Menu
Updated July2021
This Privacy Policy describes how Carbon Leadership ("Carbon","we", "us") collects and uses the information that you provide. It also describes the choices available to you regarding our use of your personal information and how you can access and update this information. Carbon operates in accordance with the latest data protection laws enshrined in the General Data Protection Regulation (EU) 2016/679 ("EU GDPR'')and since 1 January 2021 in the retained version of the EU GDPR which applies in the UK, as amended from time to time (the “UK GDPR”)[1]. Carbon therefore monitors and adheres to evolving law and the core principles of purpose-limitation, storage-limitation, data accuracy, data security and integrity and data minimisation.
This Privacy Policy relates to your use of any of the Carbon services which shall include the Carbon website at the URL www.carbonsearch.com, the Gated Talent portal and associated resources, and any other existing or future Carbon service-line such as our executive search, market advisory and referencing services to which you are granted access (the "Services").
What information do we collect?
The datasets we primarily accumulate and hold fall into three broad kinds:
1. Contact details, CVs and career histories- this is essentially basic profile and contact information;
2. Educational records, certificates of achievement, employment and personal references - this is essentially more granular information we sometimes collect to be able to substantiate and evidence key facts or achievements relating to you;
3. Special category data such as information about your race or ethnicity or a relevant disability which is necessary to assist with any reasonable adjustments or information potential employers need to know about. We only collect and process these categories of special data with your explicit consent.
Collection & Use:
Information you give to us: When reviewing, accessing or using the Services, you may be asked to provide us with personal registration information which would include some or all of the personal data types listed above.
Information we collect about you: As is true of most websites and recruitment businesses, it is possible to gather information about you from computer-based sources such as your Internet Protocol (IP) address, browser type and operating system.
Information we receive from other sources: We may receive information about you from third parties including, for example, business partners, corporate clients, social media platforms and mobile applications and our network of searchers and freelance consultants.
This is in addition to publicly available information about your background, career history, that may be available on social media and elsewhere and which our researchers are able to verify and collate.
We use your personal data to align candidate experience, skills and education with an assignment we are running.
If you are a referee, we use your information to contact you about a candidate and obtain a reference on them.
If you are a corporate client (such as a large employer which needs to attract and retain talent on an ongoing basis), we use personal data to allow us to fulfil our contractual obligations with you.
We only hold and process personal data when the law allows us to. We set out below a visual depiction of the six core “legal bases” which allow us to process personal data under UK GDPR and EU GDPR followed by a short assessment of the most relevant to Carbon’s business operations:
You will notice that we insist on very clear, affirmative action from you to signify your consent to our processing your personal data when you register with us (especially for any special category data which is always of a sensitive nature). We also have a compelling need to process your data in order to fully perform our contractual terms and conditions with our corporate clients and with you as a registrant or applicant (including our contractual terms and conditions of use). From time to time we will also process your personal data where we need to comply with other legal obligations - for example connected with any regulatory requests made of us or in the conduct of litigation where we are compelled to assist a Court with a discovery request for our information.
Carbon does not collect or process any of your personal data unless it is satisfied that there is a legitimate interest established under the terms of the EU GDPR or UK GDPR as appropriate. This means that we will continually update and assess our legitimate interests as a recruitment and search business as we have done when producing the latest version of this policy. We set out below our most recent assessment of our business needs against the three legal tests designed to satisfy the legitimate interest requirements under relevant data protection law:
1. (i) Identifying our legitimate business interests - We are a commercial enterprise servicing the labour market with our search, consultancy and recruitment services. We have taken the time to ask our client-base about their requirements. We know that our Services contribute to better appointments being made, better recruitment data being obtained, and well matched candidates with employers.
1. The necessity of processing some amounts of personal data is obvious if our Services are to be optimally used by our growing candidate base and client base. The fact we collect some moderate amounts of personal data is therefore inevitable given our role and value to others, but this personal data is highly controlled. We also process personal data in order to grow our business, make optimal use of our communications and messaging, enhance the Carbon brand, provide excellent customer services, and improve the engagement experience for all our end-users, whether they are our search consultants, employees, corporate clients, candidates and visitors to our website. We realise the severe limitations to our aims which would result if we were not able to process personal data as we do. We have researched the market and conclude there is a distinct lack of any other less intrusive means to deliver the above interactions, customer services, brand enhancement, and benefits for our users than via the controlled data-processing we currently conduct.
2. (iii) We have weighed the balance of the rights and interests of our business with interests of our people, clients and candidates. We aim to make sure that their personal data is specially protected within under the terms of the relevant law . We are aware from our growing client and candidate base that they have a good understanding of the value of our relationship with them and that they reasonably expect us to contact, engage, and communicate with them, and develop the Services which all require the processing of personal data to proportionate degrees. Furthermore, we have considered the impact of our types of data processing in relation to individuals (from having emails, director and company officer names, IP addresses, job titles, and other recruitment and search related data). When compared with other industries and other kinds of data processing which can involve a lot of sensitive personal data and cold-calling, we take the view that there is marginal or no harm or risk to the rights and freedoms of the valued employees, clients, candidates and contacts we have at Carbon.
We have completed this most recent assessment by concluding that our legitimate interest is prudently counterbalanced by the constant right of an individual to make a data access, cessation of processing or erasure request to us so that we can stop such processing as and when required.
