ESG Global (Energy) Ltd – UK Privacy Policy
1. Who we are
ESG Global (Energy) LTD are the Data Controller for personal data processed as described in this privacy notice.
Company number: 02931236
ICO Registration Number: Z1384767
Our registered address:
Brisance House
Euxton Lane
Euxton
Chorley
Lancashire
PR7 6AQ
Our Data Protection Officer is Paul Etherington, you can contact Paul by email at DPO@esgglobal.com
2. Reasons we collect your data
2.1. Recruitment
2.1.1. Highlights
- ESG Global (Energy) LTD are the Data Controller for our recruitment process.
- We need your personal data to take steps to enter into the contract of employment.
- We do not share your personal data with any third parties for the recruitment process.
- We only keep your personal data for 6 months following the date of receipt, during a recruitment campaign.
- If you wish to enact your rights or contact our Data Protection Officer, you can contact DPO@esgglobal.com
- Further details of processing for staff is contained in our staff privacy notice.
2.1.2. Purpose and Lawful Basis for Processing
Our purpose for processing your personal data is to achieve and end to end recruitment function for ESG Global, from job requisition through to formal job offerings.
The lawful basis we rely on to process your personal data is article 6(1)(b) of the UK GDPR, which allows us to process personal data where it is necessary to take steps, at your request, prior to entering a contract; in this instance the contract of employment.
2.1.3. What we need
In response to a job advertisement, we will request your full name and your CV which may include details of your personal email address, home address, work history, education, and qualifications.
During the interview process, we will produce further information such as correspondence with you, interview notes and results of any selection tests.
Shortlisted candidates or those who have received a conditional offer of employment will need to provide us with proof of their right to work within the UK. These may include your passport, your birth or adoption certificate and any other documentation with your name and national insurance number. Additionally, during this stage, we may contact any references provided and may conduct verification of any qualifications stated.
2.1.4. What we do with it
Personal data collected during the recruitment process is initially used to determine your suitability for a specific role that you have chosen to apply for.
Proof of right to work will be used to ensure that you are entitled to work within the UK before we employ you.
2.1.5. How long we keep it
Personal data submitted during the recruitment process are retained for a period of 6 months from the date of receipt. This applies for both successful and unsuccessful applicants.
2.1.6. Do we share your data?
We do not use any Data Processors for the processing of personal data in relation to recruitment. Additionally, we do not share your data with any third parties at this stage.
2.2. Digital Marketing
2.2.1. Highlights
- ESG Global (Energy) LTD are the Data Controller for our marketing process.
- We process your personal data under our legitimate interests, and the rationale for this is available in our Legitimate Interests Assessments (LIA).
- We use third-party software provided by HubSpot; a link to their privacy notice is available below.
- If you wish to enact your rights or contact our Data Protection Officer, you can contact DPO@esgglobal.com
2.2.2. Purpose and Lawful Basis for Processing
Our purpose for processing your personal data is for business-to-business marketing, using information gathered through direct interactions with our website, or through our social media pages.
The lawful basis we rely on to process your personal data is article 6(1)(f) of the UK GDPR, which allows us to process your personal data where it is necessary in the pursuit of our legitimate interests. Our legitimate interests in this instance are for the promotion of our products and services with potential and existing customers.
As part of our accountability obligations, we have conducted a Legitimate Interests Assessment (LIA) which balances the interests of ESG against the interests of the individuals. This will be made publicly available along with the privacy notice for individuals to interrogate.
2.2.3. What we need
When you interact with our website, you have the option to provide your name, name of your business and work email address to us for the purposes of receiving marketing communications from us.
2.2.4. What we do with it
Personal Data collected for the purposes of marketing will be used solely for business-to-business marketing. We use a solution to generate automated marketing emails based on the data you provide to us.
2.2.5. How long we keep it
Personal Data collected for marketing is retained until such a point in which you object to the processing, where it will be removed immediately. We review our dataset periodically for inaccuracies and cleanse the data as required.
2.2.6. Do we share your data?
We use third-party marketing software called HubSpot. You can view their privacy notice here. HubSpot provide our marketing platform and host the data within their infrastructure.
3. Your rights
3.1. Right of access
You have the right to request from us copies of your personal data. This right always applies; however, there are some exemptions which means you may not always receive all of the data we process about you.
3.2. Right to rectification
You have the right to request that we rectify personal data we hold about you, that you think is inaccurate. This also includes the right to ask us to complete personal data we hold that you think may be incomplete. This right always applies.
3.3. Right to erasure
You have the right to request that we erase your personal data; however, this only applies in certain circumstances.
3.4. Right to restrict processing
You have the right to ask us to restrict the processing of your personal data in certain circumstances.
3.5. Right to object to processing
You have the right to object to the processing of your personal data if personal data is processed in pursuit of our own legitimate interests. In the case of marketing, the right to object always applies.
3.6. Right to data portability
This right only applies to personal data you have provided to us. You have the right to ask that we transfer your personal data to another organisation or give it to you. This only applies where we are processing based on your consent, where we are processing your personal data to enter a contract, or the processing is automated.
3.7. How to enact your rights at ESG
To submit a request to enact any of your rights, please contact our Data Protection Officer at DPO@esgglobal.com
4. Your right to complain
ESG work to high standards when it comes to processing your personal data. If you have any concerns about our processing activities, please contact us in the first instance at DPO@esgglobal.com we can try to address your concerns.
If you remain unsatisfied, you have the right to make a complaint to the UK’s Supervisory Authority responsible for overseeing Data Protection compliance, the Information Commissioners Office (ICO). You can contact them using the following:
https://ico.org.uk/make-a-complaint/
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
If you would like to exercise any of these rights, please contact:
Email: DPO@esgglobal.com
You also have the right to contact the Information Commissioner. You can contact them by calling 0303 123 1113 or online at www.ico.org.uk/concerns
