Privacy Policy

We at Affiner Ltd take the protection of your personal data very seriously and strictly adhere to the rules laid out by data-protection laws and the General Data Protection Regulation (GDPR).

This privacy notice aims to give you information on how we collect and process your personal data through your use of this site and to our business in general, including any data you may provide if you contact us for job opportunities or enquiries.

Affiner Ltd (Registered No. 15741197 in England and Wales, Lumaneri House Blythe Gate, Blythe Valley Park Solihull, West Midlands, B90 8AG, United Kingdom Our Data Protection Officer can be reached via E-mail: governance@affiner.co.uk

We have appointed a data protection officer (DPO) who is responsible for monitoring and providing guidance with our GDPR status. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the DPO using the contact information laid out in this privacy notice.

Personal Data We Collect 

We are committed to respecting your privacy by handling all personal data collected in connection with the reason for collection. Reasons for collection include enquiries, service delivery and recruitment processes.  The information which we may hold about you may include the following:

• Details about you such as name, address, contact details
• Any contact Affiner have had with you such as appointments and emails
• Notes and reports about yourself or organisation
• Details about your enquiry/recruitment process/care with us
• Your country of birth, nationality
• Previous employment history and references
• Date of birth and gender

To ensure that you receive the best service, your records are used to facilitate the service you receive. Information may be used to help monitor the quality of service provided.

Some information may be used for reporting purposes. Where we use this information, strict measures are in place to ensure that individuals cannot be identified.

Our Lawful Basis

We only collect and use personal information about you when the law allows us to. By the law, we are mainly referring to:
 

• General Data Protection Regulation 2018
• UK General Data Protection Regulation
• Data Protection Act 2018
• Human Rights Act 1998

Most commonly, we use your data on the following lawful basis:

1. The data subject (you) have given consent to the processing
2. Processing is necessary for the performance of a contract
3. Processing is necessary for compliance with a legal obligation to which the controller is subject
4. Processing is necessary in order to protect the vital interests of the data subject
5. Processing is necessary for the purpose of the legitimate interests pursed by the controller or third party

Our Security

Affiner is committed to handling your personal information with high standards of information security. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.

We have also ensured that all employees have enough information security training, and we have developed a comprehensive suite of Information Security policies and procedures to ensure each aspect of the handling of personal data is done with security as our focus.

How Long Do We Keep Your Data For

We pride ourselves on ensuring that your personal data is retained for the period that Affiner needs it for and in line with applicable laws. All personal information we collect has a defined retention period, which is in line with our retention policy. If you would like to find out how long your information is being retained, please contact our Data Protection Officer. When no longer required, data is destroyed securely and without undue delay.

Providing Your Information to Others

We will not disclose your information to any third party without your permission unless there are exceptional circumstances (i.e. Life or death situations) or where the law requires such information to be shared. 

Your Individual Rights

In this Section, we have summarised the rights that you have under General Data Protection Regulation. Some of the rights are complex, and not all the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights. Please note, not all these rights are absolute, and we can refuse to comply with rights in certain scenarios. If this is ever the case, you will be notified with all the relevant information.

Your principal rights under General Data Protection Regulation are:

• Right to Access
• Right to be Informed
• Right to Rectification
• Right to Erasure
• Right to Restrict Processing
• Right to Object
• Right to Data Portability
• Right to lodge a Complaint

You have the right to confirmation as to whether we process your personal data and, where we do, you may request access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply you a copy of your personal data. The first copy will be provided free of charge, but duplicate copies or requests deemed excessive may be subject to a reasonable fee (£10).

You as a data subject have the right to rectification, which will allow you as the data subject to modify/change any personal information for the purpose of ensuring that the information we process is up to date.

The right to erasure or the right to be forgotten will allow you as the data subject to inform us that you no longer want Affiner to store or process your personal information. Please be aware that we may decline your right for several reasons, which are not limited to, having a lawful basis to process your information or us needing your information for the performance of a contractual obligation.

As a data subject, you have the right to stop any processing of your personal information. Please be aware that you must provide us with a legitimate reason for us to stop processing. Any request made that doesn’t conform to the GDPR will be rejected.

The right to data portability will allow you as the data subject to have your personal information securely transferred to another organisation for processing in a format that can be read by a computer.

International Data Transfers

In this section, we provide information about the circumstances in which your personal data may be transferred to countries outside the European Economic Area (EEA).

We may share personal information with third parties outside of the European Economic Area (EEA). If this was to change, Affiner would ensure that information security at the highest standard would be used to protect any personal information. This would include the use of encryption on transit and ensuring that data protection laws are being pursued.

All information that is being transferred within the EEA will follow our strict Information Transfer Policy, which can be requested from in this policy.

Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented.

Where we use third-parties outside of the EEA, we may use specific contracts approved by the European Commission, these are sometimes known as standard contractual clauses which give personal data the same protection it has in the EEA.

Complaints

We take any complaints about our collection and use of personal information very seriously. If you think that our collection or use of personal information is unfair, misleading or inappropriate, or have any other concerns about our data processing, please raise this with us in the first instance.

To make a complaint, please contact our Data Protection Officer.

Alternatively, you can make a complaint to the Information Commissioner’s Office:

By Post:  Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

By Website: https://ico.org.uk

By Phone: 0303 123 1113 (Local rate) or 01625 545 745 (National rate)

Our Data Protection Officer

To ensure data subjects have a voice within the business, Affiner have appointed a Data Protection Officer (DPO) to ensure GDPR and Information Security compliance is continuously monitor and improved in accordance with the law. Our DPO is your main point of contact should you have any questions or issues with the way in which Affiner process your personal data. To contact our DPO you can use one of the following options:

Email: governance@affiner.co.uk 

Post:  Data Protection Officer, Affiner Ltd, Regus- Blythe Valley Park, Central Boulevard, Blythe Valley Business Park, Solihull, B90 8AG

This Notice

We keep this Privacy Notice under regular review. This Policy was last updated on 06/11/2024

Amendments

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.