Privacy & Legal Policy
This website www.stevensonjames.com is operated by Stevenson James Ltd t/a Stevenson James. Stevenson James (“we”/“'us”) are a “data controller” for the purposes of the Data Protection Legislation. Our data protection registration number is: Z1669607. Our Data Manager is Richard Collins. He can be contacted in writing at 111 Buckingham Palace Road, London, SW1W 0SR, UK or by email firstname.lastname@example.org
The use of this website is possible without the provision by you of personal data. If you submit personal data to us it will be maintained in accordance with the provisions of the General Data Protection Regulation ((EU) 2016/679) (“GDPR”) and any national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK, until such time as the GDPR is no longer directly applicable to the UK, and then in accordance with the provisions of any successor legislation to the GDPR or the Data Protection Act 1998 (together, “the Data Protection Legislation”).
INFORMATION WE COLLECT
The information we collect from you can come from information you directly give us whether by filling in forms on our website or by corresponding with us by phone, email or otherwise. The information you give us may include your name, position and employer details, historic work history, email address, postal address, phone numbers and information relevant for us to assist you in your career in our capacity as an executive search firm.
We also receive your information from other sources that are in the public domain such as company websites and professional networking websites such as LinkedIn where you are aware that your personal data can be accessed.
We collect Device Information using the following technologies:
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
HOW AND WHERE WE STORE YOUR DATA
All applicant data is stored by us on a database in the UK. This database can be accessed only by employees of Stevenson James who have a legitimate interest and business requirement to do so. This is a cloud service hosted for us by Dillistone Systems via Microsoft Azure located in The Republic of Ireland with a second copy stored in The Netherlands. More information can be found at www.dillistone.com
We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
Information that we collect will not be transferred to countries which do not have data protection laws equivalent to those in force in the European Economic Area unless and until we have received your express consent to such transfer and we have taken appropriate and adequate steps to ensure the safety of the data to be transferred.
HOW WE USE AND PROCESS YOUR DATA
Your personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes. We will use your personal data solely for our legitimate interest as an executive search firm and can be in the form of market maps, long list and short list documents.
We will on occasion provide you with news, surveys and events about our business. If you no longer wish to use your data in this way, please let us know by clicking the unsubscribe button on our communications.
Your personal data will be held in confidence and not passed to any company, other than those agreed, without your express permission or unless we are required by law.
RETENTION OF YOUR DATA
We will only keep your personal data within the timeframes allowed by law and for so long as is necessary to comply with our legal obligations.
You may instruct us to provide you with any personal information we hold about you. Provision of such information will be subject to the supply of appropriate evidence of your identity. We may withhold such personal information to the extent permitted by law.
You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.
In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law. However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.
In some circumstances you have the right to restrict the processing of your personal data. Those circumstances are: you contest the accuracy of the personal data; processing is unlawful but you oppose erasure; we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise or defence of legal claims; and you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will only otherwise process it: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.
If you have a concern about your personal data you may contact the Information Commissioner’s Office https://ico.org.uk/concerns
UPDATES AND CONTACT
Please let us know if the personal information which we hold about you needs to be corrected or updated.