SPS International Ltd is a highly successful global search firm. When collecting data it is done with utmost confidentiality and professionalism. SPS International Ltd endeavours to fully comply with the General Data Protection Regulations (GDPR) 2016/679.
Should you have any concerns please do not hesitate to contact us.
Types of Data we collect from candidates:
Name, address & contact information. Date of Birth. Education & Employment. Family, lifestyle or social circumstances relevant to Recruitment Services. This data is termed as Personal Information under GDPR.
The data is collected directly from the candidate and used only with their consent in relation to recruitment services.
Using Personal Data:
Personal details are collected to make your data available to clients.
We will use information collected from a candidate to perform our client obligations within the contract of a recruitment search. Only candidates with relevant requirements, as specified by the client will be passed on to them within the recruitment search. The candidate will be notified of our intention to forward this information before it happens and can ask to be withdrawn from any search they feel is not relevant to their recruitment needs.
We do not maintain or process sensitive personal data relating to ethnicity, race, political opinions, religious beliefs, trade union membership or data concerning health or sexual orientation.
Types of Data we collect from Clients:
Article 6(1)(f) of the GDPR states that we can process your data where it “is necessary for the purposes of the legitimate interests pursued by the controller [us] or by a third party, except where such interests are overridden by the interests or fundamental rights or freedoms of the data subject [you] which require protection of personal data.”
To ensure that we provide the best service possible, we store your personal data and/or the personal data of individual contacts within your organisation as well as keeping records of our conversations, meetings, registered searches and placements. We deem these uses of your data to be necessary for our “legitimate interests”.
Types of Data we collect from Suppliers
Again Article 6(1)(f) of the GDPR is relevant in order to facilitate the receipt of services from you as one of our suppliers.
We use and store the personal data of individuals within your organisation as well as your financial details in order for us to pay you for your services. We deem these uses of your data to be necessary for our “legitimate interests”.
Article 4(11) of the GDPR states that (opt-in) consent is “any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.”
This means that: you have to give us your consent freely, without us putting you under any type of pressure; you have to know what you are consenting to and you should have control over which processing activities you consent to and which you don’t. We will always ask you before we forward your information to any of our clients.
We will ask you for your consent early on in our contact, before we record the main pieces of personal information. This will most likely be in the form of a tick box on an email. We will keep records of the consents that you have given in this way.
Your consent is required in order for us to process your personal data, your details will be stored for a period of 36 months, at the end of this period you can confirm continued consent or that we remove you from our database.
You may withdraw your consent at any time by using the “contact us” section of the website.
Since your personal information relates to recruitment services we would recommend that you confirm consent even if you are not looking to make changes in your career at that time. That way you will remain in our database, accessible to all our executive search consultants. We would only contact you in relation to relevant positions based on the information held.
Data collection prior to 25th May 2018.
If you have had previous contact with us and provided personal Data this will be covered by the Data Protection Act legislation and will allow us to maintain our records. However you will receive future requests for consent in line with the GDPR.
Consent obtained under Directive 95/46/EC: Controllers that currently process data on the basis of consent in compliance with national data protection law are not automatically required to completely refresh all existing consent relations with data subjects in preparation for the GDPR. Consent which has been obtained to date continues to be valid in so far as it is in line with the conditions laid down in the GDPR.
Sharing of Personal Data
SPS International Ltd share candidate information with Clients with which we have a contract for recruitment services. Candidate consent is required in order for us to do this.
Should a candidate contact us to make a speculative search on their behalf, we will contact the companies as directed by the candidate or identified by us through either a previous recruitment search or further information gathering and consent.
We will record calls, emails, text messages and other communications in relation to your dealings with us. We will do this in order to achieve best practise in our role of recruitment services and fulfilling client contracts.
We will ensure all forms of data recording are within compliance of the Data Protection Act and GDPR guidelines and that any data processors used are also compliant and have provided confirmation of this.
We will ensure in-house best practice within these guidelines for the manual processing of expenses payments, filing and general office duties.
Electronic Information and communications systems
SPS has taken all reasonable steps available in order to prevent unauthorised access to our database, including but not limited to firewalls, cloud services and controlled distribution of passwords.
This relates to: computer equipment, e-mail, the internet, telephones, Blackberries, personal digital assistants (PDAs) and voicemail, but it applies equally to the use of fax machines, copiers, scanners, CCTV, and electronic key fobs and cards.
