PRIVACY POLICIES,
SITE & COOKIE POLICY

As the world's leading Data & Analytics recruitment company we take your data privacy very seriously.

Legal information

FR Translation

DE Translation

Harnham GmbH

Harnham B.V.

Harnham Inc

1. General

1.1 Harnham Search and Selection Limited together with its group companies ("we", "us" or "Harnham") take the privacy of your information very seriously. This Privacy Notice is designed to tell you about our practices regarding the collection, use and disclosure of personal information which may be collected in person from you, obtained via our websites or collected through other means such as by an online form, email, or telephone communication.

1.2 This notice applies to personal information provided by our clients and suppliers about their employees and other individuals affiliated with them and also to candidates or prospective candidates ("Candidates") whose data we process for proposed roles with our clients or prospective clients. Where a given role with our client is to be filled by a limited company or other corporate contractor we may process data relating to that company's directors or shareholders and in this policy a "Candidate" may include directors and shareholders of corporate contractors.

1.3 In this notice "you" refers to any individual whose personal data we hold or process (i.e: an individual candidate or potential candidate, an individual affiliated with a corporate contractor candidate, or an individual or employee associated or affiliated with our client or supplier).

1.4 In general, our services are related to the provision of recruitment services to clients and Candidates, and the provision of recruitment and market related information to clients and Candidates, and we do not process personal data on a large scale, but we will hold certain data in relation to Candidates and individuals affiliated with our clients and suppliers, and this notice sets out the basis on which we hold that data.

1.5 This notice is governed by the EU General Data Protection Regulation (the "GDPR") from 25 May 2018.

2. Legal Basis on which we process personal data

2.1 Personal data we hold about you will be processed either because:

2.1.1 the processing is necessary in order for us to comply with our obligations under a contract between you and us, specifically for the provision of our services; or

2.1.2 the processing is necessary in pursuit of a "legitimate interest", a legitimate interest in this context means a valid interest we have or a third party has in processing your personal data which is not overridden by your interests in data privacy and security

2.1.3 for certain 'special categories' of sensitive personal data including data relating to health and ethnic background which we may process from time to time we will process this data on the basis of your consent.

3. Personal data we collect

3.1 We may collect and process the following personal data (information that can be uniquely identified with you) about you:

3.1.1 for individuals associated with our clients we may hold contact information such as names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation ("Client Contact Information");

3.1.2 for individuals associated with our suppliers and other third parties we interact with we may hold contact information such as names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation ("Third Party Contact Information");

3.1.3 for Candidates we may have personal information about you, your background, work history etc. This information may include name, address, telephone number, email address, CV, work history, educational qualifications ("Candidate Information");

3.1.4 a record of any correspondence or communication between you and us ("Communication Information");

3.1.5 marketing information we may hold about you in order to provide information about our services (as set out in clause 1.4); this may include names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation ("Marketing Information").

3.2 We will collect information either from you directly or from a third party (for instance your employer, a job site or social media platform you have registered with, or an introducer). If we do obtain your personal data from a third party your privacy rights under this notice are not affected and you are still able to exercise the rights contained within this notice.

3.3 Although you do not have to supply any personal information to us in practice we may be unable to provide our services to you without personal data (for instance we will need contact information in order to communicate with you). You may withdraw our authority to process your personal data (or request that we restrict our processing) at any time but there are circumstances in which we may need to continue to process personal data (please see below).

4. How we process your personal data

4.1 Please see the table below, which sets out the manner in which we will process the different types of personal data we hold:

Purpose/Activity	Type of data	Lawful basis for processing including basis of legitimate interest
When we are setting up a retainer or engagement with a client or potential client with whom you are associated or entering into an agreement to provide services to our client.	Client Contact Information Communication Information	Performance of a contract Necessary for our legitimate interests (to establish necessary information about you in order to provide our services)
When we research, locate and record information relating to Candidates.	Candidate Information	Necessary for our legitimate interests (in order to deliver recruitment services to our clients and Candidates in the interests of the clients and Candidates).
When we provide information relating to Candidates to our clients or potential clients.	Candidate Information	Necessary for our legitimate interests (in order to deliver our services to our clients and Candidates in the interests of the clients and Candidates).
When we communicate with you as an individual affiliated with our client or potential client in order to provide our services to you.	Client Contact Information Communication Information	Performance of a contract Necessary for our legitimate interests (in order to deliver our services to our clients).
When we communicate with you as a Candidate or an individual associated with our Candidate in order to provide our services to you, including using other communication technology, such as chatbot technology.	Candidate Information Communication Information	Performance of a contract Necessary for our legitimate interests (in order to deliver our services to our clients and Candidates in the interests of clients and Candidates).
When we store information relating to Candidates in order to put Candidates forward for potential roles in the future.	Candidate Information	Necessary for our legitimate interests (in order to deliver our services to our clients and Candidates in the interests of the clients and Candidates).
When we enter into an agreement with you or an organisation with which you are connected as a supplier.	Third Party Contact Information Communication Information.	Performance of a contract with you Necessary for our legitimate interests (in order to deliver our services).
When we communicate with you as an individual affiliated with our supplier or another third party we interact with.	Third Party Contact Information Communication Information	Performance of a contract with you Necessary for our legitimate interests (in order to deliver our services to our clients and Candidates).
When we communicate with you as an individual affiliated with our client, potential client about our services (for instance if you request assistance).	Client Contact Information Communication Information	Performance of a contract with you Necessary for our legitimate interests (for running our business and to provide our clients and Candidates with our services)
To manage our relationship with you as our client, supplier or third party.	Client Contact Information Third Party Contact Information Communication Information	Performance of a contract with you. Necessary to comply with a legal obligation. Necessary for our legitimate interests in ensuring that we maintain good relationships with our clients, suppliers and third parties.
To store your contact information for marketing purposes and sending marketing and other promotional communications to you.	Client Contact Information Candidate Information Marketing Information	Necessary for our legitimate interests in promoting our services to business customers or Clients, or consumers with consent or because the relevant individual has purchased similar services from us.

For each type of data listed above, definitions are included under clause 3.1.

5. Data Retention

5.1 Our current data retention policy is to delete or destroy (to the extent we are able to) the personal data we hold about you in accordance with the following:

Category of personal data	Length of retention
Records relevant for tax authorities	8 years from the end of the year to which the records relate
Candidate Data	The later of 7 years from placing a Candidate in a given role with our client, or in the case of contractors, 7 years from the end of the role with our client, or 7 years from the last date on which you have interacted with us.
Candidate Data where we have researched and located Candidate Data without direct interaction	1 year from date of data collection
Personal data processed in relation to a contract between you and us	7 years from either the end of the contract or the date you last used our services, being the length of time following a breach of contract in which you are entitled to make a legal claim.
Personal data held on marketing or business development records	3 years from the last date on which you have interacted with us.

5.2 For any category of personal data not specifically defined in this notice, and unless otherwise specified by applicable law, the required retention period for any personal data will be deemed to be 7 years from the date of receipt by us of that data.

5.3 The retention periods stated in this notice can be prolonged or shortened as may be required (for example, in the event that legal proceedings apply to the data or if there is an on-going investigation into the data).

5.4 We review the personal data (and the categories of personal data) we are holding on a regular basis to ensure the data we are holding is still relevant to our business and is accurate. If we discover that certain data we are holding is no longer necessary or accurate, we will take reasonable steps to correct or delete this data as may be required.

5.5 If you wish to request that data we hold about you is amended or deleted, please refer to clause 8 below, which explains your privacy rights.

6. Sharing your information

6.1 We do not disclose any information you provide to any third parties other than as follows:

6.1.1 We will disclose Candidate Data to our clients or potential clients and our clients will be the data controller for that Candidate Data;

6.1.2 We may disclose information to our group companies;

6.1.3 if we are under a duty to disclose or share your personal data in order to comply with any legal obligation (for example, if required to do so by a court order or for the purposes of prevention of fraud or other crime);

6.1.4 in order to enforce any terms and conditions or agreements for our services that may apply;

6.1.5 If we are sub-contracting services to a third party we may provide information to that third party in order to provide the relevant services;

6.1.6 we may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation, but we will take steps with the aim of ensuring that your privacy rights continue to be protected;

6.1.7 to protect our rights, property and safety, or the rights, property and safety of our users or any other third parties. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

6.2 Other than as set out above, we shall not disclose any of your personal information unless you give us permission to do so. If we do supply your personal information to a third party we will take steps to ensure that your privacy rights are protected and that third party complies with the terms of this notice.

7. Security

7.1 We will take all reasonable steps to ensure that appropriate technical and organisational measures are carried out in order to safeguard the information we collect from you and protect against unlawful access and accidental loss or damage. These measures may include (as necessary):

7.1.1 protecting our servers with software firewalls;

7.1.2 locating our data processing storage facilities in secure locations;

7.1.3 encrypting all data stored on our server with an industry standard encryption method that encrypts the data between your computer and our server so that in the event of your network being insecure no data is passed in a format that could easily be deciphered;

7.1.4 when necessary, disposing of or deleting your data so it is done so securely;

7.1.5 regularly backing up all data we hold.

7.2 We will ensure that our employees are aware of their privacy and data security obligations. We will take reasonable steps to ensure that the employees of third parties working on our behalf are aware of their privacy and data security obligations.

7.3 This notice and our procedures for handling personal data will be reviewed as necessary.

7.4 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Site; any transmission is at your own risk. Once we have received your information, we will use the strict procedures and security features referred to in this clause to try to prevent unauthorised access.

8. Your privacy rights

8.1 The GDPR gives you the following rights in respect of personal data we hold about you:

The right to be informed	You have a right to know about our personal data protection and data processing activities, details of which are contained in this notice.
The right of access	You can make what is known as a Subject Access Request ("SAR") to request information about the personal data we hold about you (free of charge, save for reasonable expenses for repeat requests). If you wish to make a SAR please contact us as described below.
The right to correction	Please inform us if information we hold about you is incomplete or inaccurate in any way and we will update our records as soon as possible, but in any event within one month. We will take reasonable steps to communicate the change to any third parties to whom we have passed the same information.
The right to erasure (the 'right to be forgotten')	Please notify us if you no longer wish us to hold personal data about you (although in practice it is not possible to provide our services without holding your personal data and we may need to keep your data in some circumstances). Unless we have reasonable grounds to refuse the erasure, on receipt of such a request we will securely delete the personal data in question within one month. The data may continue to exist in certain backup, but we will take steps to ensure that it will not be accessible. We will communicate the erasure to any third parties to whom we have passed the same information.
The right to restrict processing	You can request that we no longer process your personal data in certain ways, whilst not requiring us to delete the same data. However again, some of our Services will not be available if processing is restricted.
The right to data portability	You have right to receive copies of personal data we hold about you in a commonly used and easily storable format (please let us know a format which suits you). You may also request that we transfer your personal data directly to a third party (where technically possible).
The right to object	Unless we have overriding legitimate grounds for such processing, you may object to us using your personal data for direct marketing purposes (including profiling) or for research or statistical purposes. Please notify your objection to us and we will gladly cease such processing.
Rights with respect to automated decision-making and profiling	You have a right not to be subject to automated decision-making (including profiling) when those decisions have a legal (or similarly significant effect) on you. You are not entitled to this right when the automated processing is necessary for us to perform our obligations under a contract with you, it is permitted by law, or if you have given your explicit consent.
Right to withdraw consent	If we are relying on your consent as the basis on which we are processing your personal data, you have the right to withdraw your consent at any time. Even if you have not expressly given your consent to our processing, you also have the right to object (see above).

8.2 All SARs and other requests or notifications in respect of your above rights must be sent to us in writing to Harnham Search and Selection Limited 3^rd Floor, Melbury House, 51 Wimbledon Hill Road, Wimbledon SW19 7QW, dataprotection@harnham.com.

8.3 We will endeavour to comply with such requests as soon as possible but in any event we will comply within one month of receipt (unless a longer period of time to respond is reasonable by virtue of the complexity or number of your requests).

9. Data Breaches

9.1 If personal data we hold about you is subject to a breach or unauthorised disclosure or access, we will report this to the Information Commissioner's Office (ICO) and/or our data protection manager.

9.2 If a breach is likely to result in a risk to your data rights and freedoms, we will notify you as soon as possible.

10. Transferring your information outside Europe

10.1 As part of the services provided to our clients offered to you the information you provide to us may be transferred to, processed and stored at, countries or international organisations outside of the EEA.

10.2 Our client may be based outside of the EEA and we may transfer personal data to our client outside of the EEA. For instance we may transfer Candidate Information to our client outside of the EEA where this is necessary to perform a contract between us and the client and this is in the interests of the Candidate.

10.3 Data may be processed by our group companies based outside of the EEA, but we will ensure that any data accessible by our group companies will be subject to a data transfer agreement or binding corporate rules to maintain your rights as a data subject.

10.4 If you contact us while you are outside the EEA, your information may be transferred outside the EEA in order to communicate with you.

10.5 If we transfer your information outside of the EEA other than in accordance with this clause and the third country or international organisation in question has not been deemed by the EU Commission to have adequate data protection laws, we will provide appropriate safeguards and we will be responsible for ensuring your privacy rights continue to be protected as outlined in this notice.

11. Notification of changes to the contents of this notice

We will post details of any changes to our policy on www.harnham.com to help ensure you are always aware of the information we collect, how we use it, and in what circumstances, if any, we share it with other parties.

12. Contact us

If at any time you would like to contact us with your views about our privacy practices, or with any enquiry or complaint relating to your personal information or how it is handled, you can do so via the following address: Harnham Search and Selection Limited, 3^rd Floor, Melbury House, 51 Wimbledon Hill Road, Wimbledon SW19 7QW, dataprotection@harnham.com.

If we are unable to resolve any issues you may have or you would like to make a further complaint, you can contact the Information Commissioner's Office by visiting https://www.ico.org.uk/ for further assistance.

FR Translation

AVIS DE CONFIDENTIALITÉ

Harnham Search and Selection

Avis de confidentialité

1. Général

1.1 Harnham Search and Selection Limited et ses sociétés du groupe (« nous », ou « Harnham ») prennent la confidentialité de vos informations très au sérieux. Cet avis de confidentialité vise à vous informer de nos pratiques concernant la collecte, l'utilisation et la divulgation de renseignements personnels recueillis en personne auprès de vous, obtenus via nos sites Web ou recueillis par d'autres moyens, notamment par un formulaire en ligne, par courriel ou par téléphone.

1.2 Cet avis s'applique aux informations personnelles fournies par nos clients et fournisseurs sur leurs employés et autres personnes affiliées à eux ainsi qu'aux candidats ou candidats potentiels (« Candidats ») dont nous traitons les données pour les emplois proposés avec nos clients ou prospects. Lorsqu'une fonction donnée avec notre client doit être remplie par une société à responsabilité limitée ou un autre entrepreneur, nous pouvons traiter des données relatives aux administrateurs ou aux actionnaires de cette société et, dans le cadre de cette politique, un « Candidat » peut inclure des administrateurs et actionnaires des sous-traitants des entreprises.

1.3 Dans le présent avis, « vous » désigne toute personne dont nous détenons ou traitons les données personnelles (c.-à-d. un candidat individuel ou un candidat potentiel, un individu affilié à un candidat entrepreneur d'entreprise, ou une personne ou un employé associé ou affilié à notre client ou fournisseur.

1.4 En général, nos services sont liés à la prestation de services de recrutement aux clients et nous ne traitons pas les données personnelles à grande échelle, mais nous conserverons certaines données concernant les candidats et les personnes affiliées à nos clients et fournisseurs, et cet avis établit la base sur laquelle nous détenons ces données.

1.5 Le présent avis est régi par le Règlement général de l'UE sur la protection des données (le « RGPD ») du 25 mai 2018.

2. Base juridique sur laquelle nous traitons les données personnelles

2.1 Les données personnelles que nous détenons à votre sujet seront traitées soit parce que :

2.1.1 le traitement est nécessaire pour nous permettre de respecter nos obligations en vertu d'un contrat entre vous et nous, en particulier pour la prestation de nos services ; ou

2.1.2 le traitement est nécessaire dans la poursuite d'un « intérêt légitime », un intérêt légitime dans ce contexte signifie un intérêt valide dont nous disposons ou dont un tiers dispose dans le traitement de vos données personnelles qui ne soit pas supplanté par vos intérêts en matière de confidentialité et de sécurité des données

2.1.3 Pour certaines « catégories spéciales » de données personnelles sensibles, dont les données relatives à la santé et à l'origine ethnique que nous traitons de temps à autre, nous traiterons ces données sur la base de votre consentement.

