Privacy Policy

This privacy policy describes how we collect, use, and process your personal data and how we comply with our legal obligations to you in doing so. Protecting your privacy is important to us and we are committed to protecting and upholding your privacy rights.

For the purposes of applicable data protection laws (including but not limited to the UK`s Data Protection Act 2018 (DPA) and the General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”). The responsible entity is REKALL Consulting Limited of 15a Anchor Road, Walsall, England, WS9 8PT, United Kingdom with Company Registration number 12810083 (“REKALL Consulting“, “we“, “us“, and “our“) (hereinafter “we” or “us”).

Important: This Privacy Policy may be amended from time to time. Please use this page to keep informed as we post any changes here.

 

Server data

For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted by your Internet browser to us or to our web space provider. These so-called server log files include the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access as well as the IP address of the internet connection from which our website is used.

The data collected in this way is temporarily stored, but not together with other data about you. This storage takes place on the legal basis of our legitimate interest. Our legitimate interest lies in the improvement, stability, functionality, and security of our website. The data is deleted again after seven days at the latest, unless further storage is required for evidence purposes. Otherwise, the data is exempt from deletion in whole or in part until the final clarification of an incident.

 

Cookies

We use so-called cookies with our internet presence. Cookies are small text files or other storage technologies that are placed and stored on your end device by the Internet browser you use. These cookies are used to process certain information about you on an individual basis, such as your browser or location data or your IP address.

This processing makes our website more user-friendly, effective, and secure. The legal basis for this processing is a contract, insofar as these cookies data are processed for the purpose of initiating or executing a contract. If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is our legitimate interest.

If you wish to learn more about cookies in general and how they work, please visit https://ico.org.uk/yourdatamatters/online/cookies/ or www.allaboutcookies.org. If you want to read more about the cookies we use, please refer to our Cookie Policy.

 

Contact

If you send us enquiries, your details from the inquiry form, including the contact details you have provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on the provision of a pre-contractual or contractual measure if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us or on your consent if this has been requested.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g., after we have completed processing your inquiry). Mandatory legal provisions – in particular retention periods – remain unaffected.

 

Account registration

It is also possible for you to register in our member area. For this purpose, you can choose a password together with your e-mail address, both of which will enable you to log in more easily without having to enter your data again when you visit us at a later date. We store the data you enter to set up a customer account and will hold your data as long as you maintain your registration. You have the right to access, correct or delete your registration data at any time. The legal basis for the storage is Article 6 lit. f) GDPR.

 

Contractual Relationship

In order to establish or implement the contractual relationship with our customers, it is regularly necessary to process the personal master, contract, and payment data provided to us. We also process customer and prospect data for evaluation and marketing purposes. This processing is carried out on the legal basis of our legitimate interest and serves our interest in further developing our offer and informing you specifically about our offers. Further data processing may take place if you have consented or if this serves the fulfilment of a legal obligation.

 

Commercial and business services

We process data of our contractual and business partners, e.g., customers and interested parties in the context of contractual and comparable legal relationships as well as related measures and in the context of communication with contractual partners (or pre-contractual), e.g., to answer enquiries.

We process this data to fulfil our contractual obligations, to secure our rights and for the purposes of the administrative tasks associated with this information as well as for business organisation. We only disclose the data of the contractual partners to third parties within the scope of the applicable law to the extent that this is necessary for the aforementioned purposes or for the fulfilment of legal obligations or with the consent of the contractual partners (e.g., to participating telecommunications, transport, and other auxiliary services as well as subcontractors, banks, tax and legal advisers, payment service providers or tax authorities).

Unless otherwise specified the purposes of processing are Contractual performance and service, contact requests and communication, office and organisational procedures, administration, and response to requests, visit action evaluation, interest-based and behavioural marketing. And, the Legal bases are Contractual performance and pre-contractual enquiries, Legal obligation, and our Legitimate interests.

 

Technical services

We process the data of our customers and clients in order to enable them to select, purchase or commission the selected services or works as well as associated activities and to pay for and deliver them or to execute or provide them. The required information is identified as such in the context of the order, purchase order or comparable contract conclusion and includes the information required for the provision of services and billing as well as contact information.

