Privacy Policy

This Privacy Notice sets out the basis on which Mactech Energy Group will process personal information provided to us, this information is also referred to as ‘personal data’.

Introduction

This privacy statement describes the types of information that Mactech Energy Group Limited, our subsidiaries (the Mactech Group) and and all affiliated companies (the Assystem Group) (“Company”, “Us” or “We”) may collect from you, or that you may provide, when you interact with us, call us, visit our websites or mobile applications where this privacy statement is posted (the “Website(s)”). It also applies to all dealings with the Company by third parties, including all recruitment, security clearance and payroll activities. It includes our practices for collecting, using, maintaining, protecting and disclosing that information.

This statement applies to information we collect:

  • On our Websites, including when you create an account or apply for employment (unless we provide an alternate privacy notice).
  • In e-mail, text and other electronic messages between you and Us.
  • Through mobile and desktop applications, if available, you download from our Websites or mobile application stores, which provide dedicated non-browser-based interaction between you and Us.
  • When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this statement.
  • When you call us or we call you.
  • When you communicate with us via hard copy methods such as post.

It does not apply to information collected by:

  • any other means, including on any and all websites that are not operated or controlled by the Company or our affiliates; or
  • any third party (including, for example, YouTube, Facebook, Twitter, etc.), including through any application or content (including advertising) that may link to or be accessible from or on the Websites.
  • When we are acting as a contractor/data processor for another legal entity which decides the means and purpose for processing personal information (i.e. your employer if we manage payroll or security clearance activity for them).

Please read this statement carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, do not use our Websites or provide personal data information to the Company.

By accessing or using our Websites and/or providing us with your personal data (as detailed in this procedure), you agree to this privacy statement. This statement may change from time to time. Your continued use of our Websites, engagement with us or continued provision of personal data after we make changes is deemed to be acceptance of those changes, so please check the statement periodically for updates.

We make no representation that we will comply with any data protection and privacy other than the laws of England and Wales.

Who are we?

Registered Name: Mactech Energy Group Limited
Registered No: 08946927, registered in England and Wales
Registered Office at: 23 Claremont Road, Whitley Bay, Tyne And Wear, NE26 3TN

The data we collect

We collect several types of information from external parties including job applicants and about users of our Websites, including but not limited to, information:

  • by which you may be personally identified, such as images, first name, last name, postal address, e-mail address, telephone number, gender, date of birth, voice recording; or
  • that is about your work-related activities, such as your employer, job title, work email address, experience or professional qualifications; or
  • about your Internet address and/or connection, the equipment you use to access our Websites and usage details.

For job applicants in particular we may also collect:

  • Details about your experience, CV/employment history, cover letters, applications, etc.
  • Qualifications, skills, education history and training records;
  • Video and other images and voice recordings where undertaking video interviews;
  • information needed to support right to work, security or vetting requirements as may be needed for any job role.

Whilst we do not atncipate specifically requesting it, we may also collect more sensitive, special category data about you, such as your:

  • race or ethnicity;
  • health information;
  • details about union membership;
  • details on sexual orientation;
  • religious or other beliefs;
  • criminal record data.

We collect the above information:

  • Directly from you when you provide it to us, i.e. through forums, dialogue boxes, submissions, post and email, or as part of the interview, recruitment or security clearance process.
  • Automatically as you navigate through our Websites as set out below, or through automated recodings on telephone calls.
  • From third parties, for example, our business partners and central Government, advertising agencies, online job sites (such as Socially Recruited, Total Jobs and Indeed), social media providers, recruitment databases and third parties recommending candidates.

Usage Details, IP Addresses and Other Technologies

As you navigate through and interact with our Websites, we may automatically collect certain information about your equipment, browsing actions, and patterns, including:

  • Details of your visits to our Websites, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Websites.
  • Information about your computer and Internet connection, including your IP address, operating system, and browser type.

The navigation information we collect helps us, among other things, to improve our Websites and to deliver a better and more personalised service by enabling us to:

  • Estimate our audience size and usage patterns.
  • Store information about your preferences, allowing us to customize our Websites according to your individual interests.
  • Speed up your searches.
  • Recognise you when you return to our Websites.

The technologies we use for this automatic data collection may include cookies, which are discussed further below.

