1. Introduction
Eden Row Ltd (“we”, “us”, “our”) is committed to protecting the privacy and security of your personal data. This notice explains how we collect and use personal data about you during and after your relationship with us, in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
2. Data Controller
Eden Row Ltd is a “data controller.” This means that we are responsible for deciding how we hold and use personal information about you.
3. The Data We Collect
We collect, store, and use the following categories of personal information:
- Contact details: Name, address, telephone number, and personal email address.
- Recruitment information: CV, cover letter, years of experience, education, and professional qualifications.
- Identification: Passport, "Right to Work" documentation, and PPS number (only when required for placement).
- References: Information provided by your former employers or referees.
4. How We Use Your Data (Lawful Basis)
We will only use your personal data when the law allows us to. Most commonly, we use it under the following bases:
- Legitimate Interests: To provide recruitment services to you and our clients, and to match your skills with potential vacancies.
- Contract: To take steps at your request to enter into an employment contract.
- Legal Obligation: To comply with Irish employment and tax laws (e.g., verifying your right to work).
- Consent: Where you have given us explicit permission to share your CV with a specific client.
5. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for.
- Unsuccessful Candidates: We typically retain data for 12 months following the last point of contact, in case other suitable roles arise (unless you ask us to delete it sooner).
- Placed Candidates: We retain data for the duration of your placement plus 7 years to comply with Irish Revenue and employment law requirements.
6. Your Rights
Under Irish Law, you have the following rights:
- Access: The right to request a copy of the personal data we hold about you.
- Correction: The right to have any inaccurate or incomplete data corrected.
- Erasure: The right to be "forgotten" and have your data deleted from our systems.
- Withdraw Consent: Where we rely on consent, you can withdraw it at any time.
- Complaint: The right to lodge a complaint with the Data Protection Commission (DPC) of Ireland.
7. Data Security
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal information to those employees and clients who have a business "need to know."