Privacy Statement for Job Applicants

1. SCOPE AND CONTACT

This Privacy Policy applies to personal data collected by mirus (collectively referred to in this Privacy Policy as “we”, “us” or “our”) on websites (including mobile sites and apps), via registration forms, surveys, at events (including awards), or if you contact us (online, by post, telephone or social media).

Your privacy is very important to us and this Privacy Policy sets out how we will process your personal data and what rights you have in respect of your own personal data. Under data protection legislation (such as the Data Protection Act 1998 and the Regulation (EU) 2016/679 (better known as GDPR)) mirus is the data controller in respect of your personal data and in this capacity we will securely store and process your personal data which you have provided to us. As data controller we have registered with the Information Commissioner’s Office and our registration number is……………[[[missing number]]]

The aim of this Privacy Policy is to tell you how we will use any personal data we collect or you provide to us.

If you have any questions about this Privacy Policy or your rights in respect of your personal data, please contact us at admin@mirus-wales.org.uk

2. WHAT PERSONAL INFORMATION DO WE COLLECT?

You do not have to give us any personal information in order to browse our websites.

However, if you wish to request further information, contact us, complete any surveys, apply to work for us, or provide content for inclusion on our websites (e.g. blogs or other online forums) we will collect certain data, including personal data. The data we will collect may include:

• title, name, address, business phone number(s), email address and gender;
• employment details, such as your current role and responsibilities, experience, seniority, salary and education;
• information about your organisation and the industry that you work in;
• areas of interest which you have notified us about, as well as what we can assume from your engagement with us;
• your CV/application;
• your job alert preferences;
• any data recoverable from social networking sites, where permission from you has been obtained; and
• any other information that you submit to us.

We may receive the above information directly from you, or from your colleague or contact who registers for information or event on your behalf.

Please note that not all of the information we request is mandatory to provide you with the service. You are not required to provide any optional information.

If you respond to surveys, unless we inform you otherwise, your answers will be aggregated and anonymized for research and analysis purposes. However, if you choose to provide any information in your response to a survey which identifies you (e.g. name, job title), we may be able to identify you from this.

We also collect information about the pages of our website which you visit, the links you click on, IP addresses, the type of browser you use and the times you access our websites. Some of this information is aggregated and is not used to identify you.

3. HOW WILL YOUR PERSONAL INFORMATION BE USED AND SHARED?

The personal information we collect allows us to:

• provide the services/advice you have requested;
• register you for events and administer those events;
• notify you of key information in relation to any events you are attending;
• meet legal, regulatory and compliance requirements;
• monitor and analyse the use of any account to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime;
• gather information to form statistical and trend analysis including to monitor user demographic and to improve our services, events and marketing practices;
• communicate with you including responding to your enquiries;
• investigate any complaints about our website, services or events;

Where you are attending an event organised by us and, where you have provided your consent for us to do so (or we have informed you that we are relying on some other legal basis to share this information), we may share your name, job title and company with the other attendees of the event (including making this information available via the event app, on social media sites and/or in our event guide).

Where you register to attend one of our events hosted by a third party, we may share your registration information with such third party and we may share your registration information with the sponsors of our events.

Where you apply for a job via our website we share your application with the recruiter for that job.

We may employ the services of third party service providers to help us in certain areas, such as website hosting, maintenance, and the operation of events. In some cases the third party may receive your personal data. However, at all times, we will control and be responsible for the use of your personal data and we will endeavour to ensure that our service providers are bound by contractual obligations to only process your personal data in accordance with our instructions.

We may use aggregated information so we can administer and improve our website, analyse trends and gather broad demographic information and detect suspicious or fraudulent transactions. We may pass this information to third parties. In most cases this information will be anonymised, meaning that you will not be able to be identified from it.

We may occasionally be required by law, court order or governmental authority to disclose certain types of personal data. Examples of the type of situation where this would occur would be:

• in the administration of justice; or
• where we have to defend ourselves legally.

4. MERGE OF BUSINESS

In the event that mirus becomes integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s advisers and will be passed to the new owners of the business.

5. GROUNDS FOR PROCESSING

Our processing of your personal data will be where: (i) it is necessary for the performance of a contract we have with you; (ii) where you have provided your consent; (iii) it is necessary for us to comply with legal obligation that we are under; or (iv) it is in our (or a third party’s) legitimate interests and such interests do not prejudice your rights or freedoms. Our (or a third party’s) legitimate interests will include:

• to gather information for statistical and trend analysis including to monitor user demographic so we can better understand those that use our services and improve such services;
• to monitor attendance at events to better understand how best to run future events;
• where we publish news and content containing personal data within our publications, products and content.

6. FALSE INFORMATION

If false or inaccurate information is provided, details may be passed to the relevant agencies to which the information refers, when as an example:

• checking details of job applicants

7. LINKS

Our site contains links to other websites over which we have no control. We are not responsible for privacy policies or practices of other websites to which you choose to link from this site. We encourage you to review the privacy policies of those other websites so you can understand how they collect, use and share your personal information.

8. SECURITY

We have implemented reasonable technical and organisational measures designed to secure your personal information from accidental loss and from unauthorised access, use, alteration or disclosure. However, the Internet is an open system and we cannot guarantee that unauthorised third parties will never be able to defeat those measures or use your personal information for improper purposes.

9. YOUR RIGHTS

You have the following rights in relation to your personal data:

• a right of access to your personal data held by us;
• a right to receive your personal data in machine-readable format;
• a right to object to processing that is likely to cause or is causing you damage or distress;
• a right to object to decisions being taken by automated means (including profiling for the purposes of marketing);
• a right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed; and
• a right to claim compensation for damages caused by a breach of data protection legislation.

These rights can be exercised by contacting us at www.mirus-wales.org.uk in order to protect you, we reserve the right to verify your identity before processing any such request.

If you are unsure about your rights or are concerned about how your personal data may be processed you should contact the Information Commissioner’s Office.

If you contact us in relation to your rights we will do our best to accommodate your request or objection. Please note, however, that not all rights are absolute.

10. UPDATING YOUR PERSONAL INFORMATION

You may review, correct, update or change your personal information at any time by contacting us at admin@mirus-wales.org.uk

11. RETENTION

We will retain your personal data for the period necessary to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. Accordingly, your personal data shall be maintained for up to seven years following the end of the services we provide to you / your last contact with us. This retention period may be extended if any applicable statutory or regulatory obligation requires us to hold information for a longer period.

12. CHANGES TO OUR PRIVACY POLICY

If our Privacy Policy changes in any way, we will place an updated version on this page and we will take reasonable steps to make you aware of those changes. Regularly reviewing this page ensures that you are always aware of what personal information we collect, how we use it and under what circumstances, if any, we will share it with other parties.

13. HOW TO CONTACT US

As a reminder, if you have any questions about this statement or your personal information, please contact us at admin@mirus-wales.org.uk