Cookies

Cookies are simple text files that are stored on computers and mobile devices. Each cookie is unique to a web browser and will contain some anonymous information such as a unique identifier, websites domain name, and some digits and numbers. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Necessary cookies allow us to offer you the best possible experience when accessing and navigating through our website and submitting data to our Customer Relationship Management system (CRM). For example, with recruitment activities, they allow us to recognise that you have created an account and have logged into that account to access content or viewed a job advert and/or submitted a CV to us.

Functionality cookies let us operate our site and CRM in accordance with the choices you make. For example, we will recognise your username and remember how you customised the site during future visits.

Analytical cookies enable us and third-parties services to collect aggregated data for statistical purposes on how our visitors use our website and CRM. These cookies do not contain personal information and are used to help us improve your user experience

Third-party Advertiser Use of Cookies and Other Tracking Technologies

Some advertisements on the Websites may be served by third-party advertisers, ad networks, and ad servers. These third parties may use cookies alone or in conjunction with other tracking technologies to collect information about our users. This may include information about users’ behaviour on this and other websites to serve them interest-based (behavioural) advertising. We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement, you should contact the responsible advertiser directly.

How we use this data

We may use information that we collect about you or that you provide to us, including any personal information:

  • To present our Websites and their contents to you.
  • To provide you with information, products, or services that you request from us.
  • To explore, negotiate, enter into and fulfil business transactions initiated by you or your organisation and for any other purpose for which you provide your information.
  • To carry out our obligations and enforce our rights arising from any contracts entered into between you (or your organisation) and us, including for billing and collection.
  • To notify you about changes to our Websites or any products or services we offer or provide though it.
  • To allow you to participate in interactive features on our Websites.
  • In any other way we may describe when you provide the information.
  • For recruitment activities including:
    • consider your application in respect of a role for which you have applied or in respect of other roles
    • To communicate with you in respect of the recruitment process
    • To enhance any information that we receive from you with information obtained from third party data providers
    • To find appropriate candidates to fill our job openings
  • For record keeping
  • As otherwise permitted by law.

Lawful Basis

Our processing of your data is aimed purely to allow us to respond to your requests (such as for us to contact you, or to send you data) and is based on the following legal grounds:

Legal Basis Example
Performance of a Contract (Article 6.1(b)) Where you contact us via the Website with a view to entering into a contract we may process your data to meet our contractual obligations and to complete any pre-contract activities such as providing a quote or details regarding the products or services that you have expressed an interest in
Legal Obligations (Article 6.1(c)) We may collect and process data to comply with our legal and regulatory obligations, for example as part of our obligation to prevent bribery and fraud.
For our Legitimate Interests (Article 6.1(f)) We may process personal data where such processing is necessary to pursue our legitimate commercial interests, such as operating our business, contracting with your organisation and providing services to our customers (i.e. finding recruits, processing security clearance application forms or administering payroll services)
Consent (Article 6.1(a)) and Explicit Consent (Article 9.2(a)) Where the above grounds do not apply and we request your consent to process your data for a specific activity. In this instance we will comply with the ‘consent’ section below.
Manifestly public data (Article 9.2(e) Where we process data you share on an open social media platform.
Employment & substantial public interest (Article 9.2(b) and (g)) Where we process special category data or criminal records data as part of assessing an application to work for us.
Defence of claims (Article 9.2(f) Where we are involved in any legal proceedings

In addition, we rely on processing conditions in Schedule 1 of the Data Protection Act 2018.

Consent

Ordinarily we ask for consent to collect, use or disclose personal information, unless collection, use or disclosure without consent is authorised by another legal basis or required by law. We may assume your consent in cases where you volunteer information for an obvious purpose (such as applying for a position with us).

You may withdraw consent to the use and disclosure of personal information at any time, unless the personal information is necessary for us to fulfil our reasonable business or legal obligations. We will respect your decision, but we may not be able to provide you with certain services if we do not have the necessary personal information. Sometimes we may not be able to fully stop processing your data once we start, and we will advise you of this when we collect the data.

In cases that do not involve more sensitive personal information, we may rely on “opt-in” consent.

Where we store your data

The Company primarily stores personal data in its CRM which operates both web and mobile based services. Data on our website and internal systems or collected by our contractors may also be stored in secure cloud and servers. Data may be transferred between our internal databases and systems at any time.

All the personal data the Company holds is stored on servers in the UK or EEA, operated by the Company, Assystem Group or a data processor acting on behalf of the Company or an Assystem Group entity.

The Company will only hold your personal information for as long as necessary to fulfil the purposes the Company collected it for. Information is held for the time periods set out in the Company’s Retention Schedule.

