Your rights in relation to personal data we hold about you

You have several rights under UK and EU data protection laws in relation to the personal data that ERSG and its third-party processors, including Tifo, hold about you. These rights include the right to ask us for a copy of your personal data, to access, correct, delete or restrict processing of your personal data; to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this data to another controller: you further have the right to data portability. Specifically, if you object to any automated decision-making processes conducted by Tifo during compliance checks, you may request human intervention to review the decision (see above).

In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process your personal data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).

These rights may be limited, for example, if complying with your request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests for keeping. We will inform you of any relevant exemptions we are relying on when we respond to your request. Right to be forgotten requests

You can request that your data be forgotten via the contact form below. Alternatively, you can speak to your sales’ consultant. Once we receive your request, we will respond detailing the data that we have collected and any statutory obligations that mean we cannot delete your information. These obligations include, but are not limited to, keeping:

• Candidate records under Regulation 29 and Schedule 4 of the Conduct of Employment Agencies and Employment Businesses Regulations 2003, pursuant to the Employment Agencies Act 1973;
• First-aid training records under Health and Safety (First Aid) Regulations 1981;
• Income tax and NI returns and records under the Income Tax (Employments) Regulations 1993 (SI 1993/744) as amended;
• Payroll wage and salary records as per the Taxes Management Act 1970 and the Income Tax (Pay As You Earn) Regulations 2003 (SI 2003/2682);
• Working time records, including overtime and holiday, as per the Working Time Regulations 1998 (SI 1998/1833).

Upon receipt of your right to be forgotten request, ERSG will delete your data within 28 days, and we will inform you once this has been done and the data that was deleted.

Subject access requests

Similarly to a right to be forgotten request, you can submit a subject access request via the form below. Once we receive your request, we will confirm receipt via email. We have 28 days to provide you with the data that we have on file for you. Once we have collected this, we will send it to you via email, along with a copy of this policy.