Unless otherwise specified the purposes of processing are Contractual performance and service, contact requests and communication, office and organisational procedures, administration, and response to requests, visit action evaluation, interest-based and behavioural marketing. And, the Legal bases are Contractual performance and pre-contractual enquiries, Legal obligation, and our Legitimate interests.

 

Data transfer to payment service providers

In order to fulfil the contract, we pass on your data to the company commissioned with the payment, insofar as this is necessary for the payment of our services. Depending on which payment method you select, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service provider. In some cases, the selected payment service providers also collect this data themselves. In this case, the privacy policy of the respective payment service provider applies. The legal basis for the data processing is contract.

 

Data processing for the purpose of fraud prevention and optimisation of our payment processes

Where applicable, we provide our service providers with further data, which they use together with the data necessary for the processing of the payment as our processors for the purpose of fraud prevention and optimisation of our payment processes (e.g., invoicing, processing of contested payments, accounting support). This serves to protect our legitimate interests in our protection against fraud or in efficient payment management, which outweigh our interests in the context of a balancing of interests.

 

Use of customer data for direct marketing purposes

If you have provided us with your e-mail address when using our Services, we reserve the right to regularly send you e-mail offers for similar services. We do not need to obtain your separate consent for this. In this respect, the data processing is carried out solely on the basis of our legitimate interest Art. 6 (1) lit. f.) GDPR in personalised direct advertising. If you have initially objected to the use of your e-mail address for this purpose, we will not send you any e-mails.

You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible person named at the beginning. After receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately. If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the marketing.

If we process your Personal Data for the purpose of sending you SMS marketing communications, you may manage your receipt of marketing and non-transactional communications from us by clicking on the “unsubscribe” link located on the bottom of our marketing emails, by replying or texting ‘STOP’ if you receive our SMS communications. In this respect, the data processing is carried out solely on the basis of our consent Art. 6 (1) lit. a.) GDPR in personalised direct advertising per SMS.

Please note that opting out of marketing communications does not opt you out of receiving important business communications related to your current relationship with us, such as communications about your service announcements or security information.

If you opt-in to SMS marketing, you will be notified by entering your phone number on the checkout page and initialising a purchase, signing up via a subscription form or entering a keyword. If you opt-in to SMS marketing notifications, you agree to the following:

  • You understand and agree that consent is not a condition of purchase.
  • You understand and agree that your phone number, name and purchase information will be shared with our SMS marketing platform including messages sent by autodialer.
  • You understand and agree that the information collected may be used to send you notifications and targeted marketing messages.
  • When sending SMS messages, your phone number will be shared with our SMS delivery partner to ensure delivery of the message.
  • You understand and agree that if you wish to opt-out of receiving further SMS marketing messages and notifications, you must reply with STOP to any message sent by us.
  • You understand and agree that other methods of opting out, such as using alternative words, will not be a reasonable means of opting out.
  • You understand and agree that message and data rates may apply when receiving text messages.

 

When you send a data subject access request

The legal basis for the processing of your personal data in the context of handling your data subject access request is our legal obligation and the legal basis for the subsequent documentation of t data subject access request is both our legitimate interest and our legal obligation.

The purpose of processing your personal data in the context of processing data when you send a data subject access request is to respond to your request. The subsequent documentation of the data subject access request serves to fulfil the legally required accountability.

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the processing of a data subject access request, this is three years after the end of the respective process.

You have the possibility at any time to object to the processing of your personal data in the context of the processing of a data subject access request for the future. In this case, however, we will not be able to further process your request. The documentation of the legally compliant processing of the respective data subject access request is mandatory. Consequently, there is no possibility for you to object.

 

Legal defence and enforcement of our rights

The legal basis for the processing of your personal data in the context of legal defence and enforcement of our rights is our legitimate interest.

The purpose of processing your personal data in the context of legal defence and enforcement of our rights is the defence against unjustified claims and the legal enforcement and assertion of claims and rights. Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.

The processing of your personal data in the context of legal defence and enforcement is mandatory for legal defence and enforcement of our rights. Consequently, there is no possibility for you to object.

 

What types of personal data are collected?