3. Données personnelles que nous collectons

3.1 Nous pouvons collecter et traiter les données personnelles suivantes (informations qui peuvent être identifiées de manière unique avec vous) :

3.1.1 pour les personnes associées à nos clients, nous pourrions détenir des informations de contact telles que les noms, adresses e-mail, numéros de téléphone, adresses et titres de fonction et/ou rôles spécifiques au sein de votre organisation (« Contact Client ») ;

3.1.2 Pour les personnes associées à nos fournisseurs et autres tiers avec lesquels nous interagissons, nous pouvons détenir des informations de contact telles que les noms, adresses e-mail, numéros de téléphone, adresses et titres de fonction et/ou rôles spécifiques au sein de votre organisation (« Informations de contact avec une tierce partie ») ;

3.1.3 Pour les candidats, nous pouvons détenir des informations personnelles sur vous, votre historique, votre historique de travail, etc. Ces informations peuvent inclure le nom, l'adresse, le numéro de téléphone, l'adresse e-mail, le CV, l'historique de travail, les qualifications éducatives (« Informations sur le candidat ») ;

3.1.4 un enregistrement de toute correspondance ou communication entre vous et nous (« Information de communication ») ;

3.1.5 informations de marketing que nous pouvons détenir à votre sujet afin de fournir des informations sur nos services, telles que les noms, adresses e-mail, numéros de téléphone, adresses et titres de fonction et/ou rôles spécifiques au sein de votre organisation (« Information marketing »).

3.2 Nous collecterons des informations directement auprès de vous ou d'un tiers (par exemple votre employeur ou un introducteur). Si nous obtenons vos données personnelles par l'intermédiaire d'une tierce partie, vos droits de confidentialité en vertu de cet avis ne seront pas affectés et vous serez toujours en mesure d'exercer les droits contenus dans cet avis.

3.3 Bien que vous n'ayez pas à nous fournir d'informations personnelles dans la pratique, nous pourrions être dans l'impossibilité de vous fournir nos services sans données personnelles (par exemple nous aurons besoin des informations de contact pour communiquer avec vous). Vous pouvez nous retirer notre autorisation à traiter vos données personnelles (ou demander que nous limitions notre traitement) à tout moment, mais il y a des circonstances dans lesquelles nous pourrions avoir besoin de continuer à traiter des données personnelles (veuillez vérifier ci-dessous).

4. Comment nous traitons vos données personnelles

4.1 Veuillez consulter le tableau ci-dessous, qui décrit la manière dont nous traiterons les différents types de données personnelles que nous détenons :

Objet/Activité	Type de données	Base légale pour le traitement y compris la base d'intérêt légitime
Lorsque nous établissons un mandat ou un engagement avec un client ou un client potentiel avec lequel vous êtes associé ou concluez une entente pour fournir des services à notre client.	Renseignements sur les contacts avec les clients Information de communication	Exécution d'un contrat Nécessaire pour nos intérêts légitimes (pour établir les informations nécessaires à votre sujet afin de fournir nos services)
Lorsque nous recherchons, localisons et enregistrons des informations relatives aux candidats.	Informations sur le candidat	Nécessaire pour nos intérêts légitimes (afin de fournir nos services de recrutement à nos clients dans l'intérêt des clients et des candidats).
Lorsque nous fournissons des informations relatives aux candidats à nos clients ou clients potentiels.	Informations sur le candidat	Nécessaire pour nos intérêts légitimes (afin de fournir nos services à nos clients dans l'intérêt des clients et des candidats).
Lorsque nous communiquons avec vous en tant qu'individu affilié à notre client ou client potentiel afin de vous fournir nos services.	Renseignements sur les contacts avec les clients Information de communication	Exécution d'un contrat Nécessaire pour nos intérêts légitimes (afin de fournir nos services à nos clients).
Lorsque nous communiquons avec vous en tant que candidat ou en tant qu'individu associé à notre candidat dans le contexte d'une fonction ou d'un type de fonction donné.	Informations sur le candidat Information de communication	Exécution d'un contrat Nécessaire pour nos intérêts légitimes (afin de fournir nos services à nos clients dans l'intérêt des clients et des candidats).
Lorsque nous stockons des informations relatives aux candidats afin de proposer des candidats potentiels pour des fonctions futures.	Informations sur le candidat	Nécessaire pour nos intérêts légitimes (afin de fournir nos services à nos clients dans l'intérêt des clients et des candidats).
Lorsque nous concluons un accord avec vous ou une organisation avec laquelle vous êtes lié en tant que fournisseur.	Informations sur le contact avec une tierce partie Information de communication.	Exécution d'un contrat avec vous Nécessaire pour nos intérêts légitimes (afin de fournir nos services).
Lorsque nous communiquons avec vous en tant qu'individu affilié à notre fournisseur ou à un tiers avec lequel nous interagissons.	Informations sur le contact avec une tierce partie Information de communication	Exécution d'un contrat avec vous Nécessaire pour nos intérêts légitimes (afin de fournir nos services à nos clients).
Lorsque nous communiquons avec vous en tant qu'individu affilié à notre client potentiel à propos de nos services (par exemple si vous sollicitez une assistance).	Renseignements sur les contacts avec les clients Information de communication	Exécution d'un contrat avec vous Nécessaire pour nos intérêts légitimes (pour gérer notre entreprise et fournir nos services à nos clients)
Pour gérer notre relation avec vous en tant que client, fournisseur ou tiers.	Renseignements sur les contacts avec les clients Informations sur le contact avec une tierce partie Information de communication	Exécution d'un contrat avec vous. Nécessaire pour se conformer à une obligation légale. Nécessaire pour nos intérêts légitimes pour veiller à ce que nous maintenions de bonnes relations avec nos clients, fournisseurs et tierces parties.
Pour stocker vos informations de contact à des fins de marketing et pour l'envoi de matériel de marketing et d'autres communications promotionnelles pour vous.	Renseignements sur les contacts avec les clients Informations sur le candidat Information marketing	Nécessaire pour nos intérêts légitimes dans la promotion de nos services auprès des clients d'affaires ou des clients, ou des consommateurs avec leur consentement ou parce que la personne concernée a acheté des services similaires auprès de nous.

Pour chaque type de données énumérées ci-dessus, les définitions sont incluses dans la clause 3.1.

5.1 Rétention des données

Notre politique actuelle de conservation des données consiste à supprimer ou détruire (dans la mesure où nous sommes en mesure de le faire) les données personnelles que nous détenons à votre sujet conformément à ce qui suit :

*Catégorie de données personnelles*	*Durée de rétention*
Documents pertinents pour les autorités fiscales	8 ans à compter de la fin de l'année à laquelle se rapportent les documents
Les données de candidat	Au plus tard 7 ans après avoir placé un candidat à un poste donné avec notre client, ou dans le cas des entrepreneurs, 7 ans à compter de la fin de sa fonction avec notre client, ou 7 ans à compter de la dernière date à laquelle vous avez interagi avec nous.
Les données de candidat dans lesquelles nous avons recherché et localisé des données de candidat sans interaction directe	1 an à compter de la date de collecte des données
Données personnelles traitées dans le cadre d'un contrat entre vous et nous	7 ans à compter de la date de la fin du contrat ou de la date à laquelle vous avez utilisé nos services pour la dernière fois, soit le délai écoulé depuis la rupture d'un contrat qui vous accordait le droit de présenter une réclamation légale.
Les données personnelles conservées sur des archives de marketing ou de développement commercial	3 ans après la dernière date à laquelle vous avez interagi avec nous.

5.2 Pour toute catégorie de données personnelles non spécifiquement définie dans cet avis, et sauf disposition contraire de la loi applicable, la période de conservation requise pour toute donnée personnelle sera réputée être de 7 ans à compter de la date de réception de ces données.

5.3 Les délais de conservation indiqués dans cet avis peuvent être prolongés ou raccourcis au besoin (par exemple, dans le cas où des poursuites judiciaires seraient appliquées aux données ou s'il y a une enquête en cours relative aux données).

5.4 Nous examinons régulièrement les données personnelles (et les catégories de données personnelles) que nous détenons afin de nous assurer que les données que nous détenons sont toujours pertinentes pour notre activité et exactes. Si nous découvrons que certaines données que nous détenons ne sont plus nécessaires ou exactes, nous prendrons des mesures raisonnables pour corriger ou supprimer ces données si nécessaire.

5.5 Si vous souhaitez demander que les données que nous détenons à votre sujet soient modifiées ou supprimées, veuillez vous référer à l'article 8 ci-dessous, qui explique vos droits en matière de confidentialité.

6. Partage de vos informations

6.1 Nous ne divulguons aucune information que vous fournissez à des tiers autrement que comme suit :

6.1.1 Nous divulguerons les Données du candidat à nos clients ou clients potentiels et nos clients deviendront les contrôleurs de données pour les données du candidat ;

6.1.2 Nous pouvons divulguer des informations à nos sociétés du groupe ;

6.1.3 si nous sommes dans l'obligation de divulguer ou de partager vos données personnelles afin de nous conformer à toute obligation légale (par exemple, si cela est requis par une décision judiciaire ou à des fins de prévention de fraude ou d'autres délits) ;

6.1.4 afin de faire respecter les termes et conditions ou accords pour nos services qui pourraient s'appliquer ;

6.1.5 si nous sous-traitons des services à un tiers, nous pouvons fournir des informations à ce tiers afin de fournir les services appropriés ;

6.1.6 nous pouvons transférer vos informations personnelles à un tiers dans le cadre de la vente d'une partie ou de la totalité de nos activités et de nos actifs à un tiers ou dans le cadre d'une restructuration ou d'une réorganisation d'entreprise, mais nous prendrons des mesures afin de garantir la protection de vos droits ;

6.1.7 pour protéger nos droits, propriété et sécurité, ou les droits, la propriété et la sécurité de nos utilisateurs ou d'autres tiers. Cela comprend l'échange d'informations avec d'autres sociétés et organisations à des fins de protection contre la fraude et de réduction du risque de crédit.

6.2 À l'exception de ce qui est indiqué ci-dessus, nous ne divulguerons aucune de vos informations personnelles à moins que vous nous en donniez la permission. Si nous fournissons vos informations personnelles à un tiers, nous prendrons des mesures pour garantir que vos droits de confidentialité seront protégés et que les tiers respecteront les termes de cet avis.

7. Sécurité

7.1 Nous prendrons toutes les mesures raisonnables pour nous assurer que des mesures techniques et organisationnelles appropriées sont mises en œuvre afin de protéger les informations que nous collectons auprès de vous et de vous protéger contre un accès illégal et des pertes ou dommages accidentels. Ces mesures peuvent inclure (si nécessaire) :

7.1.1 protéger nos serveurs avec des pare-feu logiciels ;

7.1.2 localiser nos installations de stockage de traitement de données dans des emplacements sécurisés ;

7.1.3 crypter toutes les données stockées sur notre serveur avec une méthode de cryptage standard qui crypte les données entre votre ordinateur et notre serveur afin que, dans le cas d'un réseau non sécurisé, aucune donnée ne soit transmise dans un format facilement déchiffrable ;

7.1.4 lorsque cela est nécessaire, éliminer ou supprimer vos données de façon à ce qu'elles soient sécurisées ;

7.1.5 sauvegarder régulièrement toutes les données que nous détenons.

7.2 Nous veillerons à ce que nos employés soient conscients de leurs obligations en matière de confidentialité et de sécurité des données. Nous prendrons des mesures raisonnables pour nous assurer que les employés des tiers travaillant pour notre compte soient conscients de leurs obligations en matière de confidentialité et de sécurité des données.

7.3 Cette notification et nos procédures de traitement des données personnelles seront revues si nécessaire.

7.4 Malheureusement, la transmission d'informations via Internet n'est pas totalement sécurisée. Bien que nous fassions de notre mieux pour protéger vos données personnelles, nous ne pouvons garantir la sécurité de vos données transmises au Site ; Toute transmission se fait à vos risques et périls. Une fois que nous aurons reçu vos informations, nous utiliserons les procédures strictes et les fonctions de sécurité mentionnées dans cette clause pour tenter d'empêcher tout accès non autorisé.

8. Vos droits de confidentialité

8.1 Le RGPD vous confère les droits suivants en ce qui concerne les données personnelles que nous détenons à votre sujet :

Le droit d'être informé	Vous avez le droit de connaître nos activités de protection des données personnelles et de traitement des données, dont les détails figurent dans cet avis.
Le droit d'accès	Vous pouvez effectuer ce que l'on appelle une demande d'accès à un sujet (« SAR ») pour demander des informations sur les données personnelles que nous détenons à votre sujet (gratuitement, sauf les frais raisonnables pour les demandes répétées). Si vous souhaitez faire une SAR, veuillez nous contacter comme décrit ci-dessous.
Le droit à la correction	Veuillez nous informer si les informations que nous détenons à votre sujet sont incomplètes ou inexactes et nous mettrons à jour nos dossiers dès que possible, mais dans tous les cas dans un délai d'un mois. Nous prendrons des mesures raisonnables pour communiquer le changement aux tierces parties à qui nous aurons transmis la même information.
Droit à l'effacement (le « droit à l'oubli »)	Veuillez nous informer si vous ne souhaitez plus que nous conservions des données personnelles vous concernant (bien qu'en pratique, il ne soit pas possible de fournir nos services sans conserver vos données personnelles et nous pourrions avoir besoin de conserver vos données dans certaines circonstances). À moins que nous ayons des motifs raisonnables de refuser l'effacement à la réception d'une telle demande, nous supprimerons en toute sécurité les données personnelles en question dans un délai d'un mois. Les données peuvent continuer à exister dans certaines sauvegardes, mais nous prendrons des mesures pour nous assurer qu'elles ne seront pas accessibles. Nous communiquerons l'effacement à des tiers à qui nous aurons transmis la même information.
Le droit de restreindre le traitement	Vous pouvez demander que nous ne traitions plus vos données personnelles de certaines manières, sans nous demander de supprimer les mêmes données. Cependant, encore une fois, certains de nos services ne seront pas disponibles si le traitement est restreint.
Le droit à la portabilité des données	Vous avez le droit de recevoir des copies de données personnelles que nous détenons à votre sujet dans un format couramment utilisé et facilement stockable (veuillez nous faire savoir le format qui vous convient). Vous pouvez également nous demander de transférer vos données personnelles directement à un tiers (si cela est techniquement possible).
Le droit à l'objection	À moins que nous ayons des raisons légitimes justifiant un tel traitement, vous pourrez vous opposer à nous en utilisant vos données personnelles à des fins de marketing direct (y compris le profilage) ou à des fins de recherche ou de statistiques. Veuillez nous notifier votre objection et nous nous ferons un plaisir de cesser ce traitement.
Droits relatifs à la prise de décision automatisée et au profilage	Vous avez le droit de ne pas être soumis à la prise de décision automatisée (y compris le profilage) lorsque ces décisions ont un effet juridique (ou un effet similaire important) sur vous. Vous n'aurez pas droit à ce droit lorsque le traitement automatisé sera nécessaire pour que nous puissions exécuter nos obligations en vertu d'un contrat avec vous, lorsque cela est autorisé par la loi, ou lorsque vous aurez donné votre consentement explicite.
Droit de rétraction du consentement	Si nous nous basons sur votre consentement comme base sur laquelle nous traitons vos données personnelles, vous avez le droit de retirer votre consentement à tout moment. Même si vous n'avez pas expressément donné votre consentement à notre traitement, vous avez également le droit de vous opposer (voir ci-dessus).

8.2 Tous les SAR et autres demandes ou notifications concernant vos droits ci-dessus doivent nous être envoyés par écrit à Harnham Search and Selection Limited, 3^rd Floor, Melbury House, 51 Wimbledon Hill Road, Wimbledon SW19 7QW, dataprotection@harnham.com

8.3 Nous nous efforcerons de répondre à ces demandes dans les plus brefs délais, mais dans tous les cas, nous nous y conformerons dans un délai d'un mois à compter de leur réception (à moins qu'un délai plus long pour répondre s'avère raisonnable en raison de la complexité ou du nombre de vos demandes).

9. Infractions aux données

9.1 Si les données personnelles que nous détenons à votre sujet font l'objet d'une violation ou d'une divulgation ou d'un accès non autorisé, nous en informerons le bureau du Commissaire à l'information (ICO) et/ou notre responsable de la protection des données.

9.2 Si une violation est susceptible d'entraîner un risque pour vos droits et libertés, nous vous en informerons dès que possible.

