CCS processes a range of data to carry out its business services and functions. The CCS Group is committed to safeguarding the privacy of personal data and complying with the UK Data Protection Act and the General Data Protection Regulation.
The types of data held includes:
We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
CCS may also collect comments, questions, feedback from individuals in relation to its operations such as emails, telephone calls, texts and documentation and IP addresses regarding the CCS websites and associated media.
Our website uses cookies. A cookie is a small file of letters and numbers that we put on your computer if you agree. These cookies allow us to distinguish you from other users of the website which helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
The cookies we use are analytical cookies. They allow us to recognise and count the number of visitors and to see how visitors move around the site when they're using it. This helps us to improve the way our website works, for example, by making sure users are finding what they need easily.
Most browsers are set to automatically accept cookies by default, but you can change this setting. For instructions on how to find and accept/reject cookies for your browser, please read its help information.
Our website uses Google Analytics, a service which transmits website traffic data to Google servers based in the United States. Google Analytics does not identify individual users or associate your IP address with any other data that may be held by Google. We only use reports provided by Google Analytics to help us understand website traffic and webpage usage and to purely see the number of people visiting the CCS Group plc website.
To opt out of Google Analytics, you can download the following plugin from Google, available for use on most internet browsers: https://tools.google.com/dlpage/gaoptout?hl=en
CCS may process data for the following purposes:
The failure to provide the appropriate personal data will preclude you from working or continuing to work for the organisation.
In circumstances where we use special category data, for example, data about your health, CCS will ensure that one of the following applies to the processing:
CCS may disclose an individual's information for processing to:
CCS has in place a range of security measures and procedures with regard to electronic communication with individuals and our website. This includes aspects such as:
However, the internet is not a secure medium. As such, communications over the internet will not be secure unless you see the golden padlock in the browser address bar or emails have been selected as encrypted.
CCS believes it has appropriate procedures and IT security measures in place to protect personal data under CCS control, including:
However, we cannot accept responsibility for unauthorised access or loss of personal information beyond CCS's control. CCS may provide links to third party websites for information purposes as part of its operations, but CCS is not responsible for the content of these sites. CCS would advise individuals to check the privacy policies/notices of any sites visited before providing them with any personal data.
Where CCS online portals and login details are supplied, CCS will continue to provide the same security and user access control so that your data is kept secure. CCS will always advise not to give out your portal login details to anyone else and to use a password generator for better password strength.
We keep personal data for as long as there is a need to keep it in connection with the purposes for which it was collected, and in accordance with our data retention procedures.
For data collected, stored and processed by CCS, CCS is the data controller, i.e., the body that determines the purposes and means of the processing. The CCS registration number in the Data Protection Public Register is Z9678773.
Under data protection legislation, individuals have the following rights in relation to their data:
For further information refer to the ICO website – http://www.ico.org.uk
CCS will not charge a fee for access to personal data or exercise the rights as highlighted. However, CCS may make a charge where a request is:
CCS may refuse to comply with an individual's request under these circumstances.
CCS may request specific information from an individual to allow the company to confirm the individual's identity and right to access their personal data, to ensure that any personal data is not disclosed to anyone who does not have the right to receive it.
CCS will respond to a data request within one month. Where the data request is complex, we may extend the timescale for response from one month to three months. If this is the case, CCS will write to the individual within one month of receipt of the request explaining the reason for the extension.
If the response to the request is that the Company will take no action, an individual will be informed of the reasons.
Individuals have the right to be told how CCS processes their data and the reasons for the processing.
In the event that CCS intends to use data already collected for a different reason than that already communicated, an individual will be informed of the new reason in advance.
Individuals have the right to access their personal data which is held by CCS.
If someone wishes to have access to their personal data, they can do so by completing the CCS data information form which is available from Dataprivacy@cleshar.co.uk.
One of the fundamental principles underpinning data protection is that the data CCS processes about an individual will be accurate and up to date. Individuals have the right to have their data corrected if it is inaccurate or incomplete.
