MAB Research and Consulting Limited is a business providing Executive Search Research and Consulting services to our clients and our candidates. MAB Research and Consulting Limited processes personal data (including sensitive personal data) so we can provide these services – in doing so, MAB Research and Consulting Limited acts as a data controller.

MAB Research and Consulting Limited (we, us, our) is a registered data controller under the terms of the General Data Protection Regulation (GDPR). Details of our notification to the data protection regulator may be found in the Information Commissioner’s Office Public Register of Data Controllers at ico.org.uk under registration number ZB458374.

Our registered office address is at G02 Terriers House, Amersham Road, High Wycombe, Buckinghamshire, HP13 5AJ.

You may give your personal details to MAB Research and Consulting Limited directly, such as via an application or via email, or we may collect them through publicly available sources such as social media, or through a third-party source.

MAB Research and Consulting Limited must have a legal basis for processing your personal data. For the purposes of the provision of Executive Search Research and Consulting services and/or information relating to roles relevant to you we will only use your personal data in accordance with the terms of the following statement.

1) Collection and Use of Personal Data

a) Purpose of Processing and Legal Basis
MAB Research and Consulting Limited will collect your personal data (which may include sensitive personal data) and will process your personal data for the purposes of providing you with Executive Research and Consulting services. The legal bases we rely upon to offer these services to you are either consent and/or legitimate interest and/or statutory/contractual requirement.

b) Legitimate Interest
Where MAB Research and Consulting Limited has relied on a legitimate interest to process your personal data as the data is expressly aligned with MAB Research and Consulting Limited Services.

c) Recipient/s of Data
The Company will process your personal data and/or sensitive personal data with relevant third parties only when necessary, and in direct relation to MAB Research and Consulting Limited Services.

d) Statutory/Contractual Requirement
Your personal data may be required by law and/or a contractual requirement (e.g. our client may require this personal data).

2) Overseas Transfers
The Company may transfer only the information you provide to us to countries outside the UK or European Economic Area (‘EEA’) for the purposes of providing you with work-finding services.

3) Data Retention
We keep your personal data for as long as required to provide our services, and in accordance with legal, tax and accounting requirements. Where your personal data is no longer required, we will ensure it is disposed of in a secure manner. Where required by law, we will notify you when this has happened.

4) Your rights
Please be aware that you have the following data protection rights:
• The right to be informed about the personal data the Company processes on you;
• The right of access to the personal data the Company processes on you;
• The right to rectification of your personal data;
• The right to erasure of your personal data in certain circumstances;
• The right to restrict processing of your personal data;
• The right to data portability in certain circumstances;
• The right to object to the processing of your personal data that was based on a public or legitimate interest;
• The right not to be subjected to automated decision making and profiling; and
• The right to withdraw consent at any time.

Where you have consented to the Company processing your personal and sensitive personal data you have the right to withdraw that consent at any time by contacting Mary Beale, Director via G02 Terriers House, Amersham Road, High Wycombe, Buckinghamshire, HP13 5AJ.

5) Complaints or queries
If you wish to make a complaint about this privacy notice or any of the procedures set out in the policy, or have a query about the policy, please contact: Mary Beale, Director: mary@mabsearch.com
You may make a complaint about our data processing activities to a supervisory authority, for the UK this is the Information Commissioner’s Office, at ico.org.uk.

Under General Data Protection Regulations from 28 May 2018

Who are we?
MAB Research and Consulting Ltd, G02 Terriers House, Amersham Road, High Wycombe, Buckinghamshire, HP13 5AJ. A business providing Executive Search Research and Consulting services to executive search businesses, clients in the higher education, research, culture, government and non-profit sectors.

We are committed to protecting the privacy of our candidates, clients and users of our websites. We want to provide a safe and secure service where we deal with your personal information. This includes information that identifies you personally such as your name, photo or contact details or data that can be linked with such information to identify you.

Contents
1. What personal information do we collect about you?
2. Where do we collect personal information about you from?
3. How do we use your personal information?
4. How long do we keep your personal information for?
5. Who do we share your personal information with?
6. What happens if you do not provide us with the information we request?
7. Do we make automated decisions concerning you?
8. Do we transfer your personal information outside the EEA?
9. What are your rights?
10. How do you contact us?