Candidate Data

We need to process certain information about you in order to provide you with optimal, tailored employment opportunities. We only ask for information that we believe will actually help us to serve you better, such as your name, age, contact details, education details, employment history, emergency contacts, residency status, financial information. Where appropriate and permitted by local laws and regulations, we will also collect information about your health, diversity information or details of any criminal record. We also collect certain information about you when you access our website or click on a link in an email we send.

Potential Candidate Data

If we believe that you may be interested in our services or that they may be of benefit to you, we will collect and use this information about you to evaluate how we might help you and contact you. We also collect certain information about you when you access our website or click on a link in an email we send.

Client Data

If you are a client of REKALL Consulting, we may need to collect and use information about you or individuals within your organisation in order to provide or offer services to you, such as: (i) search for candidates who are a good match for you or (ii) providing a managed service provider programme to you (or assisting another organisation to do so), (iii) providing recruitment process outsourcing services to you (or assisting another organisation to do so), (iv) providing services to your employees such as training for teachers working for our education clients, and/or (v) notifying you of content published by REKALL Consulting that is likely to be important and useful to you. We also collect certain information about you when you access our website or click on a link in an email we send.

Supplier Data

We require a small amount of information from our suppliers to ensure a smooth process. We need the contact details of the relevant people within your organisation to communicate with you. We also need other information, such as your bank details, so that we can pay for the services you provide (where this is part of the contractual arrangements between us).

Visitors To Our Website

We collect a limited amount of information from visitors to our website and use it to help you use our website and to better manage the services we provide. This includes, but is not limited to, information about how you use our website and how often you access the website, as well as the times when our website is most in demand.

Depending on the nature of the personal data in question and the reasons for its processing by us, we may not be able to fulfil our contractual obligations or, in extreme cases, may not be able to continue the business relationship if you refuse to provide us with that data or request us to stop processing it.

 

How is your personal data collected?

Candidate Data

We collect your personal data either: From you or from third parties. Further, if you access our website or read or click on an email from us, we will also collect certain data automatically or by you providing it to us. You can find more information here.

 

Potential Candidate Data

We collect personal data about you from third parties (for example, social media, professional networks, job search engines and online job advertising providers when they refer you to us). Further, to the extent that you access our website or read or click on an email from us, we will also collect certain data automatically or by you providing it to us.

 

Client Data

We collect your personal data either: From you or from third parties (e.g., our candidates or temporary employees) and other limited sources (e.g., online and offline media). Furthermore, if you access our website or read or click on an email from us, we will also collect certain data automatically or by you providing it to us. You can find more information here.

 

How will your personal data be used?

Candidate Data

The main reason we use your personal information is to help you find employment or other suitable employment. The more information we have about you, your skills, and your goals, the better we can tailor our service to you. Where appropriate and permitted by local laws and regulations, we will also use your personal information to advertise our services to you, profiling, and diversity monitoring, etc. We may ask you to provide us with more information about yourself. Where appropriate, we will ask for your consent to do some of these things.

Data Of Potential Candidates

We use information about potential candidates to determine whether you are interested in or may benefit from our services. If this is the case, we will assess whether and how we could help you. If we think we can help you, we will use your information to contact you about our services.

Client Data

The main reason we use information about clients is to be able to introduce ourselves to you and to ensure that the contractual arrangements between us can be properly implemented to ensure a smooth business relationship. This will include: (i) identifying candidates that we believe are a good fit for you or your organisation, (ii) providing services to you (or supporting another organisation in doing so, (iii) providing services to your staff such as training. The more information we have, the better we can tailor our service to you.

Supplier Data

We use your personal data for two main reasons: to ensure that the contractual arrangements between us can be properly implemented to enable a smooth business relationship, and to ensure compliance with the law.

Please note that communications to and from REKALL Consulting employees, including emails, will be reviewed as part of any internal or external investigation or dispute.

 

Who will your personal data be shared with?

Candidate Data

We will share your personal data with different recipients in different ways and for different reasons. First and foremost, we will share your information with potential employers to increase your chances of getting the job you want. Unless you have indicated otherwise, we will also share your information with any of our group companies as well as related third parties, such as service providers we use and selected job search engines, if we believe this will help us to provide the best service to you and maximise your chances of getting the job you want.

Potential Candidate Data

If you have been identified as a potential candidate, we may share your information with all group companies and related third parties, such as service providers we use, in order to contact you about our services.