If someone wishes to have their data rectified, they can do so by completing the CCS data information form which is available from Dataprivacy@cleshar.co.uk.
Where any data which has been rectified was disclosed to third parties in its unrectified form, CCS will inform the third party of the rectification where possible. We will also inform an individual of the third parties to whom the data was disclosed.
There is a right to have data deleted and removed from our systems where there is no compelling business reason for us to continue to process it.
The right to have data deleted applies in the following circumstances:
If an individual wishes to make a request for data deletion, they should complete the CCS data information form which is available from Dataprivacy@cleshar.co.uk.
On receipt of a request, CCS will delete the data unless it is processed for one or more of the following reasons:
Where a request is not complied with because of one of the above reasons, the individual will be informed of the reason. Where a request is to be complied with, the individual will be informed when the data has been deleted.
Where the data which is to be deleted has been shared with third parties, we will inform those third parties where this is possible. However, where this notification will cause a disproportionate effect on CCS, this notification may not be carried out.
There is a right to restrict the processing of your data in certain circumstances. Restricting CCS from processing data means that we will continue to hold the data but will stop processing it.
CCS will be required to restrict the processing of your personal data in the following circumstances:
If an individual wishes to make a request for data restriction, they should complete the CCS data information form which is available from Dataprivacy@cleshar.co.uk.
Where data processing is restricted, CCS will continue to hold the data but will not process it unless:
Where the data to be restricted has been shared with third parties, we will inform those third parties where this is possible. However, where this notification will cause a disproportionate effect on CCS, this notification may not be carried out.
Where CCS is to lift any restriction on processing, an individual will be informed in advance.
There is a right to obtain the data that CCS processes on an individual, and for them to use it for their own purposes. This means the right to receive the personal data that you have provided to us in a structured machine-readable format and to transmit the data to a different data controller.
This right applies in the following circumstances:
If an individual wishes to exercise this right, please email: Dataprivacy@cleshar.co.uk.
Where CCS is to comply with the request, the data will be provided in a structured and machine-readable form. There will be no charge for the provision of this data. On request, CCS will transmit the data directly to another organisation if our IT systems are compatible with those of the recipient.
The right to portability is different from the right to access. Although both involve a right to access personal data, the personal data to be accessed is not the same. The right to access data under the right to portability includes only personal data as described above. Access to data under the right of access includes all personal data relating to the individual, including that which has not been provided to CCS by them.
There is a right to object to the processing of data in certain circumstances. This means the right to require CCS to stop processing personal data. In relation to their employment with CCS, an individual may object to processing where it is carried out:
If an individual wishes to object, they should do so by completing the CCS data information form which is available from Dataprivacy@cleshar.co.uk.
Where they object to processing, CCS will stop the processing activity objected to unless:
CCS does not make decisions about you using automatic systems involving no human intervention.
We will contact you by post, and where you have provided consent, also by telephone and email, to let you know about our events and activities that might be of particular interest to you, and about the work of CCS more generally. CCS provides the opportunity for you to opt out from receiving our marketing communications every time we contact you.
You can opt out from receiving CCS marketing communications or update your contact preferences at any time by emailing: Dataprivacy@cleshar.co.uk.
We aim to keep our information about you as accurate as possible. This includes details such as:
If you would like to review or change the details you have supplied us with, please contact us at Dataprivacy@cleshar.co.uk.
We keep our Privacy Notice under regular review and change control is noted in the footer.
If you have any questions which you feel have not been covered by this Privacy Notice, please do not hesitate to write or email using the appropriate address:
Head of HR
Heather Park House
North Circular Road
London NW10 7NN
Dataprivacy@cleshar.co.uk
If you wish to complain about this privacy notice, or any other procedures set out in it, please contact the Head of HR, in the first instance at Dataprivacy@cleshar.co.uk.
You also have the right to lodge a complaint with the supervisory authority if you believe your data protection rights have not been adhered to.
For further information refer to the ICO website – www.ico.org.uk
The ICO can be contacted on 0303 123 1113 or refer to their website at www.ico.org.uk