Privacy Notice

Introduction
We at the Access Group understand the importance of protecting your personal data. This Privacy Notice explains how we collect and process your personal data as a candidate for hiring at the Access Group.

About Us
The “Access Group” is a group of legal entities that are wholly owned subsidiaries of The Access Technology Group Limited (company registration 05575609).

The Access Group includes Access UK Ltd (company registration 2343760), with registered address at The Armstrong Building, 10 Oakwood Drive, Loughborough, LE11 3QF, United Kingdom.

Access UK Ltd is the primary trading entity and the controller of your personal data for the purpose of hiring.

Our Group Data Protection Officer is Danielle Hefford. To contact us regarding our use of personal data, you may email us at Access.DPO@theaccessgroup.com.

We have appointed Access Workspace Ireland (registration number: 91755) as our EU representative under Article 27, EU GDPR. Our representative can be contacted by email at Core.DPO@theaccessgroup.com.

Why We Have Your Information
We process personal data of candidates to find the best candidate for open vacancies (present and future). We obtain your personal data directly from you when you apply for a job with us or register on our careers portal as a new applicant.

The following describes the information we seek to collect from you as part of an applicant registration to our careers portal:

Full name, email address, salary information, pronouns, ethnicity, CV, gender, NI number, education information, professional memberships/accreditations, right to work permit/information, and profile photo.

We also collect some of your personal data through the use of cookies. More about cookies can be found here.

If your application progresses, we may collect additional information from or about you from third parties, for example, information relating to:

Any criminal convictions, finances, health information, previous experience, personality traits, behavioural patterns, preferences, and your right work in the relevant jurisdiction.

This will only be done if and where we have a lawful basis to do so. In each case you will be informed before this happens. Where we require additional information and you’re unhappy with us collecting this, we will withdraw your application.

Automated decision making 

Automated decision-making means making decision about you using no human involvement e.g. using computerised filtering equipment. No decision will be made about you solely on the basis of automated decision making (where a decision is taken about you using an electronic system without human involvement) which has a significant impact on you. 

On What Legal Basis We Have Your Information
Our lawful basis for processing your personal data is legitimate interests. The legitimate interest pursued is to find suitable candidates for job vacancies and to manage the recruitment process efficiently.

Where applicable data protection legislation requires us to fulfil extra conditions (e.g., because we’re processing special category or criminal conviction data), we will ensure that we have fulfilled that extra condition.

Under UK GDPR, we rely on conditions, 1 (Employment, social security and social protection law), 10 (Preventing and detecting unlawful acts), 11 (Protecting the public against dishonesty) and 18 (Safeguarding of children and of individuals at risk​), from Schedule 1 of the Data Protection Act 2018.

We process your personal data only for the purpose of hiring and do not use it for any other purpose.

In the event you become an employee, a separate privacy notice will be made available on engagement.

Sharing Your Personal Data
We do not share your personal data with any third party, except for:

1) our service providers who process your personal data on our behalf. We have appropriate contracts in place with these service providers to protect your personal data;

2) other legal entities within the Access Group, as appropriate (for example when it is a Access Group legal entity other than Access UK LTD who is hiring). If your information is shared with a different Access Group legal entity, they will become a joint controller of your information; and or

3) in connection with a sale of the Access Group (or any part thereof). Where that divested entity becomes a controller of your information, they will supply or otherwise make available to you their relevant privacy notice.

Storage and Disposal of Your Personal Data
We process your personal data in the UK and will retain your personal data for as long as necessary to complete the hiring process. If you are not successful in your application, we will delete your personal data within 2 years of the end of the hiring process.

Your Rights
You have the right to access, rectify, erase, restrict processing, object to processing, data portability of your personal data and rights relating to automated decision making (which we do not use as part of the hiring process).

You may also withdraw your consent at any time if we rely on consent as a lawful basis of processing. To exercise any of these rights, please contact Access.DPO@theaccessgroup.com.

If you feel we have not processed your data in accordance with GDPR, please contact Access.DPO@theaccessgroup.com (or our EU representative, Core.DPO@theaccessgroup.com) for our complaints procedure, or you may raise a complaint with the Information Commissioners Office (or other relevant supervisory authority) but we would like the opportunity to resolve any issues first.