Menu

Data Protection

Compliance with the DPA 2018

The Data Protection Act 2018 (DPA 2018) incorporating the General Data Protection Regulations (GDPR) and Law Enforcement Directive (LED) replaced the Data Protection Act, 1998 on May 25th 2018.

Career Connect followed the Information Commissioner’s 12 Step Plan, and is now compliant, or moving towards compliance.

Where Career Connect is not the data controller, compliance is defined by the data controller, and Career Connect is working with data controllers in making best efforts to ensure compliance.

Privacy statement

Career Connect services a number of contracts for a number of data controllers. Due to the enhanced nature of the requirements for privacy notices under the DPA 2018, Career Connect cannot create a single privacy notice that covers all data subjects.

Privacy notices typically contain:

• The name and contact details of the data controller
• The reasons for which the data is being held, and the legal justification
• Who the data is shared with
• How long the data will be kept
• Your rights as a data subject. These are limited rights and may not all be applicable in all situationsThey include:
  
  • your right to obtain a copy of your data (Subject Access Request)
  • your right to obtain an electronic copy of the data (Right of Data Portability)
  • your right to have inaccurate data corrected (Right to Rectification)
  • your right to make a complaint to the Information Commissioner’s Office (Right to Complain to the Supervisory Authority)
  • If you require a copy of a privacy notice that is appropriate for you, please contact your Career Connect team who will be able to provide you with one

Note to Parent/Carers

Parent/Carers of young people aged 13 or over have no automatic right of access to their children’s information. Young People aged 13 or over will generally be able to make any decisions about consent for Career Connect to process their information and to make a Subject Access Request for their records in their own right. Parents/Carers will normally only be able to access their children’s data with the signed consent of their child.

Access may be granted where it can be proven that a client is not capable of representing themselves and that the parent/carer constitutes the client’s legitimate representative.

If you require further Information

If you have a question or complaint, or would like to obtain a copy of the information about you, please e-mail data.protection@careerconnect.org.uk. Please include your name, address, date of birth and any more information that will help us identify you on our records. Alternatively please write to The Data Controller, Career Connect, 7th Floor, Walker House, Liverpool, L2 3YL. We aim to acknowledge your request within 2 working days of receipt, and that should include an indication of how long it will take to progress your request.

Please note that if Career Connect is not the data controller, it may be more appropriate to pass your query to the data controller. We would always let you know that we’ve passed on your comments.

If you are still unsatisfied you should contact The Information Commissioner’s Office by post at The IOC, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or by telephone: 01625 545 745 or email: data@dataprotection.gov.uk 

Definitions

“Data Controller” is a person or organisation determines the purposes and means of the processing of personal data;

“Data processor” is a person or organisation which processes personal data on behalf of the controller.