How we may disclose your personal data

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose information, including personal information, that we collect or you provide as described in this privacy statement:

  • To our subsidiaries, parent, other affiliates and other entities involved in the activities set out in the Websites, our wider Group website or Assystem Group Websites.
  • To customers, contractors and service providers.
  • To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganisation, dissolution, or other sale or transfer of some or all of the Company’s or our affiliates’ assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which information held by the Company about our Websites users is among the assets transferred.
  • To fulfil the purpose for which you provide it.
  • For any other purpose disclosed by us when you provide the information.With your consent as may be relevant.

Mores specifically for recruitment activites, where you have applied for a job opening, i.e. through an Apply functionality, and/or where you have consented to disclosure, we may disclose your details to our customers, for example to allow them to consider you for a role (whether or not you have applied for that specific role).

We may also disclose your information, including personal information:

  • To comply with any court order, law or legal process, or regulatory request.
  • To enforce or apply our terms of use and other agreements, including for billing and collection purposes.
  • If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our affiliates, our customers, or others.

Data security

We have implemented reasonable, but not infallible, security measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. Any personal information provided may be encrypted. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where We are legally required to do so.

However, the safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Websites like message boards. The information you share in public areas may be viewed by any user of the Websites.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we take reasonable steps to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Websites. Any transmission of information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Websites.

Data retention

Personal information will be retained only as long as necessary in line with our Retention Schedule and will be disposed of in a manner that is appropriate to the sensitivity of the information. We render personal information non-identifying, or destroy records containing personal information once the information is no longer needed. We use appropriate security measures when destroying personal information, including shredding paper records and permanently deleting electronic records.

Your legal rights

You currently have the right at any time to ask for a copy of the information about you that we hold. You also have the right to be informed about our processing activities (which this document sets out)

In addition to this right of access, you also have the following rights:

  • The right to object to processing of your personal data
  • The right to restrict processing of personal data
  • Right to rectification of any errors/mistakes in your personal data
  • The right to have your personal data erased (“right to be forgotten”)
  • The right to move, copy or transfer your personal data.
  • To enforce any of these rights after the above date, please contact the person at the end of this Statement.

If you wish to exercise any of the rights set out above, please contact us at GDPR@mactech.co.uk. Please note that not all rights are available in all situations.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Contact Details

If you have any questions or comments about this privacy statement, or you would like us to update information we have about you please submit a request to us at GDPR@mactech.co.uk.

Changes to our privacy statement

It is our policy to post any changes we make to our privacy statement on this page with a notice that the privacy statement has been updated on the applicable Website.

 

 

 

This Privacy Notice sets out the basis on which ME Global Resources will process personal information provided to us, this information is also referred to as ‘personal data’.

Introduction

ME Global Resources Limited (the “Company”), alongside its parent company, Mactech Energy Group Limited, and the parent’s subsidiaries (the Mactech Group) and all affiliated companies (the Assystem Group), are committed to ensuring the privacy and security of your data. This Privacy Notice tells you what to expect in relation to personal information about you which is collected, handled and processed by the Company in relation to your capacity as a worker (including agency workers) or contractor (referred to as ‘you/your or employee/contractor’ in the rest of this Privacy Notice). Where the Company acts as a processor for a third party, please refer to the third party’s privacy notice.

The Company is registered as a Data Controller with the Information Commissioner’s Office (“ICO”). Its registration number is ZB285027. This means that it is responsible for deciding how it holds and uses personal information about you. The Company is required under data protection legislation to notify you of the information contained in this privacy notice.

When processing your personal data, the Company complies with the Data Protection Act 2018 and the General Data Protection Regulations 2016, as implemented into English law (UK GDPR) and as later may be amended.

Information collected by the Company

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the ability to identify an individual has been removed (anonymised data). There are certain types of more sensitive personal data (special category data) which require a higher level of protection, such as information about a person’s health or criminal convictions.

