Jobs API Developments
Seccl is a Data Controller within the definition of Article 4 GDPR and is responsible for maintaining and protecting your Personal Data.
The Data Seccl Collects about you
Seccl collects, uses, stores and transfers different kinds of Personal Data about you as follows:
Seccl does not collect any special category of Personal Data about you ie: details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health/medical history, and genetic and biometric data, nor does Seccl collect any information about criminal convictions and offences.
How Seccl Collects Your Personal Data
Seccl will use different methods to collect data from and about you including by:
You may provide Seccl with your Personal Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This will include Personal Data you provide to Seccl when you:
Automated Technologies or Interactions
Third Parties or Publicly Available Sources
Seccl will receive Personal Data about you from various third parties and public sources as set out below;
How Seccl Use Your Personal Data
Seccl will only use your Personal Data in accordance with the relevant laws, industry regulations and this policy. Most commonly, Seccl will use your Personal Data in the following circumstances:
Seccl will not obtain express consent for processing your Personal Data on every single occasion, although Seccl will request your consent before sending third party direct marketing communications to you via email or text message.
You have the right to erasure (aka: the right to be forgotten) and/or to withdraw consent or object to Seccl using your Personal Data. You are also entitled to ask Seccl to delete, remove or stop usin your Personal Data if there is no need for Seccl to retain it e.g. to fulfil Seccl’s regulatory requirement including record keeping obligations. These are addressed in more detail below.
NB: There may be legal or regulatory reasons preventing Seccl complying with your request including the need to keep or use your Personal Data.
You can exercise any of these rights or make the above requests at any time by contacting Seccl as below.
How Your Personal Data Is Used
Seccl may process your Personal Data however so permitted by law, regulations and this policy depending on the specific purpose for which Seccl are using your data.
Seccl’s primary purpose in collecting user information is to provide you with a bespoke, efficient and safe experience and to provide the services you have requested.
Seccl intend to use your Personal Data for the following purposes:
to administer Seccl’s internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
If You Fail to Provide Personal Data
Where Seccl need to collect Personal Data by law, or in order to perform a contract Seccl have with you, and you fail to provide that data when requested, Seccl may not be able to perform the contract or enter into one with you. In this case, Seccl have the right to cancel a product or service you have purchased but you will be notified.
Seccl strive to provide you with choices regarding certain Personal Data uses, particularly around marketing and advertising.
Promotional Offers From Seccl
Seccl may use your Personal Data to form a view on what Seccl thinks may be of interest to you. Seccl will use your Personal Data to infer which products, services and/or offers may be relevant for you.
You will receive marketing communications from us if you have requested information from us or purchased from us and you have not opted out of receiving that marketing.
Seccl will obtain your express opt-in consent before Seccl share your Personal Data with any third party for marketing purposes.
You can ask Seccl or third parties to stop sending marketing messages at any time.
Where you opt out of receiving these marketing messages, this will not apply to Personal Data provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions.
Change of Purpose
Seccl will only use your Personal Data for the purposes for which Seccl collected it, unless Seccl reasonably consider that it is necessary for it to be used for another reason and that reason is compatible with the original purpose or Legitimate Interest. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact Seccl as below.
If Seccl need to use your Personal Data for an unrelated purpose, you will be notified and Seccl will explain the legal basis which permits this.
Please note that Seccl may process your Personal Data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Your Legal Rights
You have the right under data protection laws to request access of your Personal Data held by Seccl. Your rights are as follow:
Data Subject Access Request.
This entitles you to receive a copy of the Personal Data that Seccl hold about you and to check that Seccl are lawfully processing it.
Request A Correction
This entitles you to request that Seccl correct any incomplete or inaccurate Personal Data that Seccl holds about you. Seccl may need to take necessary and reasonable steps to verify the accuracy and authenticity of the new data you intend to provide.
This entitles you to request that Seccl erase your Personal Data. You can request that Seccl erase or remove Personal Data where there is no good reason for Seccl to continue to possess or process it. You also have the right to ask Seccl to delete or remove your Personal Data where you have successfully exercised your right to object to processing (see below), where Seccl may have processed your information unlawfully or where Seccl are required to erase your Personal Data to comply with law.
Seccl may not always be able to comply with your request of erasure for specific legal reasons which will you will be notified to, if applicable, at the time of your request.
Object to Processing
This entitles you to request that Seccl cease processing your Personal Data where Seccl are relying on a Legitimate Interest (or those of a third party). You can object to Seccl processing your Personal Data on this ground if you feel it impacts your rights and freedoms.
You also have the right to object where Seccl are processing your Personal Data for direct marketing purposes. In some cases Seccl may demonstrate a compelling Legitimate Interest or ground to process your information which overrides your rights and freedoms.
Request Restriction of Processing
This entitles you to request that Seccl suspend the processing of your Personal Data in the following scenarios:
This entitles you to request that Seccl transfer your Personal Data to you or to a third party. Seccl will provide you, or your nominated third party, your Personal Data in a structured, commonly used, machine-readable format.
