What is GDPR?
The EU General Data Protection Regulation (GDPR) will replace the 1995 EU Data Protection Directive (European Directive 95/46/EC), with effect from 25th May 2018. The new regulation will strengthen and unify data protection for all individuals within the European Union and be enforced by the Information Commissioner’s Office (ICO).
Everyone at InAutomotive has been working hard to ensure that the services we offer to jobseekers and our clients ensure we are always working in line with GDPR and to help answer some of the questions we have been asked over the last few months we have detailed the key areas we have been working.
Will GDPR affect how I use InAutomotive services?
We don’t believe the changes we make to ensure our compliance with GDPR will affect the services offered by InAutomotive to our clients. The new regulations will not affect your ability to post jobs with us or access our CV database in line with our terms and conditions, which are kept up to date in line with all data protection regulations.
GDPR hasn’t been introduced to stop people finding work.
How we handle candidate data and contacting candidates
When candidates register with InAutomotive, they understand that they are doing so in order to be contacted by recruiters and prospective employers about job opportunities. Therefore, as a business we can continue processing the data supplied by candidates who register with InAutomotive, as it is in their legitimate interest to do so.
Furthermore we will continue to give our registered candidates control over their contact preference options, including the option to delete their account. When a candidate deletes their account via the website, we immediately remove their details and CV from the CV Database. All personal information is completely removed from our systems within 30 days. We will also provide a way for our clients to know of any candidates who have deleted their CV from our database, via the client login area. You will be responsible for updating your own records in order to remain compliant.
Managing the right to erasure?
In line with the policy above we will provide a way for you to keep up to date on any candidates that exercise their right to erasure from our database. You are then responsible for updating your own records in order to remain compliant.
How long does InAutomotive keep data for?
Candidate data is held for as long as individuals keep their accounts, and is deleted upon request. InAutomotive may take the decision to delete candidate data on an as required basis when a candidate hasn’t utilised the services for a defined period of time and is deemed to no longer be a legitimate user.
Searching our CV Database
After GDPR comes into force, nothing will change in the way clients can search our CV Database. We will continue to give candidates control over the sharing of their personal data, and give them the option to hide their CV so it cannot be searched for, or found, as part of the CV Database service.
As our client you will be responsible for protecting the data you control and process under the new GDPR principles. It is our recommendation that you familiarise yourself with the core principles to ensure you’re compliant.
In what geographic region is our data stored?
All of InAutomotive servers are in the UK.
How does InAutomotive keep its data secure?
We take our data security extremely seriously, using best practice techniques to minimise access to any sensitive data held within the business, and ensuring data is only transported using secure certificates and access controls.