The information about you that the Company may collect, hold and process is set out below:

Personal contact details such as name, title, address, telephone numbers and personal email address;

  • Job title;
  • Work email address & phone number;
  • Location of employment or workplace;
  • Details about your experience, CV/employment history, cover letters, applications, etc. including start and end dates with the Company and reasons for leaving;
  • Qualifications, skills, education history and training records;
  • Date of birth;
  • Sex and gender;
  • Nationality and entitlement to work in the UK;
  • Remuneration;
  • Entitlement to staff benefits;
  • Passport details/photocopy;
  • Driving licence details/photocopy;
  • National insurance number;
  • Security vetting and clearance levels;
  • References provided to us by others and references given by us relating to you;
  • payment information e.g. bank account details, tax status, HMRC data, etc;
  • Marital status, Next of Kin, dependents and emergency contact details;
  • Car Registration;
  • Drivers licence details (and copy) and insurance details;
  • Annual mileage
  • Pension & insurances details, including entitlement information, amounts, scope of coverage and any qualifications;
  • Photographs and video recordings;
  • Audio recordings;
  • CCTV images used to monitor access to buildings, etc;
  • Information about your use of the Company’s information and communications systems including computer username from Company Network (used as a unique identifier);
  • Details of days of work, working hours and attendance;
  • Details of periods of leave taken including holiday and sabbaticals, and the reasons for the leave;
  • Details of professional memberships;
  • Details of any disciplinary or complaints procedures in which you have been involved, including any warnings issued to you and related correspondence;
  • Assessments of performance, training you have participated in, any development plans and related correspondence;
  • Compensation history;
  • Electronic signatures;
  • Drug & alcohol test results (where required as part of a person’s role);
  • Responses to surveys (only if this data is not anonymised);
  • Details from any psychometric testing;
  • Information to support visa applications;
  • Information to support Right to Works checks including birth/adoption records, immigration status documentation

Please note, the above list is not exhaustive.

The Company may also collect, store and use the following more sensitive types of personal data (“Special Category Data”):

  • Equal opportunities information, including information about your ethnic origin, sexual orientation, health/disability and religion or belief and political opinions;
  • Trade union membership;
  • Information about your health, including any medical condition, health and sickness records etc. details on health qualifications for driving and whether or not you have a disability for which the organisation needs to make reasonable adjustments;
  • details of any absences (other than holidays) from work including sickness, time on family or statutory parental leave and the reasons for the leave;
  • Vetting information, including family information, information about criminal convictions and offences (such as Disclosure & Barring Certificates);
  • Biometric data, including facial recognition and fingerprint authorisation to access IT systems and equipment.
  • Dosimetry records

It should be noted that the Company only holds certain categories of personal data listed above for any contractor.

How the Company collects information and why it has it

The information the Company holds about you comes from a variety of sources. Initially the Company may receive information from you, an individual recommending you, or an employment agent as part of a recruitment process, with referees providing further information to it. Advertising Agencies, online jobsites such as Socially Recruited, Total Jobs and Indeed provide the Company with the facility to collect your data, together with other publicly available information about you that you have published on the Internet – this may include sources such as LinkedIn and other social media profiles.

The Company may then collect additional information from third parties including credit reference agencies, background check agencies, vetting authorities and the Disclosure and Barring Service (DBS) or other external companies that perform similar or equivalent security functions.

The Company will collect additional personal information in the course of job-related activities throughout the period that you work for it and will only use your personal information when the law permits this. This may include processing medical information supplied by a third party such as your GP, medical consultant or Occupational Health. Details of professional qualifications and memberships may be obtained from you or your professional body. Training records may be generated internally, provided by you or issued to the Company from third parties and compiled by the Company in relation to training received during the course of your contract. Performance details will be generated as part of your engagement and captured as part of the Company performance monitoring process. Personal data disclosed as part of phone calls will also be collected by our automated call recording service.

The lawful basis for processing your personal data depends on the processing activity and the Company relies on the following lawful basis for processing your personal data under the UK Data Protection Act 2018/UK GDPR:

  • Article 6(1)(a) where the Company has your consent;
  • Article 6(1)(b) which relates to processing necessary for the performance of a contract (where you and the Company have a direct contract);
  • Article 6(1)(c) so the Company can comply with its legal obligations;
  • Article 6(1)(d) in order to protect your vital interests or those of another person (for emergencies only);
  • Article 6(1)(f) for the purposes of the Company’s legitimate interest.

Where the information the Company processes is Special Category Data, the additional bases for processing that it relies on are:

  • Article 9(2)(a) where the Company has your explicit consent;
  • Article 9(2)(c) to protect your vital interests or those of another person where you are incapable of giving your consent (in emergencies only);
  • Article 9(2)(e) processing is of data which is manifestly public;
  • Article 9(2)(h) for the purposes of preventative or occupational medicine and assessing your working capacity as a contractor;
  • Article 9(2)(f) for the establishment, exercise or defence of legal claims;
  • Article 9(2)(g) for meeting a substantial public interest;
  • Article 9(2)(j) for archiving purposes in the public interest or statistical purposes.