10. Transférer vos informations en dehors de l'Europe

10.1 Dans le cadre des services fournis à nos clients, les informations que vous nous fournissez peuvent être transférées, traitées et stockées dans des pays ou des organisations internationales en dehors de l'EEE.

10.2 Notre client peut être basé hors de l'EEE et nous pouvons transférer des données personnelles à notre client en dehors de l'EEE. Par exemple, nous pouvons transférer des informations sur les candidats à notre client en dehors de l'EEE lorsque cela est nécessaire pour exécuter un contrat entre nous et le client et cela sera dans l'intérêt du candidat.

10.3 Les données peuvent être traitées par nos sociétés du groupe situées en dehors de l'EEE, mais nous veillerons à ce que toutes les données accessibles par nos sociétés du groupe soient soumises à un accord de transfert de données ou à des règles d'entreprise contraignantes.

10.4 Si vous nous contactez pendant que vous êtes en dehors de l'EEE, vos informations pourront être transférées en dehors de l'EEE afin de communiquer avec vous.

10.5 Si nous transférons vos informations en dehors de l'EEE autrement que conformément à la présente clause et si le pays tiers ou l'organisation internationale en question n'a pas été considéré par la Commission européenne comme disposant de lois adéquates sur la protection des données, nous fournirons des garanties appropriées et nous serons tenus de veiller à ce que vos droits à la protection de la vie privée continuent d'être protégés comme indiqué dans cet avis.

11. Notification des modifications aux contenus de cet avis

Nous afficherons les détails de toute modification apportée à notre politique sur www.harnham.com pour vous assurer que vous êtes toujours au courant des informations que nous collectons, de la façon dont nous les utilisons et dans quelles circonstances, le cas échéant, nous les partageons avec d'autres parties.

12. Nous contacter

Si, à tout moment, vous souhaitez nous contacter pour nous faire part de vos opinions sur nos pratiques de confidentialité, ou pour toute réclamation ou réclamation relative à vos informations personnelles ou à leur traitement, vous pouvez le faire via l'adresse suivante : Harnham Search and Selection Limited, 3^rd Floor, Melbury House, 51 Wimbledon Hill Road, Wimbledon SW19 7QW, dataprotection@harnham.com

Si nous ne sommes pas en mesure de résoudre les problèmes que vous pourriez rencontrer ou si vous souhaitez déposer une autre plainte, vous pouvez contacter le Commissariat à l'information en visitant https://www.ico.org.uk/ pour obtenir de l'aide.

DE Translation

DATENSCHUTZERKLÄRUNG

Harnham Search and Selection

Datenschutzerklärung

1. Allgemeines

1.1 Harnham Search and Selection Limited und seine Konzernunternehmen („wir", „uns" oder „Harnham") nehmen den Schutz Ihrer Daten sehr ernst. Diese Datenschutzerklärung soll Sie über unsere Praktiken bezüglich der Erfassung, Nutzung und Offenlegung von personenbezogenen Daten informieren - diese können persönlich von Ihnen gesammelt, über unsere Websites erhalten oder auf andere Weise, beispielsweise durch ein Onlineformular, eine E-Mail oder eine Telefonkommunikation gesammelt werden.

1.2 Diese Mitteilung gilt für personenbezogene Daten, die von unseren Kunden und Lieferanten über ihre Mitarbeiter und andere Privatpersonen, die mit ihnen in Verbindung stehen, zur Verfügung gestellt werden, und sie gilt für Kandidaten oder potenzielle Kandidaten („Kandidat"), deren Daten wir für vorgeschlagene Rollen bei unseren Kunden oder potenziellen Kunden verarbeiten. Wenn eine bestimmte Rolle bei unserem Kunden von einer Aktiengesellschaft/Gesellschaft mit beschränkter Haftung oder einem anderen körperschaftlichen Unternehmer ausgefüllt werden soll, können wir Daten über die Direktoren oder Aktionäre dieses Unternehmens verarbeiten, und in dieser Datenschutzerklärung kann ein „Kandidat" auch Direktoren und Aktionäre von Unternehmern umfassen.

1.3 In dieser Mitteilung bezieht sich „Sie" auf jede Einzelperson, deren personenbezogene Daten wir speichern oder verarbeiten (d. h. ein einzelner Kandidat oder ein potenzieller Kandidat, eine Einzelperson, die mit einem Kandidaten eines körperschaftlichen Unternehmenskandidaten verbunden ist, oder eine Einzelperson oder ein Mitarbeiter, die/der mit unserem Kunden oder Lieferanten verbunden oder diesem angeschlossen ist.

1.4 Grundsätzlich beziehen sich unsere Dienstleistungen auf die Bereitstellung von Personalbeschaffungsdienstleistungen für Kunden. Wir verarbeiten keine personenbezogenen Daten in größerem Rahmen, aber wir speichern bestimmte Daten bezüglich Kandidaten und Personen, die mit unseren Kunden und Lieferanten in Verbindung stehen. Diese Mitteilung bestimmt die Grundlage für diese Datenspeicherung.

1.5 Diese Bekanntmachung unterliegt der Datenschutz-Grundverordnung der EU (die „DSGVO") vom 25. Mai 2018.

2. Rechtliche Grundlagen, nach denen wir personenbezogene Daten verarbeiten

2.1 Personenbezogene Daten, die wir über Sie gespeichert haben, werden aus einem der folgenden Gründe verarbeitet:

2.1.1 Weil die Verarbeitung erforderlich ist, damit wir unsere Verpflichtungen aus einem Vertrag zwischen Ihnen und uns erfüllen können, speziell zur Erbringung unserer Dienstleistungen; oder

2.1.2 Weil die Verarbeitung zur Verfolgung eines „berechtigten Interesses" erforderlich ist - ein berechtigtes Interesse bedeutet hierbei ein rechtskräftiges Interesse unseres Unternehmens oder einer Drittpartei an der Verarbeitung Ihrer personenbezogenen Daten, das nicht durch Ihre Interessen bezüglich des Datenschutzes und der Sicherheit beeinträchtigt wird.

2.1.3 Weil wir diese Daten für bestimmte „spezielle Kategorien" sensibler personenbezogener Daten, einschließlich Daten bezüglich der Gesundheit und des ethnischen Hintergrunds, die wir gelegentlich verarbeiten, mit Ihrer Zustimmung verarbeiten.

3. Von uns gesammelte personenbezogene Daten

3.1 Wir können folgende personenbezogene Daten (Daten, die Ihnen eindeutig zugeordnet werden können) über Sie sammeln und verarbeiten:

3.1.1 Bei Einzelpersonen, die mit unseren Kunden in Verbindung stehen, können wir Kontaktdaten wie beispielsweise Namen, E-Mail-Adressen, Telefonnummern, Adressen und Berufsbezeichnungen und/oder besondere Rollen innerhalb Ihres Unternehmens speichern („Kundenkontaktdaten");

3.1.2 Bei Einzelpersonen, die mit unseren Lieferanten und anderen Drittparteien in Verbindung stehen, mit denen wir zusammenarbeiten, können wir Kontaktdaten wie beispielsweise Namen, E-Mail-Adressen, Telefonnummern, Adressen und Berufsbezeichnungen und/oder besondere Rollen innerhalb Ihres Unternehmens speichern („Drittpartei-Kontaktdaten");

3.1.3 Bei Kandidaten speichern wir vielleicht personenbezogene Daten über Sie, Ihren Hintergrund, Ihren Werdegang usw. Diese Daten umfassen möglicherweise Name, Adresse, Telefonnummer, E-Mail-Adresse, Lebenslauf, beruflichen Werdegang, Bildungsqualifikationen („Kandidatendaten");

3.1.4 Eine Aufzeichnung aller Korrespondenzen oder Kommunikationen, die zwischen Ihnen und uns erfolgen („Kommunikationsdaten");

3.1.5 Über Sie gespeicherte Marketingdaten, um Daten über unsere Dienstleistungen bereitzustellen, wie beispielsweise Namen, E-Mail-Adressen, Telefonnummern, Adressen und Berufsbezeichnungen und/oder besondere Rollen innerhalb Ihres Unternehmens („Marketingdaten").

3.2 Wir sammeln die Daten entweder direkt von Ihnen oder über eine Drittpartei (zum Beispiel über Ihren Arbeitgeber oder einen Vorstellenden). Falls wir Ihre personenbezogene Daten von einer Drittpartei erhalten, werden Ihre Persönlichkeitsrechte im Rahmen dieser Mitteilung keinesfalls beeinträchtigt und Sie können die in dieser Mitteilung enthaltenen Rechte weiterhin ausüben.

3.3 Obwohl Sie uns faktisch keine personenbezogenen Daten bereitstellen müssen, könnte es uns ohne Ihre personenbezogenen Daten unmöglich sein, Ihnen unsere Dienstleistungen anzubieten (z. B. brauchen wir Kontaktdaten, um mit Ihnen kommunizieren zu können). Sie können unsere Befugnis zur Verarbeitung Ihrer personenbezogenen Daten jederzeit widerrufen (oder Sie können verlangen, dass wir die Verarbeitung Ihrer personenbezogenen Daten einschränken), aber in manchen Fällen müssen wir die Verarbeitung personenbezogener Daten fortsetzen (lesen Sie dazu die Informationen unten).

4. Wie wir Ihre personenbezogenen Daten verarbeiten

4.1 Bitte lesen Sie die folgende Tabelle. Darin wird beschrieben, wie wir die verschiedenen Arten der von uns gespeicherten personenbezogenen Daten verarbeiten:

Zweck/Tätigkeit	Art der Daten	Gesetzliche Grundlage für die Verarbeitung, einschließlich der Grundlage des berechtigten Interesses
Wenn wir mit einem Kunden oder potenziellen Kunden, mit dem Sie verbunden sind oder mit dem Sie einen Vertrag eingehen, eine Honorarpauschale oder eine Beschäftigung einrichten, um unserem Kunden Dienstleistungen bereitzustellen.	Kunden-Kontaktdaten Kommunikationsdaten	Erfüllung eines Vertrags Erforderlich für unsere berechtigten Interessen (um die notwendigen Daten über Sie zu ermitteln, damit wir unsere Dienstleistungen erbringen können)
Wenn wir Informationen über Kandidaten recherchieren, lokalisieren und speichern.	Kandidatendaten	Erforderlich für unsere legitimen Interessen (um unseren Kunden im Interesse der Kunden und Kandidaten Personalbeschaffungsdienstleistungen zu erbringen).
Wenn wir unseren Kunden oder potenziellen Kunden Daten über Kandidaten liefern.	Kandidatendaten	Erforderlich für unsere legitimen Interessen (um unseren Kunden im Interesse der Kunden und Kandidaten unsere Dienstleistungen zu erbringen).
Wenn wir mit Ihnen als Einzelperson kommunizieren, die mit unserem Kunden oder unserem potenziellen Kunden verbunden ist, um Ihnen unsere Dienstleistungen anzubieten.	Kunden-Kontaktdaten Kommunikationsdaten	Erfüllung eines Vertrags Erforderlich für unsere legitimen Interessen (um unseren Kunden unsere Dienstleistungen zu erbringen).
Wenn wir mit Ihnen als Kandidat bezüglich einer bestimmten Rolle oder Rollenart kommunizieren.	Kandidatendaten Kommunikationsdaten	Erfüllung eines Vertrags Erforderlich für unsere legitimen Interessen (um unseren Kunden im Interesse von Kunden und Kandidaten unsere Dienstleistungen zu erbringen).
Wenn wir Daten bezüglich Kandidaten speichern, um Kandidaten zukünftig für potenzielle Rollen vorzuschlagen.	Kandidatendaten	Erforderlich für unsere legitimen Interessen (um unseren Kunden im Interesse der Kunden und Kandidaten unsere Dienstleistungen zu erbringen).
Wenn wir mit Ihnen oder einer Organisation, mit der Sie als Lieferant verbunden sind, einen Vertrag eingehen.	Drittparteidaten Kommunikationsdaten.	Vertragserfüllung mit Ihnen Erforderlich für unsere legitimen Interessen (um unsere Dienstleistungen zu erbringen).
Wenn wir mit Ihnen als Einzelperson kommunizieren, die mit unserem Lieferanten oder einer anderen Drittpartei verbunden ist, mit der wir zusammenarbeiten.	Drittparteidaten Kommunikationsdaten	Vertragserfüllung mit Ihnen Erforderlich für unsere legitimen Interessen (um unseren Kunden unsere Dienstleistungen zu erbringen).
Wenn wir mit Ihnen als Einzelperson, die mit unserem Kunden/potentiellen Kunden verbunden ist, über unsere Dienstleistungen kommunizieren (wenn Sie beispielsweise eine Hilfeleistung ersuchen).	Kunden-Kontaktdaten Kommunikationsdaten	Vertragserfüllung mit Ihnen Erforderlich für unsere legitimen Interessen (um unser Unternehmen zu führen und um unseren Kunden unsere Dienstleistungen anzubieten)
Um unsere Beziehung zu Ihnen als unseren Kunden, Lieferanten oder Dritten zu verwalten.	Kunden-Kontaktdaten Drittparteidaten Kommunikationsdaten	Vertragserfüllung mit Ihnen. Erforderlich, um einer gesetzlichen Verpflichtung nachzukommen. Erforderlich für unsere legitimen Interessen, um zu garantieren, dass wir zu unseren Kunden, Lieferanten und Drittparteien gute Beziehungen pflegen.
Um Ihre Kontaktdaten für Werbezwecke zu speichern und Ihnen Marketing- und andere Werbematerialien zu schicken.	Kunden-Kontaktdaten Kandidatendaten Marketingdaten	Erforderlich für unsere berechtigten Interessen zur Bewerbung unserer Dienstleistungen hinsichtlich Geschäftskunden oder Kunden oder Verbrauchern mit Zustimmung oder da die betreffende Einzelperson ähnliche Dienstleistungen von uns erworben hat.

Für jeden der oben genannten Datentypen gelten die Definitionen, die in Abschnitt 3.1 aufgelistet werden.

5.1 Datenspeicherung

Unsere derzeitigen Richtlinien bezüglich der Datenspeicherung sagen aus, dass wir die personenbezogenen Daten, die wir über Sie gespeichert haben, gemäß folgender Bestimmungen löschen oder vernichten müssen (soweit wir dazu in der Lage sind):

*Kategorie der personenbezogenen Daten*	*Speicherdauer*
Aufzeichnungen, die für Steuerbehörden relevant sind	8 Jahre ab dem Ablauf des Jahres, auf das sich die Aufzeichnungen beziehen
Kandidatendaten	Nach einem Zeitraum von 7 Jahren ab der Einstellung eines Kandidaten in einer bestimmten Position bei unserem Kunden, oder im Falle von Auftragnehmern 7 Jahre nach dem Ende der Position bei unserem Kunden, oder 7 Jahre ab dem letzten Datum, an dem Sie mit uns zusammengearbeitet haben.
Kandidatendaten, bei denen wir Kandidatendaten ohne direkte Interaktion recherchiert und gefunden haben	1 Jahr ab dem Datum der Datenerfassung
Personenbezogene Daten, die im Zusammenhang mit einem Vertrag zwischen Ihnen und uns verarbeitet werden	7 Jahre entweder nach Vertragsende oder nach dem Datum, an dem Sie unsere Dienstleistungen zuletzt genutzt haben, also die Dauer nach einem Vertragsbruch, in der Sie einen Rechtsanspruch geltend machen können.
Personenbezogene Daten, die in Marketing-Unterlagen oder Unterlagen zur Geschäftsentwicklung enthalten sind.	3 Jahre nach dem letzten Datum, an dem Sie mit uns interagiert haben.

5.2 Für jede Kategorie personenbezogener Daten, die nicht ausdrücklich in dieser Mitteilung definiert ist, und wenn nicht durch geltendes Recht anders bestimmt, gilt der festgelegte Archivierungszeitraum von 7 Jahren ab dem Datum, an dem wir die Daten erhalten haben.

5.3 Die in dieser Mitteilung dargelegten Aufbewahrungsfristen können, falls erforderlich, verlängert oder verkürzt werden (zum Beispiel bei einem Gerichtsverfahren oder einer laufenden Untersuchung der Daten).

5.4 Wir prüfen die von uns aufbewahrten personenbezogenen Daten (und die Kategorien der personenbezogenen Daten) regelmäßig, um zu garantieren, dass die von uns aufbewahrten Daten weiterhin für unser Unternehmen relevant und richtig sind. Sobald wir bemerken, dass bestimmte von uns gespeicherte Daten nicht mehr benötigt werden oder falsch sind, unternehmen wir angemessene Schritte, um diese Daten zu berichtigen oder zu löschen.