Temporary Employee Data

If we employ you directly as a temporary employee, we may share your personal data with some additional parties to ensure a smooth temporary employment relationship. For example, we may share your personal data with relevant colleagues at REKALL Consulting (this may include colleagues in offices overseas), a client and, if applicable, medical professionals such as your GP or an occupational health expert.(for example, for the purpose of a necessary workplace adjustment, if required).

Client Data

We share your data for the following purposes: (i) primarily to ensure that we can provide you with access to an appropriate pool for candidates, (ii) to provide (or assist another organisation to provide) services to you and/or (iii) to provide services to your employees such as training. Unless you have indicated otherwise, we will share your information with any of our group companies as well as related third parties, such as service providers we use, in order to better achieve these objectives.

Supplier Data

Unless you have indicated otherwise, we will share your information with any of our group companies as well as related third parties, such as service providers we use and organisations for which we provide services.

 

How is your personal information protected?

Protecting your information is important to us. That is why we take appropriate measures to prevent unauthorised access to and misuse of your personal information.

 

How long will your personal data be stored?

If you are a customer or supplier, we store your personal data in order to provide services to you or receive services from you, or to provide you with information about our services that we think may be of interest to you. If you have specifically indicated that you do not wish us to retain your personal data, we will delete it from our systems unless we have a good faith belief that we are required to retain it by law or regulation (for example, because of a request from a tax authority or a connection with prospective litigation) or other legal exemptions apply.

If you are a prospective candidate or a candidate and we have not had any relevant contact with you (or, if applicable, the organisation for which or with which you work) for two years, we will delete your personal data from our systems unless we are satisfied in good faith that we are required by law or other regulation to retain it (for example, because there is a request from a tax authority or in connection with anticipated litigation).

Similarly, for customers and suppliers, if you are a prospective candidate or have specifically indicated that you are not interested in our services, we will delete your personal data from our systems unless we are satisfied in good faith that we are required by law or other regulation to retain it (for example, because of an enquiry from a tax authority or in connection with anticipated litigation).

If you are a visitor to our website, we will retain all data for as long as is necessary to achieve the purpose for which it was collected or processed. If you have specifically indicated that you would prefer us not to retain your personal data, we will delete it from our systems unless we have a good faith belief that we are required by law or other regulation to retain it (for example, because of a request from a tax authority or a connection with prospective litigation) or other legal exemptions apply.

 

How can you access, amend, or withdraw personal information you have provided to us?

Even if we are already in possession of your personal data, you have various rights with regard to this data. If you wish to contact us in this regard, please contact us. We will endeavour to process your request as quickly as possible and in any case in accordance with the applicable legal provisions. Please note that we may keep records of our communications in order to better resolve issues raised by you.

Right to object

If we use your data because we believe it is in our legitimate interests to do so, and you do not consent to this, you have the right to object. We will respond to your request within 30 days (although in certain cases we may be entitled to extend this period). As a general rule, we will only object to you in certain narrowly defined circumstances.

Right to withdraw consent

If we have obtained your consent to process your personal data for certain activities (for example, in certain jurisdictions, to use cookies) or your consent to send you advertisements, you may withdraw your consent at any time.

Data Subject Access Request

For clarification, you have the right to request confirmation from us at any time as to what information we hold about you and to request that we amend, update, or delete that information. We may comply with your request in response. In addition, we have the following options: Ask you to confirm your identity, or ask you for more information about your request, and were permitted by law, refuse your request. (However, in this case we will explain the reasons for the refusal).

Right to erasure

In certain situations (for example, if we have unlawfully processed your data) you have the right to ask us to “erase” your personal data. We will respond to your request within 30 days (but in certain cases we may be entitled to extend this period) and will only object to you doing so in certain narrowly defined circumstances. If we agree to your request, we will delete your data.

Right to data portability

If you wish, you have the right to transfer your data from us to another data controller. We will assist you in doing this by transferring your data directly for you or by providing you with a copy in a commonly used machine-readable format.

If your interests or requirements change, you can unsubscribe from some or all of our promotional content (for example, email notifications of vacancies from REKALL Consulting) at any time.

 

How is your data stored and transferred internationally?

REKALL Consulting is an international company – this is the only way we can provide you with this level of service. In order for us to continue to operate in this way, we may need to transfer or store your data internationally in certain circumstances.