What personal information do we collect about you?
We collect the information necessary to be able to find potential candidates for positions being recruited to by clients, or to provide advice on the writing of CVs and cover letters. The personal data we may collect about you and process include:
• Personal details: given name(s), preferred name, date of birth/age, nationality, ethnicity, gender, disability, sexual orientation, photograph
• Contact details: home address, work address, telephone number, email address, social media profile details
• Employment and education details: employment status, job title, employer, salary and benefits
details, work history, educational records and personal qualifications, memberships, references, CV, employment tribunal information (publicly available)
• Details of referees: details of referees you may provide, including the relationship that you may have with each such referee, and the duration for which you have known each such referee.
• Background checks: details revealed by background checks conducted in accordance with applicable law and subject to your prior express written consent, including details of past employments, details of residence, credit reference information, and criminal records checks.

Where do we collect personal information about you?

The following are the different sources we may collect personal information about you from:

• Directly from you. This is information you provide while searching for a new opportunity (for example when you provide a CV) and/or during the different recruitment stages.
• Through publicly available sources.

We use a range of public sources including:
- LinkedIn
- Google
- Facebook & other social media
- Company or other institutional websites
- By Reference or word of mouth. For example, you may be recommended by a friend, a former employer, a former colleague or even a present employer.
- Background checks. With your prior express written consent, we may conduct background checks, in accordance with the protections provided by applicable law. We only collect sensitive personal information from you, and further process this data, where you have given your explicit consent or otherwise were permitted by law.

How do we use your personal information?

We use certain personal data to determine which candidates might be worth approaching for a particular role. This is necessary for our legitimate interests as a search company. We don’t use any sensitive personal data without ensuring we have another basis for such processing.

How long do we keep your personal information for?

We keep your information for as long necessary to fulfil the purposes that it was collected for. This means we will keep your personal data throughout the period of your relationship with us and whilst we are providing you with work finding services, administering a job application and keeping in contact with clients and hiring organisations and after our relationship ends. You have the right at any time to request us to delete your personal information from our records. We have determined that it is necessary to keep personal data for up to 7 years. This is determined to be a reasonable period accounting for average job tenure.

Who do we share your personal information with?

We share your personal information with the client who has a position to fill, to determine with the client whether you are a good fit for the available position. Where required we share your personal information with third parties to comply with a legal obligation; when we believe in good faith that an applicable law requires it; at the request of governmental authorities conducting an investigation; to verify or enforce our or other applicable policies; to detect and protect against fraud, or any technical or security vulnerabilities; to respond to an emergency; or otherwise to protect the rights, property, safety, or security of third parties, visitors to the our website, our business or the public.

What happens if you do not provide us with the information we request or ask that we stop processing your information?

If you do not provide the personal information necessary, or withdraw your consent for the processing of your personal information, where this information is necessary for us to provide recruitment services to you, we may not be able to match you with available job opportunities, or we may not be able to fulfil our obligations to you (if you are a client).

Do we make automated decisions concerning you?
No, we do not carry out automated decision making.

Do we transfer your personal information outside the EEA?
No, we do not transfer personal information out of the EEA.

What are your rights?
By law, you have a number of rights when it comes to your personal information. Further information and advice about your rights can be obtained from the data protection regulator in your country.
1. The right to object to processing - You have the right to object to certain types of processing, including processing for direct marketing (i.e. if you no longer want to be contacted with potential opportunities).
2. The right to be informed – You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this Policy.
3. The right of access – You have the right to obtain access to your information (if we’re processing it), and certain other information (similar to that provided in this Privacy Policy). This is so you’re aware and can check that we’re using your information in accordance with data protection law.
4. The right to rectification – You are entitled to have your information corrected if it’s inaccurate or incomplete.
5. The right to erasure – This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
6. The right to restrict processing – You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
7. The right to data portability – You have rights to obtain and reuse your personal information for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
8. The right to lodge a complaint – You have the right to lodge a complaint about the way we handle or process your personal information with your national data protection regulator.
9. The right to withdraw consent – If you have given your consent to anything we do with your personal information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal information with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal information for marketing purposes. We usually act on requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs of providing the information for:
• baseless or excessive/repeated requests
• further copies of the same information

Alternatively, we may be entitled to refuse to act on the request. Please consider your request responsibly before submitting it. We’ll respond as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we’ll come back to you and let you know.

How can you contact us?
If you have questions about this privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please contact us using the below details.

Mary Beale, Data Protection Officer,
G02 Terriers House,
Amersham Road,
High Wycombe,
Buckinghamshire,
HP13 5AJ

mary@mabsearch.com

Information Commissioner’s Office registered reference: ZB458374