CROSLYN HEALTHCARE GDPR POLICY.

INTRODUCTION.

Croslyn Healthcare is dedicated to upholding the highest standards of data protection, privacy, and security. This comprehensive General Data Protection Regulation (GDPR) policy is designed to ensure strict compliance with the European Data Protection Act 2018 (UK GDPR) and other relevant data protection regulations. It outlines our commitment to safeguarding the personal data of our employees, clients, job candidates, and other stakeholders.

DATA PROTECTION PRINCIPLES.

At Croslyn Healthcare, we adhere to the fundamental data protection principles to ensure the lawful, fair, and transparent processing of personal data. These principles encompass purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and accountability and responsibility.

DATA COLLECTION AND PROCESSING.

What Personal Information Do We Collect?

Candidate Data.

In addition to mandatory employment information, Croslyn Healthcare may collect, but not limited to, an extensive range of personal data:

• Identification Data:
  • Name
  • Age/Date of Birth
  • Sex/Gender
  • Photograph
  • Marital Status
• Contact Information:
  • Contact Details
• Educational and Professional Background:
  • Education Details
  • Employment History
• Emergency and Dependency Information:
  • Emergency Contacts and Dependent Details
• Reference and Verification Data:
  • Referee Details
  • Immigration Status
  • Nationality/Citizenship/Place of Birth
  • A copy of your driving license and/or passport/identity card
• Financial Information:
  • Details relevant for financial background checks

How We Collect Your Personal Data.

Candidate Data

We collect personal data through:

• Information provided directly by you
• Interactions with our online services
• Submission of CVs or participation in online training

How We Use Your Personal Information.

Having obtained your data, we utilize it in various ways, with a primary focus on recruitment. This includes but is not limited to:

• Matching your skills and experience with relevant job opportunities
• Forwarding your details to potential employers
• Keeping you informed about potential roles
• Conducting interviews and assessments
• Carrying out background and reference checks

YOUR RIGHTS.

1. Right to Object

You have the right to object to the processing of your personal data for legitimate interests or direct marketing. If your objection pertains to legitimate interests, we commit to ceasing the processing unless there are compelling grounds that override your interests.

Under the Data Protection Act 2018, you retain various rights:

2. Right to Access:

Confirm the information we hold about you.

3. Right to Rectification:

Correct or complete inaccurate or incomplete data.

4. Right to Erasure:

Request deletion of data under specific circumstances.

5. Right to Restrict Processing:

Limit processing under certain circumstances.

6. Right of Data Portability:

Transfer your data to another data controller.

DATA SECURITY.

Croslyn Healthcare employs rigorous technical and organizational measures to secure personal data, including secure storage, access controls, encryption, and regular security audits.

• Data Breach Response.

In the event of a data breach, Croslyn Healthcare will promptly notify the relevant authorities and affected individuals within 72 hours. Detailed records of all breaches will be maintained.

• Data Sharing and International Transfers.

Personal data may be shared with third parties, both within and outside the European Economic Area (EEA), ensuring compliance with data protection legislation and adequate safeguards.

• Data Retention.

Croslyn Healthcare retains personal data for the necessary duration, adhering to legal obligations and legitimate interests. Clear policies and procedures govern the secure disposal of data.

• Data Privacy by Design.

Croslyn Healthcare integrates data protection measures into all stages of processing and system development, following the "data protection by design and default" approach.

• Data Protection Officer.

A dedicated Data Protection Officer (DPO) oversees compliance with this policy and data protection regulations, ensuring continuous adherence to the highest standards.

COOKIES POLICY.

What's a Cookie?

A "cookie" is a piece of information stored on your computer's hard drive. It records your website navigation, tailoring options based on your previous visits.

How We Use Cookies.

We use cookies for:

• Tracking website usage to understand user patterns.
• Providing personalized job advertisements.
• Analyzing website traffic for advertising and marketing purposes.

POLICY REVIEW.

This GDPR policy undergoes regular reviews to stay current with evolving regulations, organizational practices, and the changing needs of data subjects. We are committed to maintaining the highest standards of data protection and privacy.

CONTACT.

For inquiries regarding this policy or personal data, please contact our Data Protection Officer (DPO) or Data Protection Team. Your privacy matters to us, and we are here to address any concerns or questions you may have.