 

Equality monitoring and other sensitive personal data

We want to ensure that our recruitment processes are consistent with our approach to equality. Some of the data we collect about you (in certain circumstances and in accordance with local laws and regulations) falls within the scope of ‘diversity information’. This may be information about your ethnic background, gender, disabilities, age, sexual orientation, religion, or similar beliefs and/or socio-economic background. This diversity information is considered “sensitive” or “specially categorised” personal information and is subject to stricter data protection rules.

Where appropriate and in accordance with local regulations and requirements, we will use this information in anonymised form to monitor whether we are complying with our Equality Policy. We will also provide this information (appropriately anonymised where appropriate) to clients (including their internal or external auditors) where contractually agreed or where the client specifically requests this information in order to comply with their own employment processes.

We may collect other sensitive/special categorisation personal information about you, such as health or religious affiliation information, where permitted by local law. In these circumstances, we will use this information to comply with employment rights and obligations, such as calculating annual leave entitlement or making appropriate adjustments for candidates or part-time employees.

We may also collect details of any criminal convictions were permitted by local law which may require us to obtain your consent. If you do not agree, you can withdraw your consent at any time. Information on how to do this can be found here. Please note that in some jurisdictions where we operate, different rules apply to this sensitive/special categorised data. Further information in relation to your jurisdiction can be found here.

 

Security measures

For security reasons and to protect the transmission of content, that you send to us, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

 

Testimonial

Within the Testimonial section, you may be able to display certain personal information, share certain details, engage with others, exchange knowledge and insights, post and view relevant comment. Comment and data are publicly viewable. You have choices about the information on your comment. You don’t have to provide additional information on your comment; however, comment information helps you to get more from our Services. It’s your choice whether to include sensitive information in your comment and to make that sensitive information public. Please do not post or add personal data in your comment that you would not want to be available.

 

When you apply for a position within REKALL Consulting

If you use our forms to apply for a role or job, we process the information we receive from you as part of the application process, e.g., through your letter of application, CV, references, correspondence, telephone, or verbal details. In addition to your contact details, information about your education, qualifications, work experience and skills is particularly relevant to us.

Your data will initially be processed solely for the purpose of carrying out the application process. If your application is successful, it will become part of your personnel file and will be used to carry out and terminate your employment and will be deleted in accordance with the rules applicable to personnel files. If we are unable to offer you employment, we will continue to process your data for up to six months after sending the rejection in order to defend ourselves against any legal claims, in particular alleged discrimination in the application process.

The legal basis for processing data during the application process is Art. 6 (1) b GDPR and, if you have given your consent, for example by sending us information that is not necessary for the application process, it is Art. 6 (1) a GDPR. The legal basis for data processing after a rejection is Art. 6 1 letter f GDPR.

As a rule, we do not require any special categories of personal data within the meaning of Art. 9 GDPR for the application process. We ask you not to provide us with any such information from the outset. If such information is relevant to the application process, we process it together with your other data. Your data will not be used by us for automated decision-making or profiling, nor will it be passed on to third parties. Your data will be processed by us or on our behalf.

You are not obliged to provide us with personal data. However, we can only assess your suitability for the respective position under consideration if we receive information in particular about your education, work experience and skills, and we cannot include you in the application process without providing your contact details.

 

Data transfer upon conclusion of a contract for services and digital content

We only transmit personal data to third parties if this is necessary within the framework of the contract processing, for example to the credit institution commissioned with the payment processing. Further transmission of data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

 

Obligation to provide personal data

You are not obliged to provide us with personal data. However, depending on the individual case, the provision of certain personal data may be necessary for the provision of the above services. If you do not provide us with this personal data, we may not be able to provide the service.

 

Automated individual decision-making including profiling

We do not make automated decisions in individual cases, including profiling.

 

Accuracy

It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.

 

Children Data

Our website is not intended for children, and we do not knowingly collect data relating to children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us and we take the necessary steps to remove that information from our server.

 

Changes

This policy and our commitment to protecting the privacy of your personal data can result in changes to this policy. Please regularly review this policy to keep up to date with any changes.

 

Queries and Complaints

If you have any questions, please do not hesitate to contact us.