5.5 Falls Sie verlangen möchten, dass über Sie gespeicherte Daten geändert oder gelöscht werden, beziehen Sie sich bitte auf das nachfolgende Kapitel 8, in dem Ihre Persönlichkeitsrechte erläutert werden.

6. Teilen Ihrer Daten

6.1 Wir geben Ihre Daten nur folgendermaßen an Drittparteien weiter:

6.1.1 Wir geben Kandidatendaten an unsere Kunden oder potenzielle Kunden weiter. Unsere Kunden sind die Datenverantwortlichen dieser Kandidatendaten;

6.1.2 Wir können Daten an unsere Konzernunternehmen weitergeben;

6.1.3 Falls wir verpflichtet sind, Ihre personenbezogenen Daten preiszugeben oder zu teilen, um einer gesetzlichen Verpflichtung nachzukommen (beispielsweise wenn dies durch einen Gerichtsbeschluss oder zur Verhinderung von Betrug oder anderen Straftaten nötig ist);

6.1.4 Zur Durchsetzung beliebiger Geschäftsbedingungen oder Vereinbarungen, die für unsere Dienstleistungen gelten;

6.1.5 Wenn wir Dienstleistungen an eine Drittpartei vergeben, stellen wir dieser Drittpartei vielleicht Daten zur Verfügung, damit sie die entsprechenden Dienstleistungen erbringen kann;

6.1.6 Wir können Ihre personenbezogenen Daten an eine Drittpartei weitergeben, wenn ein Teil oder alle unsere Geschäfte und Vermögenswerte an eine Drittpartei verkauft werden, oder im Rahmen einer Umstrukturierung oder Reorganisation des Unternehmens, aber wir werden Maßnahmen ergreifen, um zu garantieren, dass Ihre Persönlichkeitsrechte auch in Zukunft geschützt bleiben;

6.1.7 Zum Schutz unserer Rechte, unseres Eigentums und unserer Sicherheit oder zum Schutz der Rechte, des Eigentums und der Sicherheit unserer Nutzer oder anderer Drittparteien. Dies umfasst auch den Datenaustausch mit anderen Unternehmen und Organisationen zum Schutz vor Betrug und zum Abbau des Kreditrisikos.

6.2 In anderen als den oben genannten Fällen werden wir keine Ihrer personenbezogenen Daten weitergeben, außer Sie geben uns dazu Ihre Einwilligung. Wenn wir Ihre personenbezogenen Daten an Drittparteien weitergeben, ergreifen wir Maßnahmen, um zu garantieren, dass Ihre Persönlichkeitsrechte geschützt sind und dass Drittparteien die Bestimmungen dieser Mitteilung einhalten.

7. Sicherheit

7.1 Wir ergreifen alle angemessenen Schritte, um zu garantieren, dass geeignete technische und organisatorische Maßnahmen getroffen werden, um die von Ihnen gesammelten Daten zu schützen und sie vor unrechtmäßigem Zugriff und versehentlichem Verlust oder versehentlicher Beschädigung zu schützen. Diese Maßnahmen umfassen vielleicht (soweit erforderlich):

7.1.1 Schutz unserer Server durch Software-Firewalls;

7.1.2 Die Aufstellung unserer Speicheranlagen zur Datenverarbeitung an sicheren Orten;

7.1.3 Die Verschlüsselung aller Daten, die auf unserem Server gespeichert sind - mit einer in der Branche üblichen Verschlüsselungstechnologie, welche die Daten zwischen Ihrem Computer und unserem Server verschlüsselt, damit bei einem ungesicherten Netzwerk Ihrerseits keine Daten in einem Format weitergegeben werden, das leicht entschlüsselt werden kann;

7.1.4 Wenn nötig, das sichere Entfernen oder die sichere Löschung Ihrer Daten;

7.1.5 Das regelmäßige Sichern aller von uns aufgezeichneten Daten.

7.2 Wir werden sicherstellen, dass unsere Mitarbeiter ihre Verpflichtungen bezüglich des Datenschutzes und der Datensicherheit kennen. Wir werden angemessene Maßnahmen ergreifen, um zu garantieren, dass die Mitarbeiter von Drittparteien, die in unserem Auftrag arbeiten, ihre Datenschutz- und Datensicherheitsverpflichtungen kennen.

7.3 Diese Mitteilung und unsere Maßnahmen beim Umgang mit personenbezogenen Daten werden, falls erforderlich, überarbeitet.

7.4 Leider ist die Übertragung von Daten über das Internet nicht vollkommen sicher. Wir werden zwar unser Bestes tun, um Ihre personenbezogenen Daten zu schützen, aber wir können die Sicherheit Ihrer an die Website übertragenen Daten nicht garantieren - jede Übertragung erfolgt auf Ihr eigenes Risiko. Sobald wir Ihre Daten erhalten haben, wenden wir die strengen Vorschriften und Sicherheitsfunktionen an, die in dieser Klausel beschrieben werden, um unbefugten Zugriff zu verhindern.

8. Ihre Persönlichkeitsrechte

8.1 Die DSGVO verleiht Ihnen die folgenden Rechte bezüglich der personenbezogenen Daten, die wir über Sie gespeichert haben:

Das Recht auf Information	Sie haben ein Recht darauf, Auskunft über unsere Datenschutz- und Datenverarbeitungsaktivitäten zu verlangen, die in dieser Mitteilung ausführlich beschrieben werden.
Das Recht auf Zugriff	Sie können einen Antrag auf die Erteilung einer Auskunft über personenbezogene Daten (Subject Access Request - „SAR") stellen, um Informationen über die personenbezogenen Daten anzufordern, die wir über Sie gespeichert haben (kostenlos, außer für angemessene Ausgaben für wiederholte Anfragen). Wenn Sie einen Antrag auf die Erteilung einer Auskunft über personenbezogene Daten (Subject Access Request - „SAR") stellen möchten, kontaktieren Sie uns bitte wie unten beschrieben.
Das Recht auf Korrektur	Informieren Sie uns bitte, wenn von uns über Sie gespeicherte Daten unvollständig oder ungenau sind - und wir werden unsere Aufzeichnungen möglichst schnell, jedoch mindestens innerhalb eines Monats aktualisieren. Wir werden angemessene Schritte unternehmen, um die Änderung an Drittparteien weiterzuleiten, denen wir diese Daten zur Verfügung gestellt haben.
Das Recht auf Löschung (das „Recht auf Vergessenwerden")	Bitte sagen Sie uns Bescheid, wenn wir keine personenbezogenen Daten mehr über Sie speichern sollen (obwohl es in der Praxis unmöglich ist, unsere Dienstleistungen ohne eine Speicherung Ihrer personenbezogenen Daten zu erbringen, und wir Ihre Daten vielleicht weiterhin speichern müssen). Sofern wir keinen triftigen Grund haben, uns der Löschung zu widersetzen, werden wir nach dem Erhalt einer derartigen Anfrage die betreffenden personenbezogenen Daten innerhalb eines Monats sicher löschen. Die Daten existieren vielleicht in bestimmten Sicherungskopien weiter, aber wir werden Maßnahmen ergreifen, um zu garantieren, dass sie niemandem zugänglich sind. Wir werden alle Drittparteien über diese Löschung informieren, denen wir diese Daten zur Verfügung gestellt haben.
Das Recht, die Verarbeitung zu beschränken	Sie können beantragen, dass wir Ihre personenbezogenen Daten nicht mehr auf bestimmte Arten verarbeiten, ohne dass wir diese Daten löschen müssen. Einige unserer Dienstleistungen stehen jedoch nicht mehr zur Verfügung, wenn die Bearbeitung der personenbezogenen Daten beschränkt ist.
Das Recht auf Datenübertragbarkeit	Sie haben das Recht, Kopien Ihrer personenbezogenen Daten in einem verbreiteten und leicht speicherbaren Format zu erhalten (teilen Sie uns bitte das gewünschte Format mit). Sie können außerdem verlangen, dass wir Ihre personenbezogenen Daten direkt an Dritte weiterleiten (soweit dies technisch möglich ist).
Das Widerspruchsrecht	Falls keine zwingenden Gründe für eine derartige Verarbeitung vorliegen, können Sie der Nutzung Ihrer personenbezogenen Daten für Direktmarketingzwecke (inklusive Profilerstellung) oder für Forschungs- und Statistikzwecke widersprechen. Bitte benachrichtigen Sie uns über Ihren Widerspruch und wir werden eine derartige Bearbeitung gerne einstellen.
Rechte bezüglich automatisierter Entscheidungsfindung und Profilerstellung	Sie haben das Recht, keiner automatisierten Entscheidungsfindung (inklusive Profilerstellung) zu unterliegen, falls diese Entscheidungen sich rechtlich (oder ähnlich wichtig) auf Sie auswirken. Sie haben dieses Recht jedoch nicht, wenn die automatisierte Verarbeitung für die Erfüllung unserer Verpflichtungen unter einem Vertrag mit Ihnen notwendig ist, wenn dies durch das Gesetz erlaubt ist oder wenn Sie dazu Ihre ausdrückliche Zustimmung erteilt haben.
Recht auf Widerrufen der Einwilligung	Wenn wir uns auf Ihre Zustimmung als Grundlage für die Verarbeitung Ihrer personenbezogenen Daten verlassen, haben Sie das Recht, Ihre Zustimmung jederzeit zu widerrufen. Selbst wenn Sie der Verarbeitung durch uns nicht ausdrücklich zugestimmt haben, haben Sie das Recht auf einen Widerspruch (vergleichen Sie oben).

8.2 Alle Anträge auf die Erteilung einer Auskunft über personenbezogene Daten (Subject Access Requests - „SARs") und sämtliche anderen Anfragen oder Mitteilungen bezüglich Ihrer oben genannten Rechte müssen schriftlich gesendet werden an: Harnham Search and Selection Limited 3rd Floor, Melbury House, 51 Wimbledon Hill Road, Wimbledon SW19 7QW, England, dataprotection@harnham.com

8.3 Wir werden solchen Anfragen möglichst bald nachzukommen versuchen, auf jeden Fall jedoch innerhalb eines Monats nach dem Erhalt (außer zur Beantwortung ist aufgrund der Komplexität oder der Anzahl Ihrer Anfragen eine längere Frist angemessen).

9. Datenschutzverletzungen

9.1 Falls von uns über Sie gespeicherte personenbezogene Daten einem Verstoß oder einer unbefugten Offenlegung oder einem unbefugten Zugriff unterliegen, melden wir dies dem Information Commissioner (IC) [Information Commissioner's Office - ICO] und/oder unserem Datenschutzbeauftragten.

9.2 Wenn ein Verstoß wahrscheinlich zu einer Gefährdung Ihrer Datenrechte und -freiheiten führt, informieren wir Sie möglichst schnell.

10. Übertragung Ihrer Daten außerhalb von Europa

10.1 Als Teil der Dienstleistungen, die wir unseren Kunden zur Verfügung stellen, können die uns von Ihnen zur Verfügung gestellten Daten an Länder oder internationale Unternehmen außerhalb des Europäischen Wirtschaftsraums (EWR) übertragen sowie von diesen verarbeitet und gespeichert werden.

10.2 Unser Kunde kann seinen Firmensitz außerhalb des Europäischen Wirtschaftsraums (EWR) haben und wir übertragen vielleicht personenbezogene Daten an unseren Kunden außerhalb des Europäischen Wirtschaftsraums (EWR). Zum Beispiel können wir Kandidatendaten an unseren Kunden außerhalb des Europäischen Wirtschaftsraums (EWR) weiterleiten, wenn dies zur Erfüllung eines Vertrags zwischen uns und dem Kunden erforderlich ist und dies im Interesse des Kandidaten liegt.

10.3 Es können Daten von unseren Konzernunternehmen mit Firmensitz außerhalb des Europäischen Wirtschaftsraums (EWR) verarbeitet werden, aber wir werden garantieren, dass alle Daten, auf die unsere Konzernunternehmen zugreifen können, einer Datenübermittlungsvereinbarung oder verbindlichen unternehmensinternen Vorschriften unterliegen, damit Ihre Rechte als betroffene Person gewahrt bleiben.

10.4 Falls Sie uns kontaktieren, während Sie sich außerhalb des Europäischen Wirtschaftsraums (EWR) aufhalten, werden Ihre Daten vielleicht außerhalb des Europäischen Wirtschaftsraums (EWR) übertragen, damit wir mit Ihnen kommunizieren können.

10.5 Wenn wir Ihre Daten außerhalb des Europäischen Wirtschaftsraums (EWR) und nicht in Übereinstimmung mit dieser Klausel weitergeben und das betreffende Drittland oder das betreffende internationale Unternehmen laut der EU-Kommission keine ausreichenden Datenschutzgesetze hat, sorgen wir für angemessene Sicherheitsvorkehrungen und sind dafür verantwortlich, dass Ihre Datenschutzrechte gewahrt bleiben, wie es in dieser Mitteilung dargelegt wird.

11. Benachrichtigung über Änderungen an den Inhalten dieser Mitteilung

Wir werden Einzelheiten bezüglich aller Änderungen unserer Richtlinien auf www.harnham.com veröffentlichen, um zu garantieren, dass Sie die von uns gesammelten Daten jederzeit kennen und dass Sie über die Verwendung Ihrer Daten und die Umstände der eventuellen Weitergabe an andere Parteien informiert sind.

12. Kontakt

Falls Sie uns irgendwann kontaktieren möchten, um uns Ihre Ansichten über unsere Datenschutzpraktiken mitzuteilen, oder falls Sie irgendwann einmal Fragen oder Beschwerden hinsichtlich Ihrer personenbezogenen Daten oder deren Handhabung haben, ist dies über folgende Adresse möglich: Harnham Search and Selection Limited, 3rd Floor, Melbury House, 51 Wimbledon Hill Road, Wimbledon SW19 7QW, England, dataprotection@harnham.com

Wenn wir eines Ihrer Probleme nicht lösen können oder wenn Sie eine andere Beschwerde einreichen möchten, können Sie sich an den Information Commissioner (IC) [Information Commissioner's Office - ICO] wenden, indem Sie für weitere Unterstützung https://www.ico.org.uk/ aufrufen.

