Privacy Policy and GDPR Policy

Audentia Group Ltd offers Bookkeeping & VAT, Management Accounting, Year-End Accounting, Payroll Services, Self Assessment Tax returns, Corporate Taxation, Corporate International Taxation, Web research & analysis, Lead Generation, Talent Research, and Telemarketing services. We work with businesses across the globe; in doing so, we are committed to protecting the privacy of the data we collect and hold. This privacy statement outlines our policies regarding ordering, using, and transferring your data, the security measures we employ to protect such data, and the rights and choices you have about accessing or using such data.

Audentia Group Ltd is registered as a Data Controller with the ICO under company registration number 12487161 and ICO registration ZA686449, Registered office Address 20-22 Wenlock Road, London, England, N1 7GU.

Data Collection

To provide our services, we collect a variety of personal data. This will include information typically held in a curriculum vitae (CV) and will consist of name and contact details and information such as employment history, qualifications, skills, languages, and interests. It may also include age, nationality, gender, compensation details, reporting lines, team sizes, a record of our contact history with you, and comments, views, or references from third parties. We recommend that you do not provide information that may be deemed sensitive on your CV, as we will retain any documents that you have provided in line with our retention schedule.

In addition to your information in a CV format and telephone/email conversations, we may gather information from third-party sources such as LinkedIn, Google, other search engines, Company websites, press and periodicals, and other publicly available sources. Selectively, if relevant to a specific assignment and subject to your explicit consent, we may process your sensitive personal data.

Audentia Group Ltd automatically receives and records website information on our server logs from your browser. Data collected may include dates and times of visits, pages viewed, and the time spent on the site. This data is collected on an aggregate basis without association with your personal information to remain anonymous.

Data Use

Unless designated otherwise, the data we hold is processed on the lawful basis of legitimate interest.

By submitting your personal information or CV to Audentia Group Ltd, you indicate your willingness to be considered, when appropriate, for any of Audentia’s confidential assignments.

We use specific personal data to identify individuals that might be suitable and worth approaching for a particular role. This is necessary for our legitimate interests as a talent research and data research company.

Summary information may be shared with a client in the context of a particular assignment (this may include name, job title, company, and business contact details) or to illustrate a specific profile within the parameters of a project. No representation is made about your interest or availability for any role. Before presenting any further details or indicating any potential claim you may have, we will contact you and obtain your consent to such processing.

Your personal information may also be used anonymized and aggregated to put together industry, marketing, and employment trend analysis, reports, and statistics. Used in this matter, it will not be possible to identify the data subject.

We also use aggregated information collected from the website to administer and improve our website and security purposes.

We may share your personal information with third parties where we have retained them to provide services that you or our clients have requested, such as reference, qualification, and criminal reference checking services (as required and subject to consent), verification of the details you have provided from third party sources, psychometric evaluations or skills tests. We may also share your personal information with third parties who perform functions on our behalf and provide services to us, such as professional advisors, IT consultants carrying out testing and development work on our business technology systems, and function coordinators. These third parties are also required to comply with the obligations of the GDPR and will have similar and equally stringent undertakings of privacy and confidentiality. We share your personal information within the Audentia Group Ltd companies for internal reasons, primarily for business and operational purposes.

Where we have a legal obligation, we will share your personal information with third parties to comply with that legal obligation; when it has been demonstrated that applicable law requires it; at the request of governmental authorities conducting an investigation; to detect and protect against fraud, or any technical or security vulnerabilities; to respond to an emergency; or otherwise to protect the rights, property, safety, or security of third parties, visitors to our website, our business or the public.

Audentia Group Ltd does not carry out any automated decision-making.

Applicants

Suppose you have applied for a role work at Audentia Group Ltd. In that case, the information you provide and information that we gather through the interview and assessment process will be used to assess your suitability for opportunities with our Company.

You may be asked to provide equal opportunity information. This is not mandatory information – and it will not affect your application if you do not offer this. This information will be anonymized and will only be used to produce and monitor equal opportunities statistics.

If you are unsuccessful following the assessment for the position you have applied for, we may ask if you would like your details to be retained in our talent pool for a period of up to two years so we can contact you should any suitable opportunities arise.

