Personal data includes any information that directly or indirectly identifies an individual.

We may collect your personal data directly or passively from you, or indirectly from other sources, when we are assessing your candidacy for relevant job opportunities, or when entering into, or arranging to enter into a contract with you.  This will depend upon our historical interactions with you where you have previously completed assignments on behalf of TCC.

Personal data we may gain directly from you may include:

• Contact Information: name, address, private telephone number, work telephone number, private email address, work email address, emergency contact information;
• Personal Information: date of birth, birth place, gender, marital status, nationality, languages spoken, photographic image, biographical information, biometric information;
• Residency Status Information: right to work, nationality, passport, visa status;
• Employment Information: start date and termination date (both with client firms and TCC), information relating to gaps in your employment, Terms and Conditions of your employment, including work schedules, employee identification information, job title, position/grade, department, duties, performance reviews and ratings, compensation and benefits, social security or other taxpayer identification number, summaries of expense claims, banking details, annual leave records, personal information relating to dependents/emergency contacts/beneficiaries, C.V. information, work history, interview records, references;
• Education and Training Information: educational background and level, professional certifications and registrations, technical skills, language capabilities, training courses attended;
• Special Category Information (Sensitive Data): health including sickness records, physical limitations and special needs, work restrictions and accommodations.
• Financial and Other Background Information: results of credit checks, including details of any CCJs, and criminal background checks. Information relating to fraud and sanctions checks.
• Communication Information: voicemails, emails, correspondence and other work products and communications created, stored or transmitted by you using our computer or communications equipment.
• Photographs, filming and any other type of image for marketing purposes for example hard copy brochures or for the website.
• Other: any other relevant data that could be necessary for employment purposes.

We will only process special category data (sensitive data) in line with employment legislation and other legal obligations to which we are subject, and for the purposes of managing your employment contract. Otherwise we will obtain your prior informed and explicit consent to process this information.

We may also process your personal data which we obtain indirectly from other sources, such as:

• Recruitment Agencies
• Umbrella Company nominated by yourself
• Past employers – for reference purposes
• Security and background screening
• Linkedin and other Social Media
• Via feedback, referrals or recommendations from clients or employees of TCC, whilst you have been working on a TCC contract.

We will only process your personal data where we have a legal basis for doing so (see section below). We will only use your personal data for the purposes described in this Privacy Notice, and in particular to assess your candidacy for and to offer you Associate opportunities with TCC; either working directly for TCC or via TCC on behalf of one (or more) of our clients.

We will never share your data with any other third party, other than those stated in this policy, nor use your data for any other purpose, unless we firstly gain your explicit consent to do so.

We may rely on a number of legal bases for collecting and further processing your personal data, including:

Contractual Necessity

We collect personal information about you to enable us to enter into and manage the employment contract with you.

Consent

We will always gain your freely given, specific, unambiguous explicit and informed consent prior sharing your personal data with any third-party clients, for the purposes of exploring or assessing your candidacy for any relevant job opportunity.

Legal Obligation

We may also process your personal information to allow us, or our clients, to comply with certain legal obligations to which we are subject.  For example, in compliance with FCA regulation, as well as compliance with employment, social security or social protection law.  We may also rely on our legal obligation where processing is necessary for the establishment, exercise or defence of legal claims.

Legitimate Interest

We may use your personal data for our legitimate business interests, whilst carefully considering and balancing any potential impact on you and your rights as a data subject under the relevant data protection regulation.

As an example, we may rely on our legitimate interest to process your personal data for the following purposes:

• To enable us provide you with opportunities that are likely to be relevant to you;
• To assess your candidacy for a relevant role;
• For evidential purposes to effectively manage and maintain records of our relationships/communications with you;
• For evidential purposes to effectively manage and maintain records of the work you have previously conducted for TCC;
• For business development related activity such as contacting you by telephone or email to arrange meetings with our experts in relation to work or knowledge sharing;
• To enhance, modify, personalise or otherwise improve our services and communications for your benefit;
• To better understand your experience, skill set and work interests in order to approach you with relevant TCC Associate opportunities by telephone or email and to arrange meetings to discuss our working relationship in the future.
• To communicate with you in case of an emergency or a disaster recovery incident;
• To communicate internal bulletins, newsletters and other communications;
• To communicate important updates about the business, the business sectors we work with and any relevant regulatory updates, which we think may be of interest to you.

Please note, you have the right to object to the processing for which we rely on legitimate interest as the legal basis. You can do so by emailing dataprotection@tcc.group.

As a data subject, you can exercise rights in relation to the processing of your personal data, under the data protection regulation, as detailed below:

Right to request access: you can request a copy of the personal information that we hold about you.

This privacy notice complies with your right to confirmation on whether or not we are processing your personal data and provides you with the following information:

• The purpose of processing
• The recipients or categories of recipients to whom the personal data has been or will be disclosed
• The envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.

Right to request rectification of your personal information: you shall have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you shall also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to request erasure (“to be forgotten”) of your personal information: in some circumstances you have the right to have your personal data erased and no longer processed where:

• • The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
  • You withdraw consent on which the processing is based, and where there is no other legal ground for processing;
  • You object to the processing and there are no overriding legitimate grounds for the processing;
  • The personal data has been unlawfully processed;
  • The personal data has to be erased for compliance with legal obligation.

