{"id":12179,"date":"2021-04-23T13:18:26","date_gmt":"2021-04-23T13:18:26","guid":{"rendered":"https:\/\/portal.crigroup.com\/crigroup_new\/?page_id=12179"},"modified":"2022-07-19T15:05:04","modified_gmt":"2022-07-19T15:05:04","slug":"cri-gdpr-corporate-policy","status":"publish","type":"page","link":"https:\/\/crigroup.com\/ar\/cri-gdpr-corporate-policy\/","title":{"rendered":"<div class=\"text-1\">\u0625\u0634\u0639\u0627\u0631 \u0627\u0644\u062e\u0635\u0648\u0635\u064a\u0629 \u0644\u0644\u0645\u0631\u0634\u062d<\/div>"},"content":{"rendered":"<h2 style=\"text-align: center;\"><span style=\"font-family: arial, helvetica, sans-serif;\"><div class=\"text-1\">\u0625\u0634\u0639\u0627\u0631 \u0627\u0644\u062e\u0635\u0648\u0635\u064a\u0629 \u0644\u0644\u0645\u0631\u0634\u062d<\/div><\/span><\/h2>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>GDPR Candidate Privacy notice<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Prepared By: Sr. Compliance Officer<\/span><br \/>\n<span style=\"font-family: arial, helvetica, sans-serif;\">Approved By:\u00a0 ZAFAR I. ANJUM, Group CEO<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>What is the purpose of this document?<\/strong><\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">CRI Group is a &#8220;data controller&#8221;. This means that we are responsible for deciding how we hold and use personal information about you.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">You are being sent a copy of this privacy notice because you are applying for work with us (whether as an employee, worker or contractor). It makes you aware of how and why your personal data will be used, namely for the purposes of the recruitment exercise, and how long it will usually be retained for. It provides you with certain information that must be provided under the General Data Protection Regulation ((EU) 2016\/679) (GDPR).<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">If you have questions regarding your personal data and how we use it, please contact our Compliance Department (acting as DPO) using the contact details below: Compliance Department,\u00a0<a href=\"mailto:dataprotection@crigroup.com\">dataprotection@crigroup.com<\/a><\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>\u00a0<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Data protection principles<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We, CRI Group, will comply with data protection law and principles, which means that your data will be:<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Used lawfully, fairly and in a transparent way.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Relevant to the purposes we have told you about and limited only to those purposes.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Accurate and kept up to date.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Kept only if necessary, for the purposes we have told you about.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Kept securely.<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Lawful basis for processing<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">1. Where we need to perform the contract, we have entered with you<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">CRI Group\u2019s contractual responsibilities include those arising from the contract of employment. The data processed to meet contractual responsibilities includes, but is not limited to, data relating to payroll, bank account, postal address, sick pay, leave; maternity pay, pension and emergency contacts.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">2. Where we need to comply with a statutory or legal obligation<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Our statutory responsibilities are those imposed on the company by legislation. The data processed to meet statutory responsibilities includes, but is not limited to, data relating to: tax; national insurance; statutory sick pay; statutory maternity pay; family leave; work permits; and equal opportunities monitoring.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">3. Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests:<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">CRI Group has a legitimate interest in processing personal data during employment. Processing data from employees allows us to manage the employment relationship. Our management responsibilities are those necessary for the organisational functioning of the company. The data processed to meet management responsibilities includes, but is not limited to, data relating to recruitment and employment; training and development; absence; disciplinary matters; health and safety; security, e-mail address and telephone number; and criminal convictions. We may also need to process data from employees to respond to and defend against legal claims.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">4. We may also use your personal information in the following situations, which are likely to be rare:<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Where we need to protect your interests (or someone else&#8217;s interests)<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Where it is needed in the public interest (or for official purposes).<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>How we use personal sensitive information<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">\u2018Special categories\u2019 categorised in GDPR and particularly sensitive personal information requires high levels of protection. We need to have further justification for collecting, storing and using this type of personal information.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">CRI Group may process special categories of data, such as information about ethnic origin, sexual orientation or religion or belief, physical and mental health, disability, criminal allegations, proceedings or convictions, in the following circumstances (in limited circumstances, with your explicit written consent. (GDPR Art 7)):<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Where we need to carry out our legal obligations in line with our data protection policy.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Where it is needed in public interest, such as for equal opportunities monitoring or in relation to our occupational pension scheme, and in line with our data protection policy.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Where it is needed to assess your working capacity on health grounds, subject to appropriate safeguards.