All staff are expected to protect electronic communications systems and equipment from unauthorised access and harm at all times. This involves use of passwords and antivirus software. Staff should use antivirus software as directed by SPS International Ltd and their IT Managers.
All staff are responsible for the security of the equipment allocated to or used by them, and must not allow it to be used by anyone other than as permitted by SPS International Ltd.
DSAR: Data Subject Access Requests: One of main objectives under GDPR is to protect and clarify the rights of EU citizens and individuals in the EU with regards to data privacy. This means that you retain various rights in respect of your data, even once you have given it to us.
Please us the “Contact us” section of the website if you wish to discuss these rights. We will endeavour to deal with your request without undue delay, and in any event to respond within one month. Please note that we may keep a record of your communications to help us resolve any issues which you raise.
You may ask us to confirm what information we hold about you at any time, and request that we update, modify or delete that information.
People whose data we receive from Candidates and members of staff, such as referees or emergency contacts.
If a candidate or member of staff has given your details as one of their referees we will deem this as necessary for our “legitimate Interests” as an organisation offering recruitment services and an employer.
If a candidate or member of staff has given your details as one of their emergency contacts we will deem this as necessary for our “legitimate Interests” as an organisation offering recruitment services and an employer. We will only contact you in case of an accident or emergency.
What are cookies?
These pieces of information are used to improve services for you through, for example:
- enabling a service to recognise your device so you don’t have to give the same information several times during one task
- recognising that you may already have given a username and password so you don’t need to do it for every web page requested
- measuring how many people are using services, so they can be made easier to use and there’s enough capacity to ensure they are fast
- analysing anonymised data to help us understand how people interact with govt services so we can make them better
You can manage these small files and learn more about them here All About Cookies.org. There’s also a cookies awareness video (below) and further information on how to remove cookies at About Cookies: how to control cookies.
First-party cookies (cookies set by us)
These are cookies set by our web domain known as ‘first-party’ cookies. Some are necessary to the functionality of the site, others provide information to us that we analyse to monitor and improve the site. These first-party cookies do not store or collect any personal information or anything that make you personally identifiable to us. Typically, the cookies generate a random, unique number to store information about a user.
Cookies for measuring website usage
Google Analytics cookies: _utma, _utmb, _utmc, _utmv, _utmd,_utmz
- Data stored by cookies:
- _utma stores each user’s number of visits, time of the first visit, the previous visit and the current visit
- _utmb and _utmc checks how long a visitor stays on the site: when a visit starts and ends
- _utmz tracks where a visitor came from (search engine, search keyword, link)
- _utmv and _utmd track visitor journeys through the site and classifies them into groups
- Duration of cookies:
- _utma expires two years after your last visit to this site
- _utmb expires 30 minutes after your visit, or after 30 minutes of inactivity
- _utmc expires at the end of a session (when you close your browser)
- _utmz expires six months after it was last set
- _utmv (not set) expires immediately
- _utmd (not set) expires immediately
- Where it is used: all pages of our website
How to control and delete cookies
Alternatively, you may wish to visit the About Cookies website, which contains comprehensive information on how to do this on a wide variety of browsers. You will also find details on how to delete cookies from your machine as well as more general information about cookies.
Please be aware that restricting cookies may have an impact upon the functionality of our website.
If you wish to view your cookie code, just click on a cookie to open it. You’ll see a short string of text and numbers. The numbers are your identification card, which can only be seen by the server that gave you the cookie.
For information on how to do this on the browser of your mobile phone you will need to refer to your handset manual. To opt-out of third-parties collecting any data regarding your interaction on our website, please refer to their websites for further information.
We use IP addresses to analyse trends, administer the site, track user’s movement, and gather broad demographic information for aggregate use. IP addresses are not linked to personally identifiable information.
This website takes every precaution to protect our users’ information. When users submit sensitive information via the website, your information is protected both online and off-line.
We do not ask for sensitive information such as credit card numbers online.
We do everything in our power to protect user-information off-line. All of our users’ information, not just the sensitive information mentioned above, is restricted in our offices. Only employees who need the information to perform a specific job (for example, billing or customer services) are granted access to personally identifiable information.
If you have any questions about the security of our website, you can send contact us here.
Supplementation of Information
We do not share any information we receive from this website with any 3rd party sources.
Site and Service Updates
We may send the user site and service announcement updates. Customers are not able to un-subscribe from service announcements, which contain important information about the service. We communicate with the user to provide requested services and in regards to issues relating to their account via email or phone.
Notification of Changes