Privacy Notice (Employer)

Introduction

If you want us to conduct a criminal record check, please provide data indicated in the online order form. Provision of data is voluntary. However, in case the data is not provided, we will be unable to provide requested services. The data you provide as well as the data obtained during performance of ordered services may be personal data. In this case, the data controller of the data provided or obtained is European Criminal Records Information Services, address: 35-37 Ludgate Hill, London EC4M 7JN. You can contact us using the address above, by email (info@ecris.eu) or by phone (+44 845 557 1082).

 

What data we process

We will process your following data: name, surname, position, company name, VAT number, your company registered number, your company’s employees’ names, surnames positions and contact details, address, email address, telephone, order details, transaction and payment history and any additional information relating to the service you may provide.

 

Legal basis for processing

We process your data in order to perform the requested services – in particular to provide you with data stored in the relevant official criminal record registers and to communicate with you. Such processing of data is necessary to perform the contract for the ordered services – which is the legal basis for such processing.

Provided and obtained data may also be processed for the purposes relating to potential or actual disputes regarding data controller as well as in order to promote and develop our services. Legal basis for such processing of data is the legitimate interest of data controller and potential third parties (in particular – marketing activities as well as pursuing and defending against claims).

 

Time scope

In order to perform the requested services we will process your data during performance of the services or until you raise objection in that regard. However, we will still process provided data if law obliges us to do so, as well as in the scope the data is necessary in order to pursue or defend against claims (in such case, data will be stored for the period of relevant claim limitations).

 

Your rights

You have the right to:

– lodge a complaint to the relevant data protection authority (i.e. the United Kingdom Information Commissioner);

– transmit your personal data, e.g. to another data controller (unless the basis for their processing is the legitimate interest of the administrator or a third party);

– access to your personal data, including requests for their copy;

– request for restriction of processing as well as rectification or erasure of your data.

 

Data recipients

Recipients of your data may include entities you authorized to receive the data, as well as entities that help us communicate with our clients, provided support and maintenance of our IT systems, provide supporting services (i.a. marketing, legal and accounting).