Right to restrict processing: you have the right to obtain the restriction of processing where one of the following applies:

• • The accuracy of the personal data is contested, for a period enabling the verification of the accuracy of the personal data;
  • The processing is unlawful and you object to the erasure of the personal data and request the restriction of use instead;
  • We no longer need the personal data for the purposes of the processing, but are required by you for the establishment, exercise or defence of legal claims;
  • You have objected to processing pending verification of whether our legitimate grounds override yours.

Where you have obtained restriction of processing you have the right to be informed by us before the restriction processing is lifted.

Right to object to processing: you have the right to object, on grounds relating to your particular situation, at any time, to processing of personal data concerning you which is based on our legitimate interest.

Right to data portability: you have the right to receive the personal data concerning you, which you have provided to us and have the right to transmit this data to another controller without hindrance from us to which the personal data has been provided. Where feasibly possible, you also have the right to have the personal data transmitted directly to another controller.

Right to complain: we will be more than happy to discuss any complaint you may have about the processing of your personal data. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). The contact details of the ICO are:

Website: ico.org.uk

Helpline: 03030123 1113

Right to understand the source of data gained indirectly: This Privacy Notice complies with your right to be informed of the source of any personal data that is not collected directly from you.

Should you wish to obtain a copy (free of charge) of the personal data being processed, TCC is required to respond to your request within one month from receipt of the request. For added security, we may ask you to provide proof of your identity before releasing any data. All requests must be sent to the following address:

TCC
6th Floor10 Lower Thames Street
London
EC3R 6EN
Email: dataprotection@tcc.group
Telephone: 0203 772 7230

Prospective Associates

If you do not provide, or object to certain data processing activities, we may not be able to assess your candidacy or suitability for a role.  This will result in you being removed from any candidate shortlist.

Current Associates

You have certain obligations under your employment contract to provide TCC, or our client firm, with personal data.  For example, if you do not provide, or object to certain data processing activities, we would not be able to perform our obligations that exist in the contract of employment that is in place between us.  For example, if you withhold your bank details, then we would not be able to pay you.

We may also not be able to comply with our legal or regulatory obligations which may make it difficult for us to continue to employ you in a particular role.  For example, if you are employed in a position that requires certification from the FCA and you objected to us conducting screening searches using personal data that you had previously provided, we may not be able to obtain (or maintain) the certification, which means you could not legally continue in that role.

We use the following third-party providers who may process or have access to your personal data. This is necessary for the Associate recruitment process, to obtain references from other employers and providers, and to obtain necessary criminal records checks from the Disclosure and Barring Service:

• CRM system providers, such as Salesforce and Bullhorn
• Verifile – Disclosure and Barring Service check (Criminal Record check) and credit check
• Cifas: Fraud check. Cifas will use the data to prevent fraud, other unlawful or dishonest conduct, malpractice and other seriously improper conduct. If any of these are detected, you could be refused certain services or employment. Your personal information will also be used to verify your identity. Further details of how your information will be used by us and Cifas, and your data protection rights, can be found in TCC’s Fraud Policy.
• Umbrella company(s) nominated by you in order to facilitate payment of services.
• Timetastic: Time management
• Replicon: Timesheet and project management
• Lightyear: Purchasing and Invoice approval
• Xero: Accounting
• HSBC: Banking
• Advisor Plus: Manager essentials training
• Access Group, identity service provider (IDSP): Pre-contact screening checks

TCC will only keep your personal data for as long as necessary for the purposes for which it was collected.

Personal data will be retained for the purposes of keeping you informed of relevant job opportunities within both TCC and our client firms, or where we have another legal basis for processing.

If the personal data is no longer necessary, or where we no longer have the legal basis for processing, we will delete or fully anonymise the data we hold about you, in line with our Data Control Policy.  If your data has become inaccurate or out of date, we will update it accordingly.

Your data will be erased when it is no longer necessary for the purpose it was originally processed, or after six years from our last contact with you.

We take the security of your data seriously. We are committed to ensuring we have appropriate technical and organisational controls in place to keep your information secure.  This includes internal policies and controls in place to protect against accidental or unlawful destruction, loss, alteration, disclosure or access to your personal data.

Your personal data will only be accessed by authorised employees of TCC, in the performance of their duties or where you have otherwise given your explicit consent.  In order to prevent unauthorised access or disclosure, TCC has put in place suitable physical, electronic and managerial procedures to safeguard and secure the information TCC collects.

TCC will not process your data outside of the EEA and all personal data is stored in servers in the EEA.

This privacy statement details the standards that we will apply when processing your personal information.  In return, it is important that you help keep your information accurate, reliable and up-to-date.  Any changes to your personal data, such as a new address or change of name can be updated by contacting dataprotection@tcc.group.

We will be more than happy to help you should you have any complaints about the processing of your personal data. If you have any queries about this privacy notice, or should you wish to make a complaint, please contact TCC at dataprotection@tcc.group as detailed in the section below.

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), which is the national authority responsible for the protection of personal data. A complaint can be made to the ICO via its website: ico.org.uk or through its helpline: 0303 123 1113.

If you have any queries or requests concerning this privacy statement, your personal information or how we process it, please contact TCC at dataprotection@tcc.group.