Who we are
The Mclean Public Limited (‘Mclean’) provides executive search and interim management services to clients who are looking to recruit personnel for their business. We need to collect personal data from our clients, candidates, and other individuals to ensure we can provide these services.
Your privacy is important to us and it is our policy to respect the confidentiality of information and the privacy of individuals. This notice outlines how we as a data controller, manage your personal information (‘personal data’). It also details your rights in respect of our processing of your personal data.
What kind of personal data do we collect about you?
We collect information necessary to fulfil our obligations to our clients and to find available opportunities for our candidates.
Some of this data is submitted to us in the form of CVs, application forms, covering letters and identification documents, and may include the following types of data: name, address and contact details, date of birth and gender, information about your income and benefits, profession and employment details, including previous employment history, qualifications, family details, lifestyle and social circumstance, bank details, location data and any other similar information.
We may occasionally be given sensitive personal data such as health details, or racial or ethnic origin. We only collect and further process this data, where you have given your explicit consent.
If you provide us with any personal data relating to a third party (e.g. information of your spouse, children, parents), you represent to us by providing the data to us, that you have obtained prior consent from that person.
How do we collect your data?
Generally, we collect personal data in the following ways:
- When you interact with our employees, for example, via telephone calls, letters, face-to-face meetings and emails;
- When you submit CVs, application or declaration forms and identification documents to us;
- When you use some of our services, like our websites
- When you request that we contact you, be included in an email or other mailing list;
- When you respond to our initiatives or to any request for additional personal data;
We may also collect personal data in the following ways:
- From an agent/third party acting on your behalf. e.g. Interim Management Company.
- Through publicly available sources such as social media.
- By reference or word of mouth. For example, you may be recommended by a friend, a former employer, a former colleague or even a present employer.
What legal basis do we have for using your information?
The law on data protection allows us to only process your data for certain reasons:
- in order to perform a contract that we are party to
- in order to carry out legally required duties
- in order for us to carry out our legitimate interests
- to protect your interests and
- where something is done in the public interest.
All of the processing carried out by us falls into the first three permitted reasons, for example; for the performance of a contract we have entered into with clients or in order to comply with legal requirements, such as carrying out checks in relation to your right to work in the UK.
For prospective candidates, referees and clients, our processing is necessary for our legitimate interests in that we need the information in order to be able to assess suitability for potential roles, to find potential candidates and to contact clients and referees.
If you are shortlisted as a candidate, then this may involve the processing of more detailed personal data including sensitive data such as health information that you or others provide about you. In that case we always ask for your consent before undertaking such processing. You have the right to withdraw that consent at any time by contacting us using the contact details below.
If you do not provide the personal data necessary, or withdraw your consent, we may not be able to match you with available job opportunities.
How long do we keep this information for?
Your personal data is kept for the minimum time to fulfil the purposes for which it was collected or otherwise to meet statutory requirements.
For example if you provide us with a CV and are unsuccessful in your job search, we may keep this CV on file for a reasonable period of time should another suitable role become available.
Disclosure of your personal data
We may share your data with selected third parties including:
- a client for the purpose of a placement, project or assignment
- a verification company to conduct checks on you to verify the information you have provided
- third party service providers who process this data on our behalf to help run some of our internal business operations for example IT services.
Where we share your data with third parties we ensure that your data is held securely and in line with UK GDPR requirements.
How do we store and protect personal data?
Safeguarding the privacy of your data is important to us, whether you interact with us personally, by phone, mail, over the internet or any other electronic medium.
We hold personal data in a combination of secure computer storage facilities and paper-based files and other records, and take steps to protect the personal data we hold from misuse, loss, unauthorised access, modification or disclosure. We have a detailed data protection policy and procedure in place and ensure that all employees understand their obligations.
We have adequate IT Security arrangements in place to ensure your personal data is held securely. However, the internet is an open medium and we cannot guarantee that any data you send to us by email or via our sites will not be intercepted or tampered with; any transmission is at your own risk.
Your rights as a data subject
The law on data protection gives you certain rights in relation to the data we hold on you. These are:
- the right to be informed. This means that we must tell you how we use your data, and this is the purpose of this privacy notice
- the right of access. You have the right to access the data that we hold on you. To do so, you should make a subject access request
- the right for any inaccuracies to be corrected. If any data that we hold about you is incomplete or inaccurate, you are able to require us to correct it
- the right to have information deleted. If you would like us to stop processing your data, you have the right to ask us to delete it from our systems where you believe there is no reason for us to continue processing it
- the right to restrict the processing of the data. For example, if you believe the data we hold is incorrect, we will stop processing the data (whilst still holding it) until we have ensured that the data is correct
the right to portability. You may transfer the data that we hold on you for your own purposes
- the right to object to the inclusion of any information. You have the right to object to the way we use your data where we are using it for our legitimate interests
- the right to regulate any automated decision-making and profiling of personal data. You have a right not to be subject to automated decision making in way that adversely affects your legal rights. Please note that we do not carry out any automated profiling.
You can read more about these rights here https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
Access to personal information about you
You have the right to request a copy of the personal data we hold about you. If you would like a copy of some or all of this data you may contact us by telephone on 0203 597 6400 or you may write to us at our registered office address: 18 St. Swithin’s Lane, London EC4N 8AD.
If you have any queries regarding privacy issues or the content of this privacy notice, you can email us on firstname.lastname@example.org or write to us at: 18 St. Swithin’s Lane, London EC4N 8AD or call us on 0203 597 6405.
What if you have a complaint?
If you have a concern about any aspect of our privacy practices, you can make a complaint. This will be acted upon promptly. To make a complaint, please contact us via one of the methods set above. If you are not satisfied with our response to your complaint, you have the right to lodge a complaint with our supervisory authority, the Information Commissioner’s Office (ICO). You can find details about how to do this on the ICO website at https://ico.org.uk/concerns/ or by calling their helpline on 0303 123 1113.