In addition, the Company relies on processing conditions in Schedule 1 of the Data Protection Act 2018.

Please see section 10 for more information on processing based on your consent and withdrawing your consent.

How the Company uses the information

The above information is used by the Company in its capacity as the entity with whom you are under a contract for services (either directly or indirectly).

The Company may use the information above for:

  • Making a decision about your recruitment or appointment;
  • Determining and documenting the terms on which you work for it;
  • Checking you are legally entitled to work in the UK;
  • Ensuring you have, or obtaining, the appropriate clearances for your role and do not possess any prohibited characteristics (i.e. criminal records);
  • Paying you and making appropriate deductions, for example, deducting tax and National Insurance contributions (NICs);
  • Providing the following benefits to you:
    • time off
    • Expenses (and ensuring you are entitled to receive expenses)
    • Car hire, transport (national and international) and accommodation booking
    • Other benefits
  •  Administering the contract the Company has entered into with you and manage the Company’s relationship with you;
  • Office administration, record keeping and security, including the issuing and management of passes and parking passes as well as the operation of CCTV systems;
  • Identifying work for you to undertake, including providing your details to prospective clients for activities/roles with them and/or on client projects, placing you in those roles and managing those relationships;
  • Assessing your performance at work;
  • Education, qualification, training and development needs required for your role;
  • Making decisions about your continued engagement;
  • Making arrangements for the termination of our working relationship;
  • Ascertaining your fitness to work (including appropriate testing and monitoring), managing sickness incidents and absence and keeping in touch during an absence;
  • Dealing with any work related disputes;
  • Gathering evidence for complaints and other work matters and investigations to which you may be a party, witness or participant;
  • Whistleblowing concerns raised by you, or to which you may be a party or witness;
  • Dealing with legal disputes involving you, or other employees/contractors, including accidents at work;
  • Disciplinary processes/procedures and documentation related to any investigations, hearings, appeals and warnings/penalties issued;
  • Complying with legal obligations, including but not limited to, health and safety obligations;
  • Determining and meeting the training and development needs you require for your role or progression;
  • Business management and planning, including accounting and auditing;
  • To prevent fraud;
  • To make travel arrangements, directly or via a third party data processor, with organisations who provide travel services;
  • To monitor your use of Company information and communication systems, including phone systems, to ensure compliance with Company IT and other policies;
  • To ensure network and information security, including preventing unauthorised access to Company and Assystem Group computer and electronic communications systems and preventing malicious software distribution;
  • To conduct data analytics studies and surveys to review and better understand retention and attrition rates;
  • Equal opportunities monitoring;
  • Operation of the Company’s ICT systems including system to manage data related to people, security, travel, ERP, skills, office booking, and others using both server and cloud systems.
  • To allow ICT upgrades and system developments;
  • To protect staff from the health risks of working with display screen equipment (DSE), such as PCs, laptops, tablets and smartphones;
  • To identify potential locations for offices. To determine which locations might be appropriate for consideration, relevant factors may include areas where workers currently live, compared to existing offices;
  • Responding to emergencies, including where you have an accident at work or develop a medical condition, contacting your next of kin and providing relevant medical information to appropriate authorities.
  • Contracting with our customers, partners and suppliers and managing those contracts.
  • To improve our, Assystem Group and third party services.

Some of the above grounds for processing will overlap and there may be several grounds which justify the Company’s use of your personal information.

If you fail to provide certain information when requested, the Company may not be able to perform the contract it has entered into with you (such as paying you or providing a benefit), or it may be prevented from complying with its legal obligations (such as to ensure the health and safety of workers).

How the Company holds information

The Company primarily stores personal data in its Customer Relationship Management system (CRM) which operates both web and mobile based services. Data on our website and internal systems may also be stored in secure cloud and servers. Data may be transferred between our internal databases and systems at any time.

All the personal data the Company holds on contractors is stored on servers in the UK or EEA, operated by the Company, Mactech Group or a data processor acting on behalf of the Company or an Mactech Group entity.

The Company has put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. The Company has physical, electronic, and procedural safeguards to protect information it processes. Access to personal data is limited to those who have a genuine business need to know it.

The Company will only hold your personal information for as long as necessary to fulfil the purposes the Company collected it for. Information is held for the time periods set out in the Company’s Retention Schedule.