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Less commonly, we may process this type of information where it is needed in relation to legal claims or where is needed to protect your interests (or someone else\u2019s interests) and you are not capable of giving your consent, or where you have already made the information public.<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We will use your sensitive personal information in the following ways:<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">We will use information relating to leaves of absence, which may include sickness absence or family-related leave, to comply with employment and other laws.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">We will use information about your physical or mental health, or disability status, to ensure your health and safety in the workplace and to assess your fitness to work, to provide appropriate workplace adjustments, to monitor and management sickness absence and to administer benefits.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">We may only use information relating to criminal convictions where the law allows us to do so. This will usually be where such processing is necessary to carry out our obligations and provided, we do so in line with our data protection policy.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">In limited circumstances, we may approach you for your written consent to allow us to process certain particularly sensitive data. If we do so, we will provide you with full details of the information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent. You should be aware that it is not a condition of your contract with us that you agree to any request for consent for us.<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>The kind of information we hold about you<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">The types of personal data we collect:<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information about you:<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Name, address, date of birth, marital status, nationality, and preferred language, details of any disabilities, work restrictions and\/or required accommodations.<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information to contact you at work or home:<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Name, address, telephone, and e-mail addresses.<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information about who to contact in a case of emergency (yours or ours):<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Name, address, telephone, e-mail addresses and their relationship to you.<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information to identify you:<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Photographs, passport and\/or driving license details, proof of residence, electronic signatures.<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information about your suitability to work for us:<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">References, interview notes, work visas ID information such as passport details and, records\/results of preemployment checks, including criminal record checks, credit and fraud checks.<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information about your skills and experience:<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">CVs, resumes and\/or application forms, references, records of skills and experience: qualifications, skills, training and other compliance requirements.<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information about your terms of employment with CRI Group:<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Letters of offer and acceptance of employment, your employment contract.<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information that we need to pay you:<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Bank account details, national insurance or social security numbers (where applicable).<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information that we need to provide you with benefits and other entitlements:<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Length of service information, health information, leave requests.<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information to allow you to access our buildings and systems:<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Employee identification number (UIN), computer or facilities access and authentication information, identification codes, passwords, answers to security questions, photographs, video images.<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information relating to your performance at work:<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Performance ratings, leadership ratings, targets, objectives, records of performance reviews, records and\/or notes of 1 to 1s and other meetings, personal development plans, personal improvement plans, correspondence and reports.<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information relating to discipline, grievance and other employment-related processes:<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Interview\/meeting notes or recordings, correspondence.<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information relating to your work travel and expenses:<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Bank account details, passport, driving licence, vehicle registration.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>\u00a0<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>If you fail to provide personal information<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">If you fail to provide information when requested, which is necessary for us to consider your application (such as evidence of qualifications or work history), we will not be able to process your application successfully. For example, if we require a credit check or references for this role and you fail to provide us with relevant details, we will not be able to take your application further.