Your rights under modern data protection law:
You have the following rights, as a result of the latest data protection rules set out in the EU GDPR and UK GDPR as applicable, in relation to your personal data:
1. to request a copy of any personal data that we hold about you (essentially your "subject access rights'');
2. to be told, where any information is not collected directly by us, what available information exists as to the source of the information about you;
3. to be told of the existence of automated decision-making (and any personal profiling which we conduct for the purposes of matching people with the right recruitment opportunities);
4. to object to the processing of data where the processing is based on either the conditions of public interest or our legitimate business interests;
5. to have all personal data erased (the right to be forgotten) which practically involves the removal of your data and any account you may have with us;
6. to restrict processing where you have objected to the processing;
7. to have inaccurate data amended or destroyed; and
8. to prevent processing that is likely to cause unwarranted substantial damage or distress to you.
How to make a subject access request - to edit, delete or access your personal information
As you will note above, you have the right to ask for a copy of any personal information that we hold about you in our records, to correct any inaccuracies and to update any out-of-date information. We will provide you with a copy of the personal data undergoing processing in electronic emailable form. Any additional copies will incur a fee to cover our reasonable costs (including the staff time to assist with this additional work). You can also ask us not to send you direct marketing communications(however please note that we may continue to send you service-related (i.e. non-marketing) communications). If you wish to exercise any of these rights, or wish to object to our use of your personal information, please write to or email:
Wendy Jeffries Carbon Leadership LLP
91 Wimpole Street
London
WIG OEF
privacy@carbonsearch.com
Protecting Your Information: Who will we share your personal information with?
Except as described below, we will not share your information with any third parties. We will make your personal information visible to the organisations we depend on to provide our Service. In the modern era, this means we have arrangements in place with service providers who assist us with file storage, cloud hosting, analytics, database management, internal and external communications using providers such as Microsoft (Office and Teams primarily), website design and hosting services. We must also include any particular search specialists with whom we contract on a consultancy-basis rather than as an employee.
Naturally in order to perform our search and recruitment services, when you are put forward for an opportunity, we are required to share your personal information with those for whom and with whom we are working (such as corporate clients, credit reference checks, employment reference providers)..
We do not sell your personal data to third parties, and we don't share it except as necessary as explained above.
All other data that we share with third parties will be anonymised and aggregated, but will never identify you or your company.
We may disclose the information you provide us:
As required under a suitable lawful basis such as to comply with a writ, legal claim, a Court-endorsed disclosure or discovery request or regulatory request from the ICO, or FCA, or similar.
If Carbon is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information;
To any other third party where we have taken your freely given and informed consent to do so.
Cookies:
We may use technologies such as cookies, web beacons, or scripts to gather information about how you and others interact with our Services. For example, we will knowhow many users access a specific area or features within our website or Gated Talent Portal and which links or features they clicked on. We use this information to understand and optimize how our site is used, improve our marketing efforts, and provide content and features that are of interest to you.
· Google Chrome
· Microsoft Edge
· Mozilla Firefox
· Microsoft Internet Explorer
· Opera
· Apple Safari
Data Retention. Storage and Security:
The security of your personal information is important to us and that is why we have a dedicated policy entitled Security & Cyber Policy. We have in place suitable technical and organisational measures which comply with EU GDPR and UKGDPR requirements for suitable security of processing. We will retain your information for as long as needed to provide Services to you or our corporate clients. Given the nature of many careers which evolve over a period of years, we believe that a lengthy retention period is justifiable and welcomed by our corporate clients, candidates and other contacts. As a core rule, Carbon will hold your data for no longer than 5 years before seeking your views on whether you wish to confirm that you do not want us to continue to hold your data. As a proportionate counterbalance to this length of retention, we are committed to ensuring that our Data Privacy Policy, Records Management Policy, Data Breach Response procedure and Security and Cyber Policy are maintained and remain fit for purpose.
If you wish to cancel your registration or Gated Talent account with us or request that we no longer hold your personal information, contact us at privacy@carbonsearch.com
International Transfers:
The vast majority of personal information we collect will be stored and used within the UK and European Economic Area (EEA). There will be a much smaller sub-set of our data sets which may be transferred to, stored and processed in any country or territory outside the UK and EEA, especially where one or more of our overseas partners or third-party service providers are located. Particular partners with overseas operations include Filefinder and the Gated Talent portal (by Ikuru People and owned by Dillistone Group PLC at (https://www.dillistone.com/privacy-cookies-and-tcs/) and Google Analytics. Google Analytics based in the USA require Carbon (and all users) to have a Privacy Policy in place and to alert our website users and readers of this Privacy Policy to the use of cookies such as tracking and retargeting triggers which are stored on the users device or computer. For more information on Google Analytics see https://marketingplatform.google.com/about/analytics/ and for Google’s privacy policy please see here: https://policies.google.com/privacy?hl=en
We at Carbon are committed to taking all steps reasonably necessary to ensure that your data is treated with no less protection than it would receive if transferred and stored within the UK and EEA. Where appropriate, we will adhere to statutory ‘appropriate safeguards’ such as the approved “standard contractual clauses” which will be deemed to apply to certain transfers of information as prescribed by the EU GDPR and UK GDPR.
Changes to This Privacy Policy:
We may update this Privacy Policy to reflect changes to our information practices or changes in the law or best practice. If we make any material changes we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on the website www.carbonsearch.com. We encourage you to periodically review our website and the Gated Talent portal for the latest information on our privacy practices.
This Privacy Policy and all changes made hereto as described in the previous paragraph remains effective unless and until we inform you otherwise.
Contact:
If you have any questions or comments about this Privacy Policy, you can contact privacy@carbonsearch.com You can also use this address if you wish to request a copy of the personal data we hold about you.
[1] Carbon adheres to relevant provisions within both EU GDPR for candidates located in the EU (and for all personal data held prior to 31 December 2020) and the UK GDPR for the vast majority of personal data held by Carbon since 1 January 2021.