Data Transfer

We hold your data within the EU, but we may need to transfer your personal information outside of the country in which we collected or obtained it, including outside the European Economic Area or to an international organization. Where we transfer your personal information outside the European Economic Area, the country to which it is shared will either be subject to an adequacy decision by the European Commission, or if not (or if we share your personal information with an international organization), we will ensure that the transfer takes place based on one or more of the following:

Standard data protection clauses adopted by the European Commission or adopted by the Information Commissioner’s Office and approved by the European Commission by relevant law;

Where you have given explicit consent to the proposed transfer, after having been informed of the possible risks of such transfers for the data subject due to the absence of an adequacy decision and appropriate safeguards;

Where the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the controller and another natural or legal person;

Security Measures and Retention

We use reasonable efforts to ensure that data is accurate, complete, current, and reliable for its intended use. We use appropriate technical and organizational measures and safeguards to help protect your data from unauthorized access, misuse, alteration, or loss, which will include but are not limited to: Physical measures such as locking away confidential material and IT equipment, secure offices, key card access, etc., and I.T. measures such as password access to hardware and systems, our IT hosting services provider operate a robust Information Security Management System that has been repeatedly certified to ISO27001:2013 by the British Standards Institute. Our internal policies and procedures are designed to help safeguard the privacy and accuracy of all data we collect or process. To the extent that we disclose personal data to clients or third parties, we request that they adequately protect the security and confidentiality of such information and otherwise process such data by applicable law.

Audentia Group Ltd employees undergo training on data privacy and security and must comply with our internal standards in these areas.

We will generally keep your data for no longer than ten years, after which it will be destroyed if it is no longer required for the purpose(s) for which it was obtained. Where we have undertaken to reference on behalf of a client, which may contain sensitive personal data, this will be deleted 12 months after the data has been presented to our client.

Your Rights

This policy provides you with information about how we use your data. You have the right to obtain access to your data (including for portability and transfer to another entity); to have it updated or corrected if it is inaccurate or incomplete; to request that we restrict its processing; to withdraw consent that has previously been provided or remove your data entirely from our system. When asked to draw a record from our database, Audentia Group Ltd will retain minimal information to ensure we do not contact you or collect such information again or keep a record of any information disclosed to our clients. While every effort will be made to not get you under these circumstances, where your data is available from a third party, we cannot guarantee this.

If you don’t wish us to hold any data on you or would prefer that we do not contact you, please click on the link in the email you received from Audentia Consulting Ltd informing you that we are processing your data or get info@audentiaresearch.com.

We have appointed Data Protection Leads to oversee compliance with this policy. If you have any questions, comments, or requests, please contact us at info@audentiaresearch.com.

You also have the right to complain to a supervisory authority, which is the Information Commissioner’s Office (ICO) for the UK, the contact details of which are available on their website at https://ico.org.uk.

Statement Updates

We may occasionally update this statement, and any updates we make to our privacy statement in the future will be posted on this page. This policy was last updated on 11th Feb 2020.

GDPR Policy

As of 25th May 2018, all organizations processing the personal data of EU citizens will need to comply with the General Data Protection Regulation (GDPR).

Audentia Group Ltd is committed to protecting personal data and has reviewed how we process the information on your behalf. As a result, we have made several changes to our tools & processes.

We recognize that it is essential for our customers to understand more of the detail behind how we are managing personal data; therefore, we have created the FAQs below; if you would like further information, get in touch with your Account Manager or email info@audentiaresearch.com.

Q: What Lawful Basis Under Article 6 Of The GDPR Does Audentia Use To Process Data On Behalf Of Customers

· We have identified Legitimate Interest as the Lawful Basis for processing prospect data

Q: Have Audentia Completed A Legitimate Interest Assessment (LIA)

· Audentia has completed an LIA; if you would like to discuss this, please get in touch with info@audentiadataservices.com

Q: Is Audentia A Data Controller Or Data Processer

· Audentia is the Data Processor (of customer prospects) on behalf of our customers, who are the Data Controller

Audentia is the Data Controller of customer employees and our employees.

Q: Where Does Audentia Store Customer Prospect Data?

· All prospect data is stored within Salesforce.com

· Data is password protected and limited to those directly involved in the programmer

· May share some personal data over email in Excel & Word documents; this will be limited and proportionate

· Where appropriate, these documents will be password protected

Q: How Long Does Audentia Keep Customer Prospect Data?

· Audentia retains this data for the length of the contract + 1 year to evidence delivery of service to our customers

· At the end of a program, data is archived off Salesforce.com and stored in a secure location on our servers

Q: Have You Updated Your Privacy Notice In Line With GDPR

·· The Audentia privacy notice can be found here

Q: Does Audentia Work With Third-Party Suppliers Who May Process Personal Data

Yes, Audentia does work with third-party suppliers who are listed below; we have robust policies in place to ensure the integrity of personal data

>Supplier: Salesforce.com, Personio.com, Talentory.com,4C, Telanova,Cognac

How we work with them: Storage and processing prospect data, Outsourced IT, policies & Processes to protect personal data. Contract management

Audentia GDPR policy