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">How we use particularly sensitive personal information<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>1. Recruitment<\/strong><\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">To assess your suitability to work<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">To perform vacancy and applicant management activities<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">To conduct screening, assessments and interviews;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">To maintain a library of correspondence;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">To make offers and provide contracts of employment<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">To conduct pre-employment checks, including determining your legal right to work and carrying out criminal record and credit checks where applicable<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Human Resources (\u201cHR\u201d), finance and other business administration purposes<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Staffing, including resource planning, recruitment, termination, and succession planning;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Budgetary and financial planning and administration; Organisational planning and development and workforce management<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Compensation, payroll, and benefit planning and administration, including salary, tax calculations, reward and recognition payments, insurance and pensions<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Workforce development, education, training and certification<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Performance management;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Problem resolution, including carrying out internal reviews, grievances, investigations, audits;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Business travel and expense management<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">To conduct business reporting and analytic administration of flexible work arrangements, administration of employee enrolment and participation in activities and programmes offered to eligible employees<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Work-related injury and illness, including the management of employee Health &amp; Safety, and disabilities<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">To communicate with you and to facilitate communication between you and other people, compliance and compliance reporting, including conflict of interest and gifts and hospitality reporting<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Risk management, Project Management, Training and Quality purposes.<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>2. Security purposes<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Physical access control authorising, granting, administering, monitoring and terminating access to or use of our facilities, records, property and infrastructure including communications services such as business telephones and email\/internet use<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Prevention and detection of crime.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Information Technology (\u201cIT\u201d) administration purposes:<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>3. IT Systems access control and use monitoring<\/strong><\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">IT fault reporting, management and resolution, systems administration, support, development, management and maintenance.<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>4. Legal purposes<\/strong><\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">To comply with our legal obligations.<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Information about criminal convictions<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We envisage that we will process information about criminal convictions.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We will collect information about your criminal convictions history if we would like to offer you the work (conditional on checks and any other conditions, such as references, being satisfactory). We are required to carry out a criminal record check in order to satisfy ourselves that there is nothing in your criminal convictions history that makes you unsuitable for the role. In particular:<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">As per BS 102000:2018, we are required to carry out criminal record checks for those carrying out any role with us<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">The role of [SPECIFY] requires a high degree of trust and integrity [since it involves dealing with [SPECIFY] [for example, high value client money]] and so we would like to ask you to seek a basic disclosure of your criminal records history.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We have in place an appropriate policy document and safeguards which we are required by law to maintain when processing such data.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>How we collect your personal data<\/strong><\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">When you access our candidate portal for screening purposes;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">When you contact our HR department via telephone or email;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">When we collect data through our HR and benefits systems;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">When we collect data through the implementation of any HR Employee Relations Policies e.g. Disciplinary;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">In the course of managing your employment, for example, performance reviews, payroll;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">When you complete staff surveys;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">When you apply for a vacancy internally or externally;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">When we receive your Personal Data from third parties, for example, security screening; and recruitment agencies.<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Automated decision-making<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Data sharing: who has access to your personal data<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Your information may be shared internally for the purposes of managing the employment relationship. This includes members of the HR and recruitment team, training team, managers and IT staff if access to the data is necessary for the performance of their roles.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We may share your personal information with third parties where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so. We require third parties to respect the security of your data and to treat it in accordance with the law.