Harnham GmbH

Harnham GmbH

Privacy Notice

General
- For the purposes of applicable data protection law (in particular, the General Data Protection Regulation (EU) 2016/679 ("GDPR")) your data will be controlled by Harnham GmbH ("we", "us" or "Harnham").
- This Privacy Notice is designed to tell you about our practices regarding the collection, use and disclosure of personal data ("data"), i.e. all information relating to you, which may be collected in person from you, obtained via our websites or collected through other means such as by an online form, email, or telephone communication.
- This notice applies to personal data provided by our clients and suppliers about their employees and other individuals affiliated with them and also to candidates or prospective candidates ("Candidates") whose personal data we process for proposed roles with our clients or prospective clients. Where a given role with our client is to be filled by a limited company or other corporate contractor we may process personal data relating to that company's directors or shareholders and in this Privacy Notice a "Candidate" may include directors and shareholders of corporate contractors.
- In this notice "you" refers to any individual whose personal data we hold or process (i.e: an individual candidate or potential candidate, an individual affiliated with a corporate contractor candidate, or an individual or employee associated or affiliated with our client or supplier).
- In general, our services are related to the provision of recruitment services to clients and Candidates, and the provision of recruitment and market related information to clients and Candidates, and we do not process personal data on a large scale, but we will hold certain data in relation to Candidates and individuals affiliated with our clients and suppliers, and this notice sets out the basis on which we hold that data.
Personal data we collect
- We may collect and process the following personal data about you:
  - for individuals associated with our clients we may hold contact information such as names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation ("Client Contact Information");
  - for individuals associated with our suppliers and other third parties we interact with we may hold contact information such as names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation ("Third Party Contact Information");
  - for Candidates we may have personal data about you, your background, work history etc. This information may include name, address, telephone number, email address, CV, work history, educational qualifications ("Candidate Information");
  - a record of any correspondence or communication between you and us ("Communication Information");
  - marketing information we may hold about you in order to provide information about our services (as set out in clause 1.4); this may include names, email addresses, phone numbers, addresses, and job titles and/or specific roles within your organisation ("Marketing Information");
  - technical, profile and usage data, including passwords to Harnham websites, your preferences in receiving marketing information from us, your communication preferences. To learn more about our use of cookies or similar technology please check our Cookies Policy.
- We will collect information either from you directly or from a third party (for instance your employer, a job site or social media platform you have registered with, or an introducer). If we do obtain your personal data from a third party your privacy rights under this notice are not affected and you are still able to exercise the rights contained within this notice.
- Although you do not have to supply any personal data to us in practice we may be unable to provide our services to you without personal data (for instance we will need contact information in order to communicate with you). You may withdraw our authority to process your personal data (or request that we restrict our processing) at any time but there are circumstances in which we may need to continue to process personal data (please see below).
How we process your personal data
- Please see the table below, which sets out the manner in which we will process the different types of personal data we hold:

Purpose/Activity	Type of data	Lawful basis for processing including basis of legitimate interest
When we are setting up a retainer or engagement with a client or potential client with whom you are associated or entering into an agreement to provide services to our client.	Client Contact Information Communication Information	Performance of a contract Necessary for our legitimate interests (to establish necessary information about you in order to provide our services)
When we research, locate and record information relating to Candidates.	Candidate Information	Necessary for our legitimate interests (in order to deliver recruitment services to our clients and Candidates in the interests of the clients and Candidates).
When we provide information relating to Candidates to our clients or potential clients.	Candidate Information	Necessary for our legitimate interests (in order to deliver our services to our clients and Candidates in the interests of the clients and Candidates).
When we communicate with you as an individual affiliated with our client or potential client in order to provide our services to you.	Client Contact Information Communication Information	Performance of a contract Necessary for our legitimate interests (in order to deliver our services to our clients).
When we communicate with you as a Candidate or an individual associated with our Candidate in order to provide our services to you, including using other communication technology, such as chatbot technology.	Candidate Information Communication Information	Performance of a contract Necessary for our legitimate interests (in order to deliver our services to our clients and Candidates in the interests of clients and Candidates).
When we store information relating to Candidates in order to put Candidates forward for potential roles in the future.	Candidate Information	Necessary for our legitimate interests (in order to deliver our services to our clients and Candidates in the interests of the clients and Candidates).
When we enter into an agreement with you or an organisation with which you are connected as a supplier.	Third Party Contact Information Communication Information.	Performance of a contract with you Necessary for our legitimate interests (in order to deliver our services).
When we communicate with you as an individual affiliated with our supplier or another third party we interact with.	Third Party Contact Information Communication Information	Performance of a contract with you Necessary for our legitimate interests (in order to deliver our services to our clients and Candidates).
When we communicate with you as an individual affiliated with our client, potential client about our services (for instance if you request assistance).	Client Contact Information Communication Information	Performance of a contract with you Necessary for our legitimate interests (for running our business and to provide our clients and Candidates with our services)
To manage our relationship with you as our client, supplier or third party.	Client Contact Information Third Party Contact Information Communication Information	Performance of a contract with you. Necessary to comply with a legal obligation. Necessary for our legitimate interests in ensuring that we maintain good relationships with our clients, suppliers and third parties.
To store your contact information for marketing purposes and sending marketing and other promotional communications to you.	Client Contact Information Candidate Information Marketing Information	Necessary for our legitimate interests in promoting our services to business customers or Clients, or consumers with consent or because the relevant individual has purchased similar services from us.

For each type of data listed above, definitions are included under clause 2.1.

Website
- Google Analytics

If you consent, we will use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA ("Google"). Google Analytics collects pseudonymous data from you about the use of our website, including your shortened IP address, and uses cookies. This data is transferred to a Google server in the U.S. and stored there. Google will use this information to evaluate your use of the website for us, to create reports on the use of our website and to generate further analysis and evaluations related to the use of our website and the internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

There is no adequacy decision by the EU Commission for the U.S. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art 46 Para 2 lit c) GDPR.

Your data remains stored with Google Analytics for a period of 14 months. After this period, the data will be deleted and only aggregated statistics will be kept.

For more information about how Google uses your data, see Google's privacy policy .

The use of Google Analytics is based on your consent (Art 6 Para 1 lit a) GDPR).

You can withdraw your consent at any time and deactivate Google Analytics using a browser add-on. Alternatively, you can withdraw your consent by clicking on "Privacy Settings" at the bottom of the page.

Integrated third-party content

We have also included third-party content on our website. This content is loaded from the servers of the respective providers, so that your end device transmits certain technically necessary data to the third party provider. In particular, it is not excluded that these providers can take note of the IP address assigned to you. As far as personal data is processed, this is done on the basis of the data protection declarations of the respective third party providers. The integration by us takes place on the basis of our legitimate interests, to be able to provide our users with the appropriate content and functionalities and to operate our website economically, as well as the fact that your legitimate interests do not prevail, Art 6 Para 1 lit f) GDPR. We include the following third-party content:

YouTube

We use YouTube videos. YouTube is a service of Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA, for users from the EU of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

Facebook Fanpage

You can also find us on Facebook at https://www.facebook.com/HarnhamDataandAnalytics.

When you visit our Facebook fan page, we process certain data about you when you interact with our page, mark a post with "Like" or comment on it, or provide other content. The data processing in this regard takes place regularly on the basis of our legitimate interest in providing the corresponding functions on our Facebook fan page, as well as on your consent to Facebook (Art 6 Para 1 lit a) GDPR) or your contractual relationship with Facebook (Art 6 Para 1 lit b) GDPR). In addition, together with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, we are responsible for the processing of so-called Insights data when you visit our Facebook fan page.

With the help of this Insights data, Facebook analyses the behaviour on our Facebook fan page and provides us with this data in an anonymous form. For this purpose, we have concluded an agreement on the shared responsibility of data processing with Facebook Ireland Ltd., here. Facebook Ireland Ltd. among other things, undertakes to assume primary responsibility in accordance with the GDPR for the processing of Insights data and to fulfil all obligations under the GDPR with regard to the processing of Insights data. The processing serves our legitimate economic interests in the optimization and needs-based design of our Facebook fan page, Art 6 Para 1 lit f) GDPR. We also draw your attention to the following:

If you, as a registered Facebook user, visit or like our Facebook page, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook") collects personal data from you. If you are not registered on Facebook and visit the Facebook page, Facebook can collect pseudonymous usage data from you.

The following information is collected by Facebook:

View a page, post, or video from a page
Subscribe to or unsubscribe from a page
Mark a page or a post with "Like" or "Unlike"
Recommend a page in a post or comment
Comment, share, or respond to a page post (including the type of response)
Hide a page post or report it as spam
From another page on Facebook or from a website outside of Facebook, click on a link that leads to the page
Move the mouse over the name or profile picture of a page to see a preview of the page content
Click on the website, telephone number, "plan route" button or another button on a page
Information about whether you are logged in using a computer or a mobile device while visiting or interacting with a page or its content.

You can find more information in Facebook's data protection information here.

Facebook also processes the data in the U.S. There is no adequacy decision by the EU Commission for the U.S. Therefore, with Facebook, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art 46 Para 2 lit c) GDPR.

You can find out more about how Facebook uses your data when you visit or like our Facebook page here.

Data Retention
- Unless otherwise stated, we will delete or anonymise your personal data as soon as it is no longer required for the purposes for which we collected or used it. As a rule, we store your personal data for the duration of the usage or contractual relationship via the website plus a period of 30 days in which we keep backup copies after the deletion.
- As far as data has to be kept for legal reasons, processing is restricted. The data will then no longer be available for further use.
- Storage beyond the contractual relationship takes place on the basis of our legitimate interests in accordance with Art 6 Para 1 lit f GDPR.
- The retention periods stated in this notice can be prolonged or shortened as may be required (for example, in the event that legal proceedings apply to the data or if there is an on-going investigation into the data).
- We review the personal data (and the categories of personal data) we are holding on a regular basis to ensure the data we are holding is still relevant to our business and is accurate. If we discover that certain data we are holding is no longer necessary or accurate, we will take reasonable steps to correct or delete this data as may be required.
- If you wish to request that data we hold about you is amended or deleted, please refer to clause 8 below, which explains your privacy rights.
Sharing your information
- We do not disclose any information you provide to any third parties other than as follows:
  - We will disclose Candidate Data to our clients or potential clients and our clients will be the data controller for that Candidate Data;
  - We may disclose information to our group companies;
  - if we are under a duty to disclose or share your personal data in order to comply with any legal obligation (for example, if required to do so by a court order or for the purposes of prevention of fraud or other crime);
  - in order to enforce any terms and conditions or agreements for our services that may apply;
  - If we are sub-contracting services to a third party we may provide information to that third party in order to provide the relevant services;
  - we may transfer your personal data to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation, but we will take steps with the aim of ensuring that your privacy rights continue to be protected;
  - to protect our rights, property and safety, or the rights, property and safety of our users or any other third parties. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
- Other than as set out above, we shall not disclose any of your personal data unless you give us permission to do so. If we do supply your personal data to a third party we will take steps to ensure that your privacy rights are protected and that third party complies with the terms of this notice.
Security
- We will take all reasonable steps to ensure that appropriate technical and organisational measures are carried out in order to safeguard the information we collect from you and protect against unlawful access and accidental loss or damage. These measures may include (as necessary):
  - protecting our servers with software firewalls;
  - locating our data processing storage facilities in secure locations;
  - encrypting all data stored on our server with an industry standard encryption method that encrypts the data between your computer and our server so that in the event of your network being insecure no data is passed in a format that could easily be deciphered;
  - when necessary, disposing of or deleting your data so it is done so securely;
  - regularly backing up all data we hold.
- We will ensure that our employees are aware of their privacy and data security obligations. We will take reasonable steps to ensure that the employees of third parties working on our behalf are aware of their privacy and data security obligations.
- This notice and our procedures for handling personal data will be reviewed as necessary.
- Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Site; any transmission is at your own risk. Once we have received your information, we will use the strict procedures and security features referred to in this clause to try to prevent unauthorised access.
Your privacy rights
- The GDPR gives you the following rights in respect of personal data we hold about you:

The right to be informed	You have a right to know about our personal data protection and data processing activities, details of which are contained in this notice.
The right of access	You can make what is known as a Subject Access Request ("SAR") to request information about the personal data we hold about you. Access may be denied if, for example, making the information available to you would reveal personal data about another person, or if we are legally prevented from disclosing such information. If you wish to make a SAR please contact us as described below.
The right to correction	Please inform us if information we hold about you is incomplete or inaccurate in any way. We will take reasonable steps to communicate the change to any third parties to whom we have passed the same information.
The right to erasure (the 'right to be forgotten')	Please notify us if you no longer wish us to hold personal data about you (although in practice it is not possible to provide our services without holding your personal data and we may need to keep your data in some circumstances). Unless we have reasonable grounds to refuse the erasure, on receipt of such a request we will securely delete the personal data in question within one month. We will communicate the erasure to any third parties to whom we have passed the same information.
The right to restrict processing	You can request that we no longer process your personal data in certain ways, whilst not requiring us to delete the same data. However again, some of our Services will not be available if processing is restricted.
The right to data portability	You have right to receive copies of personal data we hold about you in a commonly used and easily storable format (please let us know a format which suits you). You may also request that we transfer your personal data directly to a third party (where technically possible).
The right to object	You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation on the basis of Art 6 Para 1 lit e) or f) GDPR. Your right to objection exists for reasons arising out of your particular situation, unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms or if the processing is necessary for the assertion and exercise of or defence against legal claims (Art 21 Para 1 GDPR).
Rights with respect to automated decision-making and profiling
Right to withdraw consent	If we are relying on your consent as the basis on which we are processing your personal data, you have the right to withdraw your consent at any time. Withdrawal of consent has effect for the future only and does not affect the lawfulness of data processed until the withdrawal. Even if you have not expressly given your consent to our processing, you also have the right to object (see above).
Right to complain	If we are unable to resolve any issues you may have or you would like to make a complaint, you have the right to contact a supervisory authority of your choice in the event of complaints, for instance the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin, E‑Mail: mailbox@datenschutz-berlin.de.

Data processing when exercising your rights

Finally, we would like to point out that we process your personal data when exercising your rights according to Art 15 - 22 GDPR transmitted by you for the purpose of implementing these rights and in order to be able to provide proof of this. This processing is based on the legal basis of Art 6 Para 1 lit c) GDPR in conjunction with Art 15 - 22 GDPR and Section 34 Para 2 BDSG.

To exercise your rights, you can reach out to us by post or email to the address mentioned below (section "Contact Us")

Data Breaches
- If personal data we hold about you is subject to a breach or unauthorised disclosure or access, we will report the competent data protection authority and/or our data protection manager.
- If a breach is likely to result in a risk to your data rights and freedoms, we will notify you as soon as possible.
Transferring your information outside Europe
- As part of the services provided to our clients offered to you the information you provide to us may be transferred to, processed and stored at, countries or international organisations outside of the EEA.
- Our client may be based outside of the EEA and we may transfer personal data to our client outside of the EEA. For instance we may transfer Candidate Information to our client outside of the EEA where this is necessary to perform a contract between us and the client and this is in the interests of the Candidate.
- Data may be processed by our group companies based outside of the EEA, but we will ensure that any data accessible by our group companies will be subject to a data transfer agreement or binding corporate rules to maintain your rights as a data subject.
- If you contact us while you are outside the EEA, your information may be transferred outside the EEA in order to communicate with you.
- If we transfer your information outside of the EEA other than in accordance with this clause and the third country or international organisation in question has not been deemed by the EU Commission to have adequate data protection laws, we will provide appropriate safeguards and we will be responsible for ensuring your privacy rights continue to be protected as outlined in this notice. We adhere to the standard data protection clauses approved by the EU Commission in accordance with Art 46 Para 2 lit c GDPR.
Notification of changes to the contents of this notice

We will post details of any changes to our Privacy Notice on www.harnham.com to help ensure you are always aware of the information we collect, how we use it, and in what circumstances, if any, we share it with other parties.

If at any time you would like to contact us with your views about our privacy practices, or with any enquiry or complaint relating to your personal data or how it is handled, you can do so via the following address:

Harnham GmbH, Skalitzer Str. 104, 10997 Berlin or dataprotection@harnham.com.

Status as of 1 December 2022

Harnham B.V.

Privacy Statement for Harnham B.V.

Last updated 1 April 2023

General

1.1 Harnham B.V. together with its group companies ("we", "us" or "Harnham") take the privacy of your information very seriously. This Privacy Notice is designed to tell you about our practices regarding the collection, use and disclosure of personal information which may be collected in person from you, obtained via our websites or collected through other means such as by an online form, email, or telephone communication.

1.5 This notice is governed by the EU General Data Protection Regulation (the "GDPR") from 25 May 2018. This Privacy Notice is applicable as of 11 April 2023 and supersedes all previous versions.

Legal Basis on which we process personal data

2.1 Personal data we hold about you will be processed either because:

2.1.1 the processing is necessary in order for us to comply with our obligations under a contract between you and us, specifically for the provision of our services; or

Personal data we collect

3.1 We may collect and process the following personal data (information that can be uniquely identified with you) about you:

3.1.4 a record of any correspondence or communication between you and us via e-mail, social media networks, video calls and interviews and chatbots for Candidates ("Communication Information");

How we process your personal data

4.1 Please see the table below, which sets out the manner in which we will process the different types of personal data we hold:

Purpose/Activity	Type of data	Lawful basis for processing including basis of legitimate interest
When we are setting up a retainer or engagement with a client or potential client with whom you are associated or entering into an agreement to provide services to our client.	Client Contact Information Communication Information	Performance of a contract Necessary for our legitimate interests (to establish necessary information about you in order to provide our services)
When we research, locate and record information relating to Candidates.	Candidate Information	Necessary for our legitimate interests (in order to deliver recruitment services to our clients and Candidates in the interests of the clients and Candidates).
When we provide information relating to Candidates to our clients or potential clients.	Candidate Information Communication Information	Necessary for our legitimate interests (in order to deliver our services to our clients and Candidates in the interests of the clients and Candidates)
When we communicate with you as an individual affiliated with our client or potential client in order to provide our services to you.	Client Contact Information Communication Information	Performance of a contract Necessary for our legitimate interests (in order to deliver our services to our clients).
When we communicate with you as a Candidate or an individual associated with our Candidate in order to provide our services to you, including using other communication technology, such as chatbot technology.	Candidate Information Communication Information	Performance of a contract Necessary for our legitimate interests (in order to deliver our services to our clients and Candidates in the interests of clients and Candidates) or with your consent.
When we store information relating to Candidates in order to put Candidates forward for potential roles in the future.	Candidate Information Communication information	Necessary for our legitimate interests (in order to deliver our services to our clients and Candidates in the interests of the clients and Candidates) or with your consent.
When we enter into an agreement with you or an organisation with which you are connected as a supplier.	Third Party Contact Information Communication Information.	Performance of a contract with you Necessary for our legitimate interests (in order to deliver our services).
When we communicate with you as an individual affiliated with our supplier or another third party we interact with.	Third Party Contact Information Communication Information	Performance of a contract with you Necessary for our legitimate interests (in order to deliver our services to our clients and Candidates).
When we communicate with you as an individual affiliated with our client, potential client about our services (for instance if you request assistance).	Client Contact Information Communication Information	Performance of a contract with you Necessary for our legitimate interests (for running our business and to provide our clients and Candidates with our services)
To manage our relationship with you as our client, supplier or third party.	Client Contact Information Third Party Contact Information Communication Information	Performance of a contract with you. Necessary to comply with a legal obligation. Necessary for our legitimate interests in ensuring that we maintain good relationships with our clients, suppliers and third parties.
To store your contact information for marketing purposes and sending marketing and other promotional communications to you as a Candidate.	Candidate Information Marketing Information Communication Information	With your consent or because the relevant individual has purchased similar services from us. In that case the legal basis for processing is necessary for our legitimate interests in promoting our services to Candidates.
To store your contact information for marketing purposes and sending marketing and other promotional communications to you as (potential) client or third party.	Client Contact Information Third party Contact Information Communication Information	Based on consent, unless a company has knowingly published an email address for this purpose or we send digital direct marketing to a company in a country outside the European Economic European Area (EEA) we comply with that country's regulations for sending unsolicited communications. In that case the legal basis for processing is necessary for our legitimate interests in promoting our services to clients or potential clients or supplier.

