General Data Protection Regulation (GDPR) Policy Link-Force Ltd

Cressex Enterprise Centre, Lincoln Rd, High Wycombe HP12 3RL Date of Issue: 01st January 2019

Last Updated: 01st October 2024

1. Introduction

Link-Force Ltd (hereafter referred to as "the Company") is committed to safeguarding the privacy and security of personal data. This GDPR Policy explains how we collect, use, and protect personal data in compliance with the General Data Protection

Regulation (EU) 2016/679 (GDPR).

2. Data Controller

Link-Force Ltd is the data controller responsible for your personal data. Our registered office is located at Cressex Enterprise Centre, Lincoln Rd, High Wycombe HP12 3RL.

For any data protection inquiries, please contact:

Email: info@link-force.com Phone: 02033 940000

Postal Address: Cressex Enterprise Centre, Lincoln Rd, High Wycombe HP12 3RL

3. Data Collection and Processing

We collect and process personal data for the purposes of recruitment and employment placement. The following categories of personal data may be collected:

3. • Candidate Information: Name, contact details, CVs, employment history, references, qualifications, and any other information necessary for the recruitment process.
   • Client Information: Company name, contact details, business requirements, and other data necessary for fulfilling contractual obligations.
4. Lawful Basis for Processing

We rely on the following legal bases for processing personal data:

• • Consent: We may process personal data when individuals have given explicit consent for specific purposes.

• • Contractual Obligations: We process personal data to fulfill contracts with candidates and clients.
  • Legitimate Interests: Processing is necessary for the legitimate business

interests of Link-Force Ltd, such as recruitment activities, client relationship management, and business improvement.

4. • Legal Obligation: We may process personal data to comply with legal obligations, such as employment law, tax law, or regulatory requirements.
5. How We Use Personal Data

Link-Force Ltd uses personal data for the following purposes:

5. • To match candidates with appropriate job opportunities
   • To contact candidates regarding job openings, interviews, or feedback
   • To maintain client relationships and fulfill recruitment contracts
   • To comply with legal and regulatory requirements
   • To improve our recruitment services
6. Data Sharing and Disclosure

We may share personal data with the following third parties:

• • Clients: To facilitate the recruitment process and match candidates to job roles.
  • Service Providers: We may share data with trusted third-party service providers, such as IT support, legal advisors, and payroll processors, where necessary.
  • Legal Authorities: We may disclose personal data when required by law or to enforce our legal rights.

We will not sell or rent personal data to third parties.

7. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, in accordance with our retention policy. The retention periods are as follows:

• • Candidate Data: Stored for up to 6 Years after the last contact or engagement, unless otherwise requested by the individual.
  • Client Data: Stored for the duration of the client relationship and for 6 Years after its conclusion for legal and compliance purposes.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. These measures include:

8. • Encryption of sensitive data
   • Regular security assessments
   • Access controls to personal data on a need-to-know basis
   • Secure destruction of paper records and digital files
9. Rights of Data Subjects

Under GDPR, individuals have the following rights regarding their personal data:

• • Right to Access: You may request access to your personal data that we hold.
  • Right to Rectification: You may request correction of inaccurate or incomplete data.
  • Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data, subject to legal and contractual obligations.
  • Right to Restrict Processing: You may request limitations on how your data is processed in certain circumstances.
  • Right to Data Portability: You may request to receive your personal data in a structured, commonly used format.
  • Right to Object: You have the right to object to the processing of your data in certain situations.

To exercise these rights, please contact our DPO at the contact details provided above.

10. Data Breaches

In the event of a data breach, Link-Force Ltd will take immediate action to mitigate risks and notify the relevant authorities and affected individuals within 72 hours, in

accordance with GDPR requirements.

11. Consent Withdrawal

If processing is based on your consent, you have the right to withdraw your consent at any time. To withdraw consent, please contact us at [Insert Email/Phone Number].

Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

12. Changes to this Policy