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We may also share your personal information with other third parties, for example in the context of the possible sale or restructuring of the business. We may also need to share your personal information with a regulator or to otherwise comply with the law.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Data security: how we protect your personal data<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">CRI Group is committed to protecting the personal data you entrust to us. We adopt robust and appropriate technologies and policies, so the information we have about you is protected from unauthorised access and improper use.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. For further details please email the Compliance Department. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We have put in place procedures to deal with any suspected personal data breach and will notify any applicable regulator of a breach where we are legally required to do so.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">The personal data you provide may be transferred to countries outside the European Economic Area (EEA). By way of example, this may happen if we are checking your references for time spent working outside of the EEA and we engage a service provider based in the appropriate jurisdiction to perform the checks on our behalf. If CRI Group transfers your personal data outside of the EEA in this way, we will take steps to ensure that your privacy rights continue to be protected as outlined in this Privacy Policy.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">CRI Group recognises that some countries do not have the same standard of data protection afforded in most EU States, for this reason, CRI Group has a strict supplier management policy which includes the screening of all new suppliers, annual security questionnaires and reviews, and the use of formal processing agreements. Our processing agreements also include terms dictating that the suppliers:<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Are only permitted to process your personal data for recruitment;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Can only retain your personal data for a maximum period of 90 days (unless they are restricted by law from doing this);<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Must immediately notify CRI Group of any suspected or actual data breach of your personal data;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Shall take all appropriate technical and security measures to safeguard your personal data;<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\">Will only transfer your personal data in accordance with approved data transfer provisions.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We will ensure that only organisations that are a part of the EU-US Privacy Shield initiative will handle your personal data. More details on this certification can be found at <a href=\"http:\/\/www.privacyshield.gov\/welcome\" class=\"broken_link\">www.privacyshield.gov\/welcome<\/a><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Data retention: how long will you use my information for?<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Details of retention periods for different aspects of your personal information are available in our retention policy which is available from Compliance Department and Human Resource Department. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">In some circumstances, we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. Once you are no longer an employee, worker or contractor of the company we will retain and securely destroy your personal information in accordance with applicable laws and regulations.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Your rights as a Data Subject: rights of access, correction, erasure, and restriction<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">Under certain circumstances, by law, you have the right to:<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Request access <\/strong>to your personal information (commonly known as a &#8220;data subject access request&#8221;). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Request correction <\/strong>of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Request erasure <\/strong>of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Object to processing <\/strong>of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Request the restriction of processing <\/strong>your personal information. This enables you to ask us to suspend the processing of personal information about you, for example, if you want us to establish its accuracy or the reason for processing it.<\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Request the transfer <\/strong>of your personal information to another party.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact Compliance Department in writing.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Right to withdraw consent<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">When you applied for this role, you provided consent on [DATE] to us processing your personal information for the purposes of the recruitment exercise. You have the right to withdraw your consent for processing for that purpose at any time. To withdraw your consent, please contact the Compliance Department. Once we have received notification that you have withdrawn your consent, we will no longer process your application and, subject to our retention policy, we will dispose of your personal data securely.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Change of purpose<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We will only use your personal data for the purposes for which we collected it. Please note we may process your personal data without your knowledge or consent, where this is required or permitted by law.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Data Protection Officer<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">We have appointed Compliance Team as data protection officer (DPO) to oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact the Compliance Team at Compliance@crigroup.com<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">You have the right to make a complaint at any time to the Information Commissioner&#8217;s Office (ICO), the UK supervisory authority for data protection issues. Or if you are out of EEA you can complain to your country&#8217;s data protection authority.