For each type of data listed above, definitions are included under clause 3.1.

Data Retention

5.1 Our current data retention policy is to delete or destroy (to the extent we are able to) the personal data we hold about you in accordance with the following:

Category of personal data	Length of retention
Records relevant for tax authorities	7 years from the end of the year to which the records relate
Candidate Data	The later of 7 years from placing a Candidate in a given role with our client, or in the case of contractors, 7 years from the end of the role with our client, or 7 years from the last date on which you have interacted with us.
Candidate Data where we have researched and located Candidate Data without direct interaction	1 year from date of data collection
Personal data processed in relation to a contract between you and us	7 years from either the end of the contract or the date you last used our services, being the length of time following a breach of contract in which you are entitled to make a legal claim.
Personal data held on marketing or business development records	3 years from the last date on which you have interacted with us.

5.2 For any category of personal data applies that personal data will not be kept longer than necessary for the purpose for which the data was collected.

5.5 If you wish to request that data we hold about you is amended or deleted, please refer to clause 8 below, which explains your privacy rights.

Sharing your information

6.1 We do not disclose any information you provide to any third parties other than as follows:

6.1.1 We will disclose Candidate Data to our clients or potential clients and our clients will be the data controller for that Candidate Data;

6.1.2 We may disclose information to our group companies;

6.1.4 in order to enforce any terms and conditions or agreements for our services that may apply;

6.1.5 If we are sub-contracting services to a third party we may provide information to that third party in order to provide the relevant services;

Security

7.1.1 protecting our servers with software firewalls;

7.1.2 locating our data processing storage facilities in secure locations;

7.1.4 when necessary, disposing of or deleting your data so it is done so securely;

7.1.5 regularly backing up all data we hold.

7.3 This notice and our procedures for handling personal data will be reviewed as necessary.

Your privacy rights
- The GDPR gives you the following rights in respect of personal data we hold about you:

The right to be informed	You have a right to know about our personal data protection and data processing activities, details of which are contained in this notice.
The right of access	You can make what is known as a Subject Access Request ("SAR") to request information about the personal data we hold about you (free of charge, save for reasonable expenses for repeat requests). If you wish to make a SAR please contact us as described below.
The right to correction	Please inform us if information we hold about you is incomplete or inaccurate in any way and we will update our records as soon as possible, but in any event within one month. We will take reasonable steps to communicate the change to any third parties to whom we have passed the same information.
The right to erasure (the 'right to be forgotten')	Please notify us if you no longer wish us to hold personal data about you (although in practice it is not possible to provide our services without holding your personal data and we may need to keep your data in some circumstances). Unless we have reasonable grounds to refuse the erasure, on receipt of such a request we will securely delete the personal data in question within one month. We will communicate the erasure to any third parties to whom we have passed the same information.
The right to restrict processing	You can request that we no longer process your personal data in certain ways, whilst not requiring us to delete the same data. However again, some of our Services will not be available if processing is restricted.
The right to data portability	You have right to receive copies of personal data we hold about you in a commonly used and easily storable format (please let us know a format which suits you). You may also request that we transfer your personal data directly to a third party (where technically possible).
The right to object	Unless we have overriding legitimate grounds for such processing, you may object to us using your personal data for direct marketing purposes (including profiling) or to the use of your personal data because of your specific situation (your special personal circumstances). Please notify your objection to us and we will gladly cease such processing immediately.
Rights with respect to automated decision-making and profiling	You have a right not to be subject to automated decision-making (including profiling).when those decisions have a legal (or similarly significant effect) on you. You are not entitled to this right when the automated processing is necessary for us to perform our obligations under a contract with you, it is permitted by law, or if you have given your explicit consent.
Right to withdraw consent	If we are relying on your consent as the basis on which we are processing your personal data, you have the right to withdraw your consent at any time. Even if you have not expressly given your consent to our processing, you also have the right to object (see above).

8.2 All SARs and other requests or notifications in respect of your above rights must be sent to us in writing to Harnham B.V., Herengracht 124, 128, 1015 BT, Amsterdam, dataprotection@harnham.com.

Data Breaches

9.2 If a breach is likely to result in a (high) risk to your data rights and freedoms, we will notify you and to the relevant supervisory authority as soon as possible.

Transferring your information outside Europe

10.4 If you contact us while you are outside the EEA, your information may be transferred outside the EEA in order to communicate with you.

10.5 If we transfer your information outside of the EEA and the third country or international organisation in question has not been deemed by the EU Commission to have adequate data protection laws, we are required to ensure that the transfer is subject to an equivalent level of protection as it would within the EEA, including by concluding Standard Contractual Clauses approved by the European Commission with the receiving party in such third country. We take the appropriate (supplemental) necessary safeguards to ensure that your data is kept securely and we will be responsible for ensuring your privacy rights continue to be protected as outlined in this notice and the applicable laws.

Notification of changes to the contents of this notice

Contact us

If at any time you would like to contact us with your views about our privacy practices, or with any enquiry or complaint relating to your personal information or how it is handled, you can do so via the following address: Harnham B.V., Herengracht 124, 128, 1015 BT, Amsterdam, dataprotection@harnham.com.

If we are unable to resolve any issues you may have or you would like to make a further complaint, you can contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via https://autoriteitpersoonsgegevens.nl/nl/zelf-doen/gebruik-uw-privacyrechten/klacht-melden-bij-de-ap

Harnham Inc

GENERAL PRIVACY POLICY

Last Updated on: March 22^nd, 2023

Harnham Corporation (together with its relevant subsidiaries, associates, and affiliated companies, “Harnham”, “Company”, “we”, “us” or “our”) respects your right to privacy. This General Privacy Policy (“Privacy Policy”) will provide you with information regarding how Harnham collects, uses, and discloses information about you, including the choices we offer with respect to that information.

It is the Company’s policy to comply with all applicable consumer privacy and data protection laws, including the choices we offer with respect to your personal information, as defined by applicable laws. This commitment reflects the value we place on earning and keeping the trust of our customers, business partners, and others who disclose their personal information with us.

This Privacy Policy applies to the Company’s website (the “Website”), located at www.Harnham.com. It also applies to personal information we may otherwise collect: (i) through our products and services; (ii) when you interact with us by means other than the Website, for example, in person or by telephone; (iii) from our distributors, suppliers, vendors, and other business partners (collectively “Business Partners”); and (iv) from your company or employer. We encourage you to read this Privacy Policy in full before using the Website or any other online service that posts a link to this Privacy Policy, opening our e-mails or otherwise submitting personal information to us (collectively, the “Service” or our “Services”). For certain Services, there may be additional notices about information practices and choices. Please read those additional privacy disclosures to understand how they apply to you.

By visiting or otherwise using the Service, you agree to this Privacy Policy.

To see and print our full Privacy Policy, click here. Our website has an accessibility tool integrated into the site and pages. More information on this service can be found at this link: www.harnham.com/accessibility. If you are visually impaired, and wish to view this Privacy Policy using a screen reader or setup your device to make this page more accessible, the National Federation for the Blind recommends the KNFB Reader App (https://nfb.org/programs-services/knfb-reader) and the UK Royal National Institute for the Blind also has information for setting up and optimizing Microsoft Windows and Apple Mac OS operating system tools: https://www.rnib.org.uk/living-with-sight-loss/assistive-aids-and-technology/tech-support-and-information/computers/computer-accessibility/.

I. Information We Collect

To the extent required by applicable law, whenever the Company collects personal information, we will:

provide timely and appropriate notice to you about our data practices through this Privacy Policy;
collect your personal information only for specified and legitimate purposes. The information we collect will be relevant, adequate and not excessive for the purposes for which it is collected;
process your personal information in a manner consistent with the purposes for which it was originally collected or to which you have subsequently consented; and
not use your personal information for direct marketing purposes without giving you an opportunity to opt-out.

Harnham, and/or its Service Providers (defined below), may collect information that you provide directly to Harnham and/or its Service Providers via the Service. For example, Harnham collects information when you use or register for the Service, apply for a position for which we are recruiting on behalf of a Client (“Client(s)”) subscribe to notifications, contact us via the Contact Us form, participate in promotional activities, or communicate or transact through the Service. Harnham may also collect information about you from our Clients or your current or former employers to enable us to provide services to you or Harnham’s Clients. In addition, when you interact with Third-Party Services (defined below), you may be able to provide information to those third parties. For more information on Third-Party Services’ data collection and practices please refer to the Third-Party Content, Third-Party Services, Social Features, Advertising and Analytics section. For more information on Service Provider data collection practices please refer to the Information We Disclose to Third Parties section.

Information Harnham, its Service Providers and/or Third-Party Services may collect includes personal information you provide us, which may include: (i) contact information, such as your name, company name, job title, address, e-mail address, and phone number; (ii) information about your education and work history (iii) additional information about how you use our products or services; (iv) comments, questions, requests, and other communications between you and Harnham; (v) information about your personal characteristics and traits from employment references; and (vi) information about your preferences, such as your preferred methods of communication and the types of products and services in which you are interested.

II. Information Collected Automatically

Harnham, its Service Providers, and/or Third-Party Services may also automatically collect certain information about you when you access or use the Service, including as follows:

Device and Browser Information:

The Company may collect technical information about your device, such as device type, browser type, IP address, operating system, and device identifier. The Company collects this information automatically from your device and web browser through cookies and similar technologies.

Information About How You Interact with Us:

The Company may collect technical data about your usage of the Website and how you interact with our digital advertisements and promotions, such as content viewed or downloaded, features used, links clicked, Company promotional emails opened, and dates and times of interactions. The Company collects this information using cookies and similar technologies.

Location Information:

The Company may collect location information from your device and imprecise location information derived from, for example, your IP address or postal code.

For more information on Third-Party Services’ data collection and practices please refer to the Third-Party Content, Third-Party Services, Social Features, Advertising and Analytics section. For more information on Service Provider data collection practices please refer to the Information We Disclose with Third Parties section. For information on choices some of these third parties may offer you regarding automated data collection, please refer to the Choices: Tracking and Communications section.

The methods we use to automatically collect your information (“Tracking Technologies”) include:

Cookies
A cookie is a small text file that is stored on a user’s device, which may be session ID cookies or tracking cookies. Session cookies make it easier for you to navigate the Service and expire when you close your browser. Tracking cookies remain longer and help in understanding how you use the Service and enhance your user experience. Cookies may remain on your hard drive for an extended period. If you use your browser’s method of blocking or removing cookies, some but not all types of cookies may be deleted and/or blocked, and as a result, some features and functionalities of the Service may not work. For information on how to do this on the browser of your mobile phone or tablet you will need to refer to your device manual. Please note that you will not be able to opt out of receiving certain cookies that are strictly necessary for the delivery of a service requested by you.

The Website uses “session cookies.” A session cookie does not identify you personally and expires after you close your browser. The Website also uses “persistent cookies.” These cookies do not expire when you close your browser. Persistent cookies stay on your computer until you delete them or they expire. By assigning your computer a unique identifier, we are able to create a database of your previous choices and preferences which can be provided by us automatically, saving you time and effort on future visits.

Web Beacons (“Tracking Pixels”)

Web beacons are small graphic images, also known as “Internet tags” or “clear gifs,” embedded in web pages and e-mail messages. Web beacons may be used, without limitation, to count the number of visitors to the Service, to monitor how users navigate the Service, and to count content views.

Embedded Scripts

An embedded script is programming code designed to collect information about your interactions with the Service. It is temporarily downloaded onto your computer from Harnham’s web server, or from a third party with which Harnham works and is active only while you are connected to the Service and deleted or deactivated thereafter.

Device Recognition Technologies

Technologies, including application of statistical probability to data sets, as well as linking a common unique identifier to different device use (e.g., Facebook ID), which attempt to recognize or make assumptions about users and devices (e.g., that a user of multiple devices is the same user or household) (“Cross-device Data”).

Device and Activity Monitoring and Session Replay

Technologies that monitor, and may record, certain of your interactions with the Service, and/or collect and analyze information from your device, such as, without limitation, your operating system, plug-ins, system fonts, and other data, for purposes such as identification, security, fraud prevention, troubleshooting, tracking and/or improving the Services and customizing or optimizing your experience on the Services. This may also include technologies that monitor and record usage sessions to help us better understand, track, and improve the usage of our Services.

Information from Clients, Business Partners, and Other Third Parties

The Company collects personal information through our Clients and Business Partners. This information may include contact information, such as name, company name, job title, address, e-mail address, and phone number. The Company may also obtain personal information from other third-party sources, including employment references and publicly and commercially available sources. We may combine the information we receive from our Clients, Business Partners, and other third-party sources with information that we collect from you or your device, as described above.

Some information about your use of the Service and certain other online services may be collected using Tracking Technologies across time and services and used by Harnham and third parties for purposes such as to associate different devices you use and deliver relevant ads and/or other content to you on the Service and certain their online services. Please refer to the Choices: Tracking and Communications section for more information regarding certain choices regarding these activities.

You have choices about the personal information you provide the Company. You may choose not to provide information that we request, but if you do so, we may not be able to provide you a relevant product or service or a particular feature of the Website.

III. Information We Collect from Other Sources

We may also obtain information about you from other sources, including Service Providers and Third-Party Services. We are not responsible nor liable for the accuracy of the information provided to us by third parties or for third-party policies or practices.

IV. How We Use Your Personal Information

Harnham may use your personal information for any purpose not inconsistent with our statements under this Privacy Policy, or otherwise made by us in writing at the point of collection, and not prohibited by applicable law, including without limitation, to:

DEVELOP AND MANAGE OUR RELATIONSHIPS WITH YOU AND OUR CLIENTS

This may include: (i) delivering services or carrying out transactions that you or our Clients have requested; (ii) providing information about the Company’s products, services, transactions, and advertisements, that may be of interest to you; (iii) providing you and our Clients a more consistent experience in interacting with the Company, including by learning more about you and how you use and interact with the Website, products, and services; and (iv) planning, managing, and performing under our contractual relationships with our Clients.

COMMUNICATE WITH YOU OR our CLIENTS

This may include: (i) informing you of career opportunities, the Company’s products, services, and promotional activities that may be of interest to you or our Clients; (ii) providing information about relevant positions, Company products, services, and transactions, including, for example, technical data, information regarding your application status, interviews, and other details relevant to the recruitment process, or information about product or service improvements; (iii) responding to questions or inquiries that you make, including customer service requests; and (iv) inviting you to participate in, or informing you of the results of, customer satisfaction or market research surveys.

PROVIDE AND IMPROVE OUR WEBSITE, PRODUCTS, AND SERVICES

This may include: (i) customizing them to your preferences or interests, making them more compatible with your technology, or otherwise making them easier to use; (ii) maintaining the security of and otherwise protecting our Services; and (iii) developing new Company Websites, products, and services.

ADDRESS LEGAL ISSUES

This may include: (i) complying with our obligations to retain certain business records for minimum retention periods; (ii) establishing, exercising, or defending legal claims; (iii) complying with laws, regulations, court orders, or other legal process; (iv) detecting, preventing, and responding to fraud, intellectual property infringement, violation of our contracts or agreements, violations of law, or other misuse of the Website, products or services; and (v) protecting the Company’s rights or property, or yours or others’ health, safety, welfare, rights, or property.