Who will have access to your information

The Company limits access to your personal information to those employees, agents, contractors and other third parties who have a business need to know, e.g. the HR & Business Team, IT and relevant internal department undertaking functions relevant to you or your role. Staff and contractors are subject to duties of confidentiality. Others with access include Mactech Group entities and data processors who operate on the Company or a Mactech Group entity’s behalf. The Company requires all data processors to enter into agreements that satisfy the requirements of Article 28 of the UK GDPR. Further details on these measures may be obtained by submitting a request to the contact set out in Section 12 below.

The following activities are carried out by third-party service providers:

  • Regulatory activities (e.g. HMRC);
  • Pension administration;
  • Benefits provision;
  • Online platforms and cloud based environments to deliver and manage various services and systems, including Bullhorn, telephone recording, etc.;
  • Occupational health;
  • Travel arrangements (air, rail etc.);
  • Some network & information security activities
  • Any other providers that the Company deems is necessary for the business.

The Company has put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where it is legally required to do so.

The Company may also transfer your personal data outside of the UK. If this is done, you can expect a similar degree of protection in respect of your personal information.

In addition, the Company may share your details with other data controllers as appropriate, for example sharing your CV with an existing or potential client as part of a proposal to provide services to them. Where your personal data is shared with third parties who are not the Company’s processors, the Company will continue to oblige them to take necessary steps to protect your data, including contractual obligations to comply with the UK GDPR and Data Protection Act 2018. Where requested to do so, the Company will share details of other controllers’ privacy notices with you.

Can the Company change the basis for processing information?

The Company will only use your personal information for the purposes for which it collected it, unless the Company reasonably considers that it needs to use your personal information for another reason and that reason is compatible with the original purpose. If the Company needs to use your personal information for an unrelated purpose, it will notify you and will explain the legal basis which allows it to do so.

Please note that the Company may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Automated decision making

Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. The Company does not currently make any automated decisions about its employees/contractors. Where this changes we will provide a Just In Time Notice to bring this to your attention and update this Privacy Policy.

What are your rights?

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

  • The right to be informed (which this notice fulfils);
  • The right of access;
  • The right to rectification;
  • The right to erasure;
  • The right to restrict processing;
  • The right to data portability;
  • The right to object;
  • Rights in relation to automated decision making and profiling.

For a detailed explanation of these rights, and the specific circumstances in which they apply, please visit the Information Commissioners Office (ICO) www.ico.org.uk
if you wish to exercise any of these rights, please use the contact details in Section 12 of this Privacy Notice.

Does the Company need your consent and how do you withdraw your consent?

The Company does not need your consent if it uses personal or Special Category Data in accordance with its written policy to carry out its legal obligations, to exercise specific rights or for the other lawful grounds identified above (excluding consent). From time to time, the Company may approach you for your written consent to allow it to process certain data. If it does so, it will provide you with full details of the information that it would like and the reason it needs the data, so that you can carefully consider whether you wish to consent. You should be aware that it is not a condition of your contract with the Company that you agree to any request for consent from the Company and you may refuse any request for consent without being subject to any undue detriment.

For any personal data that has been processed on a consent basis and which does not fall into one of the other grounds for processing, then, save where you have received a prior notice to the contrary, you have a right to remove your consent for the Company to process that data. Please use the contact details set out below in Section 12 to exercise this right. The Company may inform you, prior to collecting the data, that the right to withdraw your consent is limited where, following the giving of consent, the withdraw would have a disproportionate impact on the Company. For example, where the Company produces marketing materials using your image, if you withdraw consent, it will not print further materials containing your image, but may continue to use those materials already produced where replacing them would be disproportionately costly.

What if you have concerns?

If you have a concern about the way the Company is collecting or using your personal data, you should raise your concern with the Company in the first instance via the contact details in Section 12.

If you remain dissatisfied with the response received, you have the right to lodge a complaint to the Information Commissioners Office (ICO). The ICO is the UK’s independent body set up to uphold information rights, and they can investigate and adjudicate on any data protection related concerns you raise with them. They can be contacted at:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
0303 123 1113
www.ico.org.uk

Contact details

The Company does not have an appointed Data Protection Officer. Please address any questions, comments and requests regarding the Company’s data processing practices to GDPR@mactech.co.uk

Changes to the Privacy Notice

This Privacy Notice may be changed by the Company at any time.