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\"><strong>Right to Complaint<\/strong><\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">You have the right to lodge a complaint with the supervisory authority, the Information Commissioner\u2019s Office \u2013 please refer to its website at www.ico.org.uk. You may contact the Information Commissioner\u2019s Office as follows:<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">By email: Please complete the form at https:\/\/ico.org.uk\/global\/contact-us\/email\/<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">By phone: 0303 123 1113<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif;\">By post: Information Commissioner&#8217;s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5A<\/span><\/p>","protected":false},"excerpt":{"rendered":"<p>Candidate Privacy Notice GDPR Candidate Privacy notice Prepared By: Sr. Compliance Officer Approved By:\u00a0 ZAFAR I. ANJUM, Group CEO &nbsp; What is the purpose of this document? CRI Group is a &#8220;data controller&#8221;. This means that we are responsible for deciding how we hold and use personal information about you. You are being sent a [&hellip;]<\/p>","protected":false},"author":1,"featured_media":12406,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-12179","page","type-page","status-publish","has-post-thumbnail","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v16.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<meta name=\"description\" content=\"GDPR Candidate Privacy Notice | We, CRI Group, comply with data protection law and principles, which means that your data will be...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/crigroup.com\/ar\/cri-gdpr-corporate-policy\/\" \/>\n<meta property=\"og:locale\" content=\"ar_AR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR Candidate Privacy Notice | CRI Group\" \/>\n<meta property=\"og:description\" content=\"GDPR Candidate Privacy Notice | We, CRI Group, comply with data protection law and principles, which means that your data will be...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/crigroup.com\/ar\/cri-gdpr-corporate-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Corporate Research &amp; Investigations | CRI Group&trade;\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/crigroup\/\" \/>\n<meta property=\"article:modified_time\" content=\"2022-07-19T15:05:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/crigroup.com\/wp-content\/uploads\/2021\/04\/CRI-Group-stacked.png\" \/>\n\t<meta property=\"og:image:width\" content=\"3334\" \/>\n\t<meta property=\"og:image:height\" content=\"2500\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@crigroup\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"15 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https:\/\/crigroup.com\/#organization\",\"name\":\"CRI Group\\u2122\",\"url\":\"https:\/\/crigroup.com\/\",\"sameAs\":[\"https:\/\/www.facebook.com\/crigroup\/\",\"https:\/\/www.linkedin.com\/company\/corporateresearchandinvestigations\/\",\"https:\/\/www.youtube.com\/channel\/UCn-EXXdew6XIApQm0kyGPMw\/\",\"https:\/\/twitter.com\/crigroup\"],\"logo\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/crigroup.com\/#logo\",\"inLanguage\":\"ar\",\"url\":\"https:\/\/crigroup.com\/wp-content\/uploads\/2022\/04\/CRI-Group-Copy.jpg\",\"contentUrl\":\"https:\/\/crigroup.com\/wp-content\/uploads\/2022\/04\/CRI-Group-Copy.jpg\",\"width\":1920,\"height\":796,\"caption\":\"CRI Group\\u2122\"},\"image\":{\"@id\":\"https:\/\/crigroup.com\/#logo\"}},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/crigroup.com\/#website\",\"url\":\"https:\/\/crigroup.com\/\",\"name\":\"Corporate Research &amp; Investigations | CRI Group&trade;\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/crigroup.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/crigroup.com\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"ar\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/crigroup.com\/cri-gdpr-corporate-policy\/#primaryimage\",\"inLanguage\":\"ar\",\"url\":\"https:\/\/crigroup.com\/wp-content\/uploads\/2021\/04\/CRI-Group-stacked.png\",\"contentUrl\":\"https:\/\/crigroup.com\/wp-content\/uploads\/2021\/04\/CRI-Group-stacked.png\",\"width\":3334,\"height\":2500,\"caption\":\"corporate research and investigations, Compliance & Investigative Solutions, Risk Management, Career with CRI Group\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/crigroup.com\/cri-gdpr-corporate-policy\/#webpage\",\"url\":\"https:\/\/crigroup.com\/cri-gdpr-corporate-policy\/\",\"name\":\"GDPR Candidate Privacy Notice | CRI Group\",\"isPartOf\":{\"@id\":\"https:\/\/crigroup.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/crigroup.com\/cri-gdpr-corporate-policy\/#primaryimage\"},\"datePublished\":\"2021-04-23T13:18:26+00:00\",\"dateModified\":\"2022-07-19T15:05:04+00:00\",\"description\":\"GDPR Candidate Privacy Notice | We, CRI Group, comply with data protection law and principles, which means that your data will be...\",\"breadcrumb\":{\"@id\":\"https:\/\/crigroup.com\/cri-gdpr-corporate-policy\/#breadcrumb\"},\"inLanguage\":\"ar\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/crigroup.com\/cri-gdpr-corporate-policy\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/crigroup.com\/cri-gdpr-corporate-policy\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/crigroup.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Candidate Privacy Notice\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","_links":{"self":[{"href":"https:\/\/crigroup.com\/ar\/wp-json\/wp\/v2\/pages\/12179","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crigroup.com\/ar\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/crigroup.com\/ar\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/crigroup.com\/ar\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crigroup.com\/ar\/wp-json\/wp\/v2\/comments?post=12179"}],"version-history":[{"count":4,"href":"https:\/\/crigroup.com\/ar\/wp-json\/wp\/v2\/pages\/12179\/revisions"}],"predecessor-version":[{"id":19159,"href":"https:\/\/crigroup.com\/ar\/wp-json\/wp\/v2\/pages\/12179\/revisions\/19159"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crigroup.com\/ar\/wp-json\/wp\/v2\/media\/12406"}],"wp:attachment":[{"href":"https:\/\/crigroup.com\/ar\/wp-json\/wp\/v2\/media?parent=12179"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}