it. If at any point we decide to use personally identifiable information in a manner different from that stated at the time it was collected, we will notify users by way of an email. Users will have a choice as to whether or not we use their information in this different manner. We will use information in accordance with the privacy policy under which the information was collected.