To the extent permitted by law, Company may anonymize or aggregate any of the information we collect and use it for any purpose, including for research and product-development purposes. We will do our best to ensure the information will not identify you individually, but we do not make assurances that such information is not capable of re-identification.

V. Information We DISCLOSE TO Third Parties

Generally, we may disclose information about you for any purposes not inconsistent with our statements under this Privacy Policy, or otherwise made by us in writing at the point of collection, and not prohibited by applicable law, including, without limitation, as described below.

We may disclose your personal information to other Company entities and our agents, vendors, consultants, and other service providers (“Service Providers”). The Company may also disclose your personal information to Service Providers we hire to perform support services for us and to help us use your personal information as described above.
The Company may disclose your personal information with third parties who partner with us to provide products and services to our Clients, such as background check and drug and alcohol screening vendors.
The Company may disclose your personal information to other third parties when we have a good faith belief that disclosure is necessary: (i) to comply with a law, regulation, court order, or other legal process; (ii) to detect, prevent, and respond to fraud, intellectual property infringement, violation of our contracts or agreements, violation of law, or other misuse of the Website, products or Services; (iii) to protect the Company’s rights or property or yours or others’ health, safety, welfare, rights, or property; (iv) if the Company believes your actions are inconsistent with our user agreements, applicable terms or policies; or (v) under similar circumstances. If such an event occurs, we will take appropriate steps to protect your personal information.
The Company may disclose your personal information to send you marketing communications, however, Harnham will not disclose your personal information to third parties for their own direct marketing purposes except in connection with corporate transactions, as set forth in the next bullet, absent your consent (which may be by means of third-party interaction described in the last bullet point).
The Company may disclose your personal information to third parties in connection with the sale, purchase, merger, reorganization, liquidation, or dissolution of the Company, or under similar circumstances. If such an event occurs, we will take appropriate steps to protect your personal information.
The Company may disclose your information with your permission or at your request. As more fully described in the Third-Party Content, Third-Party Services, Social Features, Advertising and Analytics section, your activities on the Service may, by their nature, result in the sharing of your information with third parties and by engaging in these activities you consent to that and further sharing and disclosure to third parties. Such third-party data receipt and collection is subject to the privacy and business practices of that third party, not Harnham.

The Company may disclose anonymized or aggregated information internally and to third parties for any purpose, to the extent permitted by law. We will do our best to ensure the information will not identify you individually, but we do not make assurances that such information is not capable of re-identification.

VI. Third-Party content, Third-Party Services, Social Features, Advertising and Analytics

The Services may contain links to websites or mobile apps that are not operated by the Company and plugins from social media platforms and other third parties. Some examples of links to a third-party website include those websites operated by our Business Partners, suppliers, advertisers, sponsors, licensors, and other third parties. Examples of social media plugins are the option to “Share” the Website through your email, Twitter, LinkedIn, Tiktok, and Instagram (“Social Features”). The inclusion of these Social Features on the Service does not imply any endorsement of the activities or content of the related websites, apps, or social media platforms, nor any association with their operators. To learn about the information collected by these third-party websites, apps, and plugins, please visit their privacy policies. We encourage you to review the privacy policies for the websites, apps, and social media platforms you visit before using them or providing personal information.

If you use Social Features, and potentially other Third-Party Services, information you post or provide access to may be publicly displayed on the Service or by the Third-Party Service that you use. Similarly, if you post information on a Third-Party Service that references Harnham (e.g., by using a hashtag associated with Harnham in a tweet or status update), your post may be used on or in connection with the Service or otherwise by Harnham. Also, both Harnham and the third party may have access to certain information about you and your use of the Service and any Third-Party Service.

Harnham may engage and work with Service Providers and other third parties to serve advertisements on the Service and/or on other online services. Some of these ads may be tailored to your interest based on your browsing of the Service and elsewhere on the Internet, which may include use of precise location and/or Cross-device Data, sometimes referred to as “interest-based advertising” and “online behavioral advertising” (“Interest-based Advertising”), which may include sending you an ad on another online service after you have left the Service (i.e., “retargeting”).

Harnham may use Google Analytics or other Service Providers for analytics services. These analytics services may use cookies and other Tracking Technologies to help Harnham analyze Service users and how they use the Service. Information generated by these analytics services (e.g., your IP address and other usage Information) may be transmitted to and stored by these Service Providers on servers in the U.S. (or elsewhere) and these Service Providers may use this information for purposes such as evaluating your use of the Service, compiling statistic reports on the Service’s activity, and providing other services relating to Service activity and other Internet usage.

Harnham is not responsible for, and makes no representations regarding, the policies or business practices of any third parties, including, without limitation, analytics Service Providers and Third-Party Services associated with the Service, and encourages you to familiarize yourself with and consult their privacy policies and terms of use. Please refer to the Choices: Tracking and Communications Options section for more on certain choices offered by some third parties regarding their data collection and use, including regarding Interest-based Advertising and analytics.

VII. Choices: Tracking and Communications Options

A. Tracking Technologies Generally

Regular cookies may generally be disabled or removed by tools available as part of most commercial browsers, and in some instances blocked in the future by selecting certain settings. Browsers offer different functionalities and options, so you may need to set them separately. Please be aware that if you disable or remove these technologies, some parts of the Service may not work and that when you revisit the Service your ability to limit browser-based Tracking Technologies is subject to your browser settings and limitations.

Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no consensus among industry participants as to what “Do Not Track” means in this context. Harnham currently does not alter its practices when Harnham receives a “Do Not Track” signal from a visitor’s browser. To learn more about “Do Not Track,” you can visit https://www.allaboutdnt.com, but Harnham is not responsible for the completeness or accuracy of this third-party information.

B. Analytics and Advertising Tracking Technologies

As described above, we use your personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. You may choose whether to receive some Interest-based Advertising by submitting opt-outs. Some of the advertisers and Service Providers that perform advertising-related services for us and third parties may participate in the Digital Advertising Alliance’s (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. To learn more about how you can exercise certain choices regarding Interest-based Advertising, including use of Cross-device Data for serving ads, visit https://www.aboutads.info/choices/. Some of these companies may also be members of the Network Advertising Initiative’s (“NAI”). To learn more about the NAI and your opt-out options for their members, please refer to their educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work/ and https://www.networkadvertising.org/choices/. Please be aware that even if you are able to opt out of certain kinds of Interest-based Advertising, you may continue to receive other types of ads. Opting out only means that those selected members should no longer deliver certain Interest-based Advertising to you but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). Also, if your browsers are configured to reject cookies when you visit these opt-out webpages, or you subsequently erase your cookies, use a different device or web browser or use a non-browser-based method of access (e.g., mobile app), your NAI / DAA browser-based opt-out may not, or may no longer, be effective. Harnham supports the ad industry’s Self-regulatory Principles for Online Behavioral Advertising and expects that ad networks Harnham directly engages to serve you Interest-based Advertising will do so as well, though Harnham cannot guarantee their compliance.

We may also use Google Ad Services. To learn more about the data Google collects and how your data is used by it and to opt out of certain Google browser Interest-Based Advertising, please visit here . You may exercise choices regarding the use of cookies from Google Analytics by going to https://tools.google.com/dlpage/gaoptout or downloading the Google Analytics Opt-out Browser Add-on.

Harnham is not responsible for effectiveness of, or compliance with, any third parties’ opt-out options or programs or the accuracy of their statements regarding their programs.

C. Communications

You can opt out of receiving certain promotional communications (e-mails) from Harnham at any time by following the instructions provided in e-mails to click on the unsubscribe link. Please note that your opt-out is limited to the e-mail address used and will not affect subsequent subscriptions. If you opt-out of only certain communications, other subscription communications may continue. Even if you opt out of receiving promotional communications, Harnham may, subject to applicable law, continue to send you non-promotional communications, such as those about positions you have applied to, transactions, servicing, or Company’s ongoing business relations.

VIII. Security of Your Personal Information

Harnham maintains reasonable safeguards to protect the confidentiality, security, and integrity of your personal information. Although we use security measures to help protect your personal information against unauthorized disclosure, misuse, or alteration, as is the case with all computer networks linked to the Internet, we cannot guarantee the security of information provided over the Internet and will not be responsible for breaches of security beyond our reasonable control.

IX. Retention of Your Personal Information

How long we keep your personal information will vary and will depend on the purpose and use of the information collected. There are legal requirements that we keep some types of data for specific periods. Otherwise, we will retain it for no longer than is necessary for the purposes for which the data was collected.

X. Children

The Website is not intended for children under 13 years of age. If we obtain knowledge that we have collected information regarding children under 13, we will remove such data to the extent required by applicable law.

XI. Changes to This Privacy Policy

We reserve the right to change this Privacy Policy prospectively effective upon the posting of the revised Privacy Policy. Changes to this Privacy Policy will be posted on this website, along with information on any material changes. The Company reserves the right to update or modify this Privacy Policy at any time and without prior notice. Any modifications will apply only to the personal information we collect after posting the updated Privacy Policy. To the extent any provision of this Privacy Policy is found by a competent tribunal to be invalid or unenforceable, such provision shall be severed to the extent necessary for the remainder to be valid and enforceable.

XII. International transfer

Harnham is based in the U.S. and the information Harnham and its Service Providers collect is governed by U.S. law. If you are accessing the Service from outside of the U.S., please be aware that information collected through the Service may be transferred to, processed, stored, and used in the U.S. Data protection laws in the U.S. may be different from those of your country of residence. Under such circumstances, we comply with all applicable global privacy and data protection requirements. All cross-border transfers of your information will comply with the local privacy laws of the jurisdiction from which we are transferring the data or as otherwise applicable, as well as in compliance with the terms of this Privacy Policy. Furthermore, we will provide appropriate safeguards for cross-border transfers in accordance with our legal obligations under applicable data protection laws.

XIII. Questions About This Privacy Policy

If you have any questions about this Privacy Policy or our use of your personal information, please contact:

Harnham, Inc.
99 Water St 33rd Floor

New York, NY 10038, United States

dataprotection@harnham.com

SITE AND COOKIE POLICY

REGULATIONS FOR BELGIUM

Prize Draw T&Cs

SITE AND COOKIE POLICY

SITE POLICY

Access to and use of the Harnham website is subject to the following terms and conditions.

Copyright

Copyright © Harnham 2021. All rights reserved. All copy and other intellectual property rights in all text, images, sounds, software and other materials on this site are owned by Harnham, or are included with permission of the relevant owner.

You are permitted to browse this site and to reproduce extracts by way of printing, downloading to a hard disk and by distribution to other people but in all cases, for non-commercial, informational and personal purposes only. No reproduction of any part of this site may be sold or distributed for commercial gain, nor shall it be modified or incorporated in any other work, publication or site. No other licence or right is granted.

Trademarks

All trademarks displayed on this site are either owned or used under licence by Harnham.

Contents

The information on this site has been included in good faith but is for general informational purposes only. It should not be relied on for any specific purpose and no representation or warranty is given as regards its accuracy, completeness or fitness for any particular purpose. Save to the extent that such limitation is not permitted under English Law Harnham, nor any of it's employees shall be liable for any loss, damage or expense arising in contract, tort or otherwise out of any reliance on information contained in this site, access to or use of or inability to use this site or any site linked to it including, without limitation, any loss of profit, indirect, incidental or consequential loss.

Use

Your information and activity on this site must not:

be false, inaccurate or misleading
be in breach of any applicable laws, regulations, licences, or third party rights
interfere in any way with the proper working of this site, and in particular you must not circumvent security, tamper with, hack into or disrupt the operation of the site or surreptitiously intercept, access without authority or expropriate any system, date or personal information as defined in the Data Protection Act 1998.

This site is intended normally to be available 24 hours a day 7 days a week.
You agree to fully reimburse Harnham in respect of all losses, costs, actions, claims, and liabilities incurred by Harnham as a result of any breach or non-observance by you of these terms or any data submitted by you to us.

Harnham will make all reasonable attempts to exclude viruses (and similar destructive devices) from the site but cannot guarantee the exclusion of viruses (and similar destructive devices), and you should take appropriate steps in respect of this risk.

Linked sites

At various points throughout the site, you may be offered automatic links to other internet sites relevant to a particular aspect of this site. This does not indicate that Harnham are necessarily associated with any of these other sites or their owners. While it is the intention of Harnham that you should find these other sites of interest, neither Harnham nor their employees shall have any responsibility or liability of any nature for these other sites or information contained in them.

These terms shall be governed by and construed in accordance with English Law and each party to these terms submits to the exclusive jurisdiction of the English Courts.

Company Registration Number: 05723485.

Registered Address: 3rd Floor, Melbury House, 51 Wimbledon Hill Road, Wimbledon, SW19 7QW.

Registered by Companies House, Cardiff.

COOKIE POLICY

Document title: Cookie policy (PECR, GDPR and DPA 2018) (UK).

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.

We use the following cookies:

Strictly necessary cookies

These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.

Analytical or performance cookies

These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

Functionality cookies

These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).

Targeting cookies

These cookies record your visit to our website, the pages you have visited, and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. [We may also share this information with third parties for this purpose.]

You can find more information about the individual cookies we use and the purposes for which we use them in the table below:

Strictly necessary

Performance

Targeting

Functionality

Cookies consent ID: d2847352-f683-46c3-ba3a-7c6429199125

STRICTLY NECESSARY

Name	Provider / Domain	Expiration	Description
_GRECAPTCHA	Google LLC .google.com	6 months	Google reCAPTCHA sets a necessary cookie (_GRECAPTCHA) when executed for the purpose of providing its risk analysis.
.AspNetCore.Antiforgery.6YYsGt-Vbxo	www.harnham.com	Session	This cookie is generated by the application server and used to present malicious cross site request forgery (known as XSRF and CSRF)
JSESSIONID	Oracle Corporation .www.linkedin.com	Session	General purpose platform session cookie, used by sites written in JSP. Usually used to maintain an anonymous user session by the server.
Copernicus	www.sitedomain.com	Session	This cookie is used for system authentication
COP-CookieBanner	www.sitedomain.com	27 years	This cookie is used to remember users preferences

PERFORMANCE

Name	Provider / Domain	Expiration	Description
_pk_id.7.bf68	www.harnham.com	1 year	This cookie name is associated with the Piwik open source web analytics platform. It is used to help website owners track visitor behaviour and measure site performance. It is a pattern type cookie, where the prefix _pk_id is followed by a short series of numbers and letters, which is believed to be a reference code for the domain setting the cookie.
_pk_ses.7.bf68	www.harnham.com	30 minutes	This cookie name is associated with the Piwik open source web analytics platform. It is used to help website owners track visitor behaviour and measure site performance. It is a pattern type cookie, where the prefix _pk_ses is followed by a short series of numbers and letters, which is believed to be a reference code for the domain setting the cookie.
_ga	Google LLC .harnham.com	2 years	This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports.
_gid	Google LLC .harnham.com	1 day	This cookie is set by Google Analytics. It stores and update a unique value for each page visited and is used to count and track pageviews.
_gat_UA-40185538-2	.harnham.com	1 minute	This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It is a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.
_hjTLDTest	Hotjar Ltd .harnham.com	Session	When the Hotjar script executes we try to determine the most generic cookie path we should use, instead of the page hostname. This is done so that cookies can be shared across subdomains (where applicable). To determine this, we try to store the _hjTLDTest cookie for different URL substring alternatives until it fails. After this check, the cookie is removed.
_hjid	Hotjar Ltd .harnham.com	1 year	Hotjar cookie. This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the random user ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.
_hjFirstSeen	Hotjar Ltd .harnham.com	30 minutes	The cookie is set so Hotjar can track the beginning of the user's journey for a total session count. It does not contain any identifiable information.
_hjAbsoluteSessionInProgress	Hotjar Ltd .harnham.com	30 minutes	The cookie is set so Hotjar can track the beginning of the user's journey for a total session count. It does not contain any identifiable information.
COP-Personal	www.harnham.com	1 year	This cookie is used to remember a user's previously viewed content which is then used to tailor the users ongoing experience
_hjIncludedInPageviewSample	Hotjar Ltd www.harnham.com	2 minutes	This cookie is set to let Hotjar know whether that visitor is included in the data sampling defined by your site's pageview limit.
_pk_id.30.bf68	www.harnham.com	1 year	This cookie name is associated with the Piwik open source web analytics platform. It is used to help website owners track visitor behaviour and measure site performance. It is a pattern type cookie, where the prefix _pk_id is followed by a short series of numbers and letters, which is believed to be a reference code for the domain setting the cookie.
_pk_ses.30.bf68	www.harnham.com	30 minutes	This cookie name is associated with the Piwik open source web analytics platform. It is used to help website owners track visitor behaviour and measure site performance. It is a pattern type cookie, where the prefix _pk_ses is followed by a short series of numbers and letters, which is believed to be a reference code for the domain setting the cookie.
_gat_UA-66507939-2	.harnham.com	1 minute	This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It is a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.
COP_Vacancies	www.harnham.com	Session	This cookie is used to remember a user's previously viewed content which is then used to tailor the users ongoing experience
COP-Personal	www.sitedomain.com	1 year	This cookie is used to remember a user's previously viewed content which is then used to tailor the users ongoing experience
COP-Admin-Site	www.sitedomain.com	6 months	This cookie is used for system authentication
shortlistvacs	www.sitedomain.com	1 year	This cookie is used to remember a user's previously viewed content which is then used to tailor the users ongoing experience
souecetracking-utmcampaign	www.sitedomain.com	1 month 15 days	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-isset	www.sitedomain.com	1 month 15 days	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-latest-campaign	www.sitedomain.com	3 months	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-latest-isset	www.sitedomain.com	3 months	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-latest-medium	www.sitedomain.com	3 months	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-latest-referrer	www.sitedomain.com	3 months	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-latest-setms	www.sitedomain.com	3 months	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-latest-utmsource	www.sitedomain.com	3 months	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-latest-visitdatetime	www.sitedomain.com	3 months	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-referrer	www.sitedomain.com	1 month 15 days	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-setms	www.sitedomain.com	1 month 15 days	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-utmmedium	www.sitedomain.com	1 month 15 days	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-utmsource	www.sitedomain.com	1 month 15 days	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information
sourcetracking-visitdatetime	www.sitedomain.com	1 month 15 days	This cookie is used to remember a user's entry point to the site to help administrators understand campaign and referral information