This right only applies to automated information which you initially provided consent for Seccl to use or where Seccl used the information to perform a contract with you.
Withdraw Consent at Any Time
This entitles you to withdraw consent for the use, retention, processing and sharing of your Personal Data where Seccl are relying on that consent to process your Personal Data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, Seccl may not be able to provide certain products or services to you. You will be advised if and when this is the case at the time you withdraw your consent.
If you wish to exercise any of the rights set out above, please contact Seccl as below.
Disclosures of Your Personal Data
Seccl may share your Personal Data with the following parties for the purposes set out above.
Seccl require all third parties to respect the security of your Personal Data and to treat it in accordance with the law. Seccl do not allow third-party service providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes and in accordance with Legitimate Interests.
Whenever Seccl transfer Personal Data out of the EEA, Seccl aim to ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
Seccl will only transfer your Personal Data to countries that have been deemed to provide an adequate level of protection for Personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries.
Where Seccl use certain service providers, Seccl may use specific contracts approved by the European Commission which give Personal Data the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to third countries.
Where Seccl use providers based in the US, Seccl may transfer Personal Data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US. For further details, see European Commission: EU-US Privacy Shield.
Please contact Seccl if you would like further information on the specific mechanism used when transferring your Personal Data outside of the EEA.
Seccl have in place the appropriate security measures which aim to prevent your Personal Data from being lost (accidentally or otherwise), accessed, altered, disclosed or used in an any unauthorised manner. Seccl strives to limit access to your Personal Data to those employees, agents, contractors and other third parties who have a legitimate business need to know. Seccl aim to ensure that any third party only processes your Personal Data with your instructions and consent and that they too are subject to a duty of confidentiality.
Seccl have put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where Seccl are legally required to do so.
Retention and Storage
Seccl will only retain your Personal Data for as long as reasonably necessary to fulfil the purposes it was collected for, including for the purposes of satisfying any accounting, legal, regulatory, reporting or tax requirements. Seccl may retain your Personal Data for a longer period in the event of a complaint or if Seccl reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for Personal Data, Seccl will consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which Seccl process your Personal Data and whether Seccl can achieve those purposes through other means, and the applicable accounting, legal, regulatory, tax or other requirements.
In any circumstances where it is appropriate to do so Seccl will anonymise your Personal Data insofar as you will not be able to be identified from it for research or statistical purposes, in which case Seccl may use this information indefinitely without further notice to you.
This is no fee applicable to accessing your Personal Data (or to exercise any of the other rights listed above). However, Seccl reserve the right to charge a reasonable fee, up to a maximum of £100.00 in accordance with the ICO Right of Access guidelines, if your request is clearly excessive, groundless or made more than twice for the same and already provided information. Seccl may refuse to comply with your request entirely in extreme circumstances and is at the discretion of Seccl Data Privacy Manager.
Information Seccl Requires from You
Seccl may from time to time request specific information from you to help Seccl confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights listed herein). This is a routine security measure to ensure that Personal Data is not improperly disclosed to any person who has no right to receive it. Seccl may also contact you to ask you for further information in relation to your request to speed up the response time.
Time Limit to Respond
Seccl will aim to respond to a legitimate request within one (1) month. Occasionally it may take longer than a month depending on the volume of Personal Data Seccl holds, if the request is uncommonly complex or if you have made a number of requests. In this case, Seccl will notify you and keep you updated.
Internal Third Parties
Other companies in the Seccl Group and inclusive IT and system administration services and undertake leadership reporting.
External Third Parties
It is important that the Personal Data Seccl holds about you is accurate and current. Please keep Seccl informed if your Personal Data changes during your relationship with us.
Full name of legal entity: Seccl Technology Limited
Email address: operations@Seccl.tech
Postal address: Seccl, 5-7 Pulteney Mews, Bath, BA2 4DS.
Telephone number: 01225 482 114
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for any concerns you have over the handling of your Personal Data (www.ico.org.uk). Seccl would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
GLOSSARY OF TERMS
Comply with a legal obligation means processing your Personal Data where it is necessary for compliance with legal and regulatory obligations that Seccl are subject to.
Legitimate Interest means the interest of Seccl’s business in conducting and managing the business which enable Seccl to give you the best service/product and the most secure experience. Seccl will consider and balance both the potential positive and negative impacts on you and your rights before processing your Personal Data for Legitimate Interests.
Seccl do not use your Personal Data for activities where Legitimate Interests are overridden by the impact on you (unless Seccl have your consent or are otherwise required or permitted to by law). You can obtain further information about how Seccl assess Legitimate Interests against any potential impact on you in respect of specific activities by contacting us directly as below.
Performance of/Performing a Contract (and any other variation/reference within this meaning) means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps a at your request before entering into such a contract.