TARGETING

Name	Provider / Domain	Expiration	Description
NID	Google LLC .google.com	6 months 2 days	This cookie is set by DoubleClick (which is owned by Google) to help build a profile of your interests and show you relevant ads on other sites.
_fbp	Meta Platform Inc. .harnham.com	3 months	Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers
YSC	Google LLC .youtube.com	Session	This cookie is set by YouTube to track views of embedded videos.
VISITOR_INFO1_LIVE	Google LLC .youtube.com	6 months	This cookie is set by Youtube to keep track of user preferences for Youtube videos embedded in sites;it can also determine whether the website visitor is using the new or old version of the Youtube interface.
IDE	Google LLC .doubleclick.net	1 year	This cookie is set by Doubleclick and carries out information about how the end user uses the website and any advertising that the end user may have seen before visiting the said website.
lidc	Microsoft Corporation .linkedin.com	1 day	This is a Microsoft MSN 1st party cookie that ensures the proper functioning of this website.
bcookie	Microsoft Corporation .linkedin.com	2 years	This is a Microsoft MSN 1st party cookie for sharing the content of the website via social media.
bscookie	LinkedIn Corporation .www.linkedin.com	2 years	Used by the social networking service, LinkedIn, for tracking the use of embedded services.
li_gc	LinkedIn Corporation .linkedin.com	1 year 11 months	Used to store guest consent to the use of cookies for non-essential purposes
demdex	Adobe Inc. .demdex.net	6 months	This cookie helps Adobe Audience Manger perform basic functions such as visitor identification, ID synchronization, segmentation, modeling, reporting, etc.
AMCVS_14215E3D5995C57C0A495C55%40AdobeOrg	.linkedin.com	Session	This is a pattern type cookie name associated with Adobe Marketing Cloud. It stores a unique visitor identifier, and uses an organisation identifier.
AMCV_14215E3D5995C57C0A495C55%40AdobeOrg	.linkedin.com	6 months	This is a pattern type cookie name associated with Adobe Marketing Cloud. It stores a unique visitor identifier, and uses an organisation identifier to allow a company to track users across their domains and services.
dextp	Adobe Inc. .demdex.net	6 months	This cookie is set by Adobe Audience manager to record the last time it made a data synchronization call.
aam_uuid	Adobe Inc. .linkedin.com	1 month	Adobe Audience Manager - data management platform uses these cookies to assign a unique ID when users visits a website.

FUNCTIONALITY

Name	Provider / Domain	Expiration	Description
lang	.linkedin.com	Session	There are many different types of cookies associated with this name, and a more detailed look at how it is used on a particular website is generally recommended. However, in most cases it will likely be used to store language preferences, potentially to serve up content in the stored language.

[Please note that the following third parties may also use cookies, over which we have no control. These named third parties may include, for example, advertising networks and providers of external services like web traffic analysis services. These third party cookies are likely to be analytical cookies or performance cookies or targeting cookies:

DoubleClick/Google

· This cookie is set by DoubleClick (which is owned by Google) to help build a profile of your interests and show you relevant ads on other sites.

· This cookie carries out information about how the end-user uses the website and any advertising that the end-user may have seen before visiting the said website.

Facebook

· Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers

· Contains browser and user unique ID combination, used for targeted advertising.

YouTube

· This cookie is set by YouTube to track views of embedded videos.

· This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to.

LinkedIn/Microsoft

·       This is a Microsoft MSN 1st party cookie for sharing the content of the website via social media.

·       Used by the social networking service, LinkedIn, for tracking the use of embedded services.

·       Used to ensure there is correct SameSite attribute for all cookies in that browser

·       Used to store consent of guests regarding the use of cookies for non-essential purposes

·       This is a Microsoft MSN 1st party cookie that ensures the proper functioning of this website.

·       This cookie is set to let Hotjar know whether that visitor is included in the data sampling defined by your site's pageview limit.

·       Used to store language preferences, potentially to serve up content in the stored language.

To deactivate the use of third-party advertising cookies, you may visit the consumer page to manage the use of these types of cookies at any time via the Cookie control box in the bottom left-hand corner of your screen or window.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website.

REGULATIONS FOR BELGIUM

FLANDERS: rights and obligations of persons seeking employment and of the bureau

Tekst met de rechten en de verplichtingen van de werknemer en van het bureau voor private arbeidsbemiddeling

1. Het bureau mag onder geen beding enige vergoeding van de werknemer vragen of ontvangen.

2. Het bureau moet alle betrokkenen op een objectieve, respectvolle en niet-discriminerende wijze behandelen en mag geen personeelsadvertenties opstellen of publiceren die aanleiding kunnen geven tot discriminatie.

3. Het bureau moet de persoonlijke levenssfeer van de werknemers eerbiedigen en mag de gegevens die tot de persoonlijke levenssfeer behoren, alleen vragen en gebruiken met toestemming en in het belang van de werknemer in het kader van zijn professionele inschakeling en met inachtneming van de regelgeving betreffende de verwerking van persoonsgegevens en het vrij verkeer van die gegevens.

4. Het bureau moet inzage verlenen aan de opdrachtgever en de werknemers betreffende de over hen opgeslagen gegevens en moet hen, op hun verzoek, na beëindiging van de opdracht, een afschrift van hun dossier bezorgen.

5. Het bureau mag informatie over de opdrachtgevende werkgever en de werknemers enkel opvragen en gebruiken in het kader van de bemiddelingsactiviteiten.

6. Het bureau dient de opdrachtgevende werkgever en de werknemers juiste, tijdige en volledige informatie te verstrekken over de bemiddelingsactiviteiten en over de aard van de tewerkstelling.

7. Persoonlijkheidsonderzoeken en psychologische tests kunnen enkel plaatsvinden door of onder de verantwoordelijkheid van een psycholoog.

8. Het uitzendbureau mag geen bemiddelingsactiviteiten uitoefenen voor vacatures waar geen reëel jobaanbod tegenover staat.

9. Het bureau mag geen activiteiten uitoefenen die leiden tot een tewerkstelling die strijdig is met de openbare orde of waarvan het bureau duidelijk kan vaststellen dat ze een inbreuk inhouden op de sociale of fiscale wetgeving.

10. Het uitzendbureau mag geen bemiddelingsactiviteiten uitoefenen voor zover deze verband houden met een staking, uitsluiting of een schorsing van een arbeidsovereenkomst, ten gevolge van het slechte weer of bij gebrek aan werk wegens economische oorzaken.

11. Het bureau mag voor werknemers van vreemde nationaliteit bemiddelen als de reglementering inzake de tewerkstelling van vreemde arbeidskrachten wordt nageleefd.

12. Het bureau mag niet in de plaats treden van de opdrachtgevende werkgever bij de aanwervingsof ontslagbeslissing of de onderhandelingen daarover.

13. Het uitzendbureau mag geen uitzendactiviteiten verrichten door middel van een exclusiviteitsclausule.

14.1. Bemiddelingsbureaus van schouwspelartiesten en van betaalde sportbeoefenaars mogen slechts erelonen, commissielonen, bijdragen, toelatings- of inschrijvingsgelden, hierna commissielonen te noemen, ontvangen als aan de volgende voorwaarden is voldaan :

1° het commissieloon wordt vooraf vastgelegd in een schriftelijke overeenkomst tussen het bureau en de opdrachtgever. Als de private arbeidsbemiddeling wordt aangeboden samen met andere diensten, wordt het commissieloon voor de verschillende diensten afzonderlijk vastgelegd;

2° de werknemer stemt uitdrukkelijk en voorafgaand in met het commissieloon;

3° de partijen beschikken ieder over een origineel exemplaar van deze overeenkomst.

14.2. Het commissieloon voor de bemiddeling van de schouwspelartiest wordt berekend op de vergoeding die de schouwspelartiest zal ontvangen voor zijn prestatie.

Het commissieloon voor de bemiddeling van de betaalde sportbeoefenaar wordt berekend op het voorziene totale brutojaarinkomen van de betaalde sportbeoefenaar, en dit op de totale duur van het contract.

15. Elk uitzendbureau moet over een erkenning beschikken.

16. Het uitzendbureau moet bij zijn externe communicatie, dit wil zeggen : in zijn overeenkomsten, offertes, facturen, briefwisseling, emailverkeer, personeelsadvertenties die worden gepubliceerd via geschreven of visuele media en op zijn websites, melding maken van zijn erkenningsnummer.

17. Het bureau moet deze tekst overhandigen aan iedereen die een beroep doet op private arbeidsbemiddeling of moet deze tekst in extenso aanplakken in de voor het publiek toegankelijke lokalen van het bureau, op de plaats waar deze tekst het best kan worden gelezen.

18. Bureaus die als activiteiten hebben het bekendmaken van werkaanbiedingen via de geschreven, auditieve of visuele media (tv, kranten, internet, radio, enzovoort), moeten deze tekst in extenso kenbaar maken via het betrokken medium ofwel uitdrukkelijk de locatie (bijv. internetadres) vermelden waar deze tekst wordt ter beschikking wordt gesteld. Deze tekst moet op eenvoudig verzoek gratis ter beschikking worden gesteld door het bureau.

19. Het bureau moet de gedragscode onderschrijven en naleven. De gedragscode maakt integraal deel uit van deze tekst.

20. Klachten wegens vermeende inbreuk op de arbeidsbemiddelingwetgeving kunnen worden ingediend bij :

Departement Werk en Sociale Economie
Dienst Migratie en Arbeidsbemiddelingbureaus
Ellipsgebouw
Koning Albert II-laan 35, bus 21
1030 Brussel
telefoon : 02-553 44 73
fax :02-553 44 22
e-mail : arbeidsbemiddeling@vlaanderen.be

Om ontvankelijk te zijn, moet de klacht gemotiveerd zijn en op duidelijke wijze omschrijven welke de vermeende inbreuk is. De anonimiteit van de klager wordt gewaarborgd.

21. Klachten kunnen ook worden ingediend bij :

Departement Werk en Sociale Economie
Afdeling Inspectie
Ellipsgebouw
Koning Albert II-laan 35, bus 20
1030 Brussel
telefoon : 02 553 08 88
fax : 02-553 42 71
e-mail : werkgelegenheid.inspectie@vlaanderen.be

22. De volgende dienst is belast met het toezicht op en de handhaving van het arbeidsbemiddelingsdecreet en zijn uitvoeringsbesluiten :

Departement Werk en Sociale Economie
Afdeling Inspectie
Ellipsgebouw
Koning Albert II-laan 35, bus 20
1030 Brussel
telefoon : 02-553 08 88
fax : 02-553 42 71
e-mail : werkgelegenheid.inspectie@vlaanderen.be

Prize Draw T&Cs

One winner will be chosen at random, using the randompicker.com tool by Harnham Search and Selection Limited (“Harnham”).

The closing date for entries is 18:00 GMT on 14th April 2023 (“Closing Date”).

The winner will receive a technology gadget bundle from a choice of four bundles. If the winner is from the UK, they will receive a £1,000 bundle. If the winner is from the USA, they will receive a $1,000 bundle. If the entrant is from mainland Europe, they will receive a €1,000 bundle

To enter the prize draw, entrants must complete the Harnham 2023 Salary Survey and apply to enter the prize draw at the end of the survey by entering their email address. Harnham accepts no responsibility for delayed or miss-transmitted entries.

By entering into the prize draw, all entrants will be deemed to have accepted and be bound by these terms and conditions.

Entry is free and is open to people aged 18 years old or over. Only one entry may be made per person. Proof of identity and age may be required. Use of a false name or address will result in disqualification.

All employees of Harnham, or its subsidiaries and associated companies, their immediate families and anyone involved in the promotion of the prize draw, are excluded from entry.

The prize shall be awarded at Harnham’s discretion and if it considers any entrant has acted inappropriately or dishonestly in entering into the prize draw, it reserves the right to refuse to award any prize. No purchase is necessary to claim a prize. The winner will be contacted via email. If the prize is not claimed within five days, Harnham reserves the right to offer the prize to the next eligible entrant drawn at random, using the randompicker.com tool.

The decision of Harnham regarding any aspect of the prize draw is final and binding and no correspondence will be entered into about it.

Harnham must either publish or make available information that indicates that a valid award took place. To comply with this obligation Harnham will send the surname and county of major prize winners and, if applicable copies of their winning entries, to anyone who emails research@harnham.com or writes to Harnham Marketing Team, 3rd Floor, Melbury House, 51 Wimbledon Hill Road, Wimbledon, London, England, SW19 7QW (enclosing a self-addressed envelope) within one month after the Closing Date. If you object to any or all of your surname, county and winning entry being published or made available, please contact Harnham at research@harnham.com. In such circumstances, Harnham must still provide the information and winning entry to the Advertising Standards Authority on request.

The prize is as stated and is subject to availability and the supplier’s terms and conditions. In the event of the prize being unavailable for any reason beyond Harnham’s control, it reserves the right to offer an alternative prize of equal value.

The prize is non-transferable and there is no cash or any other alternative. Prizes may be taxable and the winner will be responsible for any tax arising.

The prize will be sent within 90 working days of the prize draw provided valid contact details are provided.

Harnham reserves the right to amend or alter the terms of the prize draw.

The promoter of this prize draw is Harnham whose registered office is Melbury House, 51 Wimbledon Hill Road, Wimbledon, London, England, SW19 7QW.

These terms and conditions shall be governed by the laws of England and Wales and any action arising out of these terms shall be litigated in, and only in, the courts of England and Wales.

Contact information about entrants is collected by Harnham in order to contact them about the promotion and where appropriate to award the prize.

This prize draw is in no way sponsored, endorsed or administered by, or associated with the prizes. Eligible entrants understand that they are providing their information to Harnham and not any other business. Any questions, comments or complaints regarding the prize draw must be directed to Harnham.

Our Expertise

DATA TECHNOLOgy

Data Science Machine Learning & AI

Digital analytics

Risk analytics

Advanced Analytics

Life sciences

Computer vision

Data Management and Governance

recruitment solutions

Data talent solutions

DATA RECRUITMENT & STAFFING

Data Contract & Freelance

Data Executive Search

Data Graduate Talent

Diversity and inclusion

Industry hub

News, Blogs & Insights

Data and AI Salary Guides 23/24

Insights & reports

The Data and AI Podcast

Diversity Reports

CAREERS AT HARNHAM

Careers at Harnham

Career Paths

Recruitment Rookies

Experienced Hires

Operations at Harnham

Diversity, Equity & inclusion

Harnham Life / Meet the Team

Training, Learning & Development

CSR

WHERE TO FIND US

New York

San Francisco

PHOENIX

LONDON

Amsterdam

France

PRIVACY POLICIES,SITE & COOKIE POLICY