ARTHUR'S CONSULTING PRIVACY POLICY

Recruitment Privacy Notice

1. Scope

This Notice describes how ARTHUR’S CONSULTING Ltd., and our related entities (collectively, “ARTHUR'S CONSULTING”, “us”, “we”) process personal data when you apply for a position with us, with one of our clients,  including traineeships, work experience or recruitment events and during any subsequent selection and onboarding process.  

As a firm with a global client base, we are subject to the varying requirements of Applicable Data Protection Laws within the jurisdictions where we or our clients  operate. Although our approach to data protection and privacy across our business aims to be as consistent as possible and to accord with Applicable Data Protection Laws, the specific requirements, rights and obligations relating to personal data can be different.

In this Recruitment Privacy Notice, the descriptions of any rights and obligations will only apply where the processing is within the scope of the GDPR, and the applicable data and personal protection laws of Japan.  Where we operate in jurisdictions with Applicable Data Protection Laws which are substantially different from the GDPR, the information below (in particular the rights and obligations described and limitations on processing) do not necessarily apply.

For candidates applying for roles in locations outside of Japan, the EU and UK, please also refer to our additional notice below which provide further relevant information about  how to exercise your rights under Applicable Data Protection Laws. Where there is any inconsistency between a regional supplement and this Recruitment Privacy Notice, the laws of the jurisdiction of your employment contract shall prevail.

2. Definitions

Where we use terms such as “processing”, “personal data”, “processor”, “controller”, “data subject”, these will take their meaning given in the GDPR and where applicable, the UK GDPR. Where other Applicable Data Protection Laws apply, the above expressions shall bear their respective meanings given under the relevant law or where no equivalent expression exists, be interpreted in a manner which is consistent withs such laws.

Lawful Bases for Processing

We may process your personal data because this is necessary for us to review your application or offer you future job opportunities with your consent. In order for us to carry out our purposes, we will be transferring your personal data to third parties, including clients whom we are actively recruiting for and whom are reviewing your application. (“Who Will Receive My Personal Data?”).

Applicable Data Protection Laws means any laws, regulations, requirements relating to the processing of personal data applying to ARTHUR's Entities including, where applicable within the U.K and Central Europe: the General Data Protection Regulation (Regulation (EU) 2016/679)(“GDPR”) and as it applies within the U.K, the UK GDPR, within Japan, the Act on the Protection of Personal Information (Act No. 57 of 2003), within China, the Personal Information Protection Law, within Hong Kong, the Personal Data (Privacy) Ordinance; within Singapore, the Personal Data Protection Act; within Vietnam, the Law on Cyber Information Security (Law No. 86/2015/QH13) and the Law on Cyber Security (Law No. 24/2018/QH14; within the Dubai International Financial District, the DIFC Data Protection Law No.5 of 2020; within Bahrain, the Law No.30 of 2018 with respect to Personal Data; and within the Abu Dhabi Global Market (ADGM) in the Emirate of Abu Dhabi in the UAE, the ADGM Data Protection Regulations 2021.

3. Types of Personal Data We Process

We may process personal data when you register for an account with us and where you submit an application for a role with ARTHUR'S. The type of personal data we process will depend on the type of role you apply for, the location of your role and whether you are successful with your application. We may process some limited personal data when you register an account but do not proceed with submitting your application. We may process the following types of data:

3.1. Identity data such as your name, address, email address, telephone number, and date of birth and other direct identifiers such as ID documentation, where this is permitted by Applicable Data Protection Laws;

3.2. Application data such as your professional experience and education including where relevant: university degrees, academic records, certifications, awards and achievements, employment history including details of current and previous employer, referees, date of admission, jurisdiction of qualification, professional regulatory history, language skills, your references and right to work information and any other information that you provide in support of your application;

3.3. Technical data such as your login information, your IP address, operating system or other meta-data which is automatically collected when you access the Manatal application portal or our websites.  For information on how cookies are used by Manatal when you access the recruitment portal, please click here Cookie Notice | Manatal. 

3.4. Sensitive data such as your health, disability and age, criminal offence information;

3.5. Other information that you may provide to us voluntarily in the course of the recruitment process.

4. Sources of Personal Data

Most of the personal data we process is provided directly by you when you submit this information to us with your application or when you participate in the interview process. 

We may also receive personal data about you indirectly. For example, when you have been referred for a position at ARTHUR'S or when we receive additional information from third parties such as your nominated referees or previous employers. We may also collect information about you from publicly available information in the course of pre-employment checks (as described in Section 5 (“Why do we process your personal data?”).

5. Why Do We Process Your Personal Data?

We may process your personal data to:

• assess your suitability and eligibility for a position or opportunity you have applied for;

• comply with immigration, employment or any other laws or regulations that apply to us;

• take steps prior to entry into an employment agreement with you if your application is successful;

• pursue our legitimate interests where permitted under Applicable Data Protection Laws, which are not overridden by your rights and freedoms, having regard to the safeguards we put in place such as those described in Section 10 (“International Transfers”);

• protect ARTHUR's systems, business information and employees, including where necessary for the exercise or defence of legal claims or other professional reporting requirements;

• we may contact you to ask for your consent as to whether you want to be contacted about future career opportunities;

• conduct pre-employment checks where permitted, which may include verification of information contained within your application, criminal history, financial history or other information that may be required to establish your education and/or qualifications.

6. What Are the Lawful Bases for Our Processing?

We may process your personal data because this is necessary for us to review your application or offer you future job opportunities with your consent.

By freely submitting your resume to ARTHUR’S Consulting Ltd., or applying to a job posted by ARTHUR’S Job Board, or via Linkedin, you consent to the Privacy Notice herein described.  “I have read ARTHUR’S Consulting Ltd., Recruitment Privacy Notice and I am happy to proceed”, you will indicate your consent to our processing of personal data for these purposes. You may withdraw your application and your consent at any time in the manner described below. However, if you do withdraw your consent, we may not be able to progress your application or make you an offer of employment, where we are considering this.

Where we are considering your application with a view to offering you a position, we may process your personal data at your request prior to entry into a contract with you.

We may also process your personal data in order for us to:

• comply with any Applicable Data Protection Laws including in respect of immigration, tax, professional or employment law obligations; and/or

• protect the security and integrity of our systems, assets, information, or colleagues and where permitted, we will rely on these as legitimate interests.

We may process sensitive data about you such as information concerning your physical or mental health to assess whether there are any reasonable adjustments that we may need to make in the recruitment process. If you are successful in your role, we may request further information concerning your health in order to provide you with any benefits to which you are entitled. In our Japan office, the legal basis on which we rely is to perform our legal obligations, to exercise or defend legal claims, where processing is necessary to carry out rights or obligations in the field of employment, social security, social protection law or in the case of discretionary benefits, with your explicit consent.

7. Who Will Receive My Personal Data?

We take great care to ensure your personal data is only processed where this is strictly necessary and for the purposes described above. Your personal data may be shared internally with certain members of the consulting team, hiring managers and other individuals who have a need to know the information or who are actively participating in the recruitment process you are taking part in.

ARTHUR’S Consulting Ltd., where you apply for a role will process your personal data as an independent data controller.

We may share your personal data with third parties who process data on behalf of our clients, including on-site recruitment agencies to assist us with the recruitment process or data processors such as IT service providers that store data on our behalf. We use Manatal as our provider for all recruitment data storage and CRM activities, which securely stores your personal data on a secure and dedicated database.  Manatal’s privacy policies are also governed by GDPR and applicable data protection laws within Japan to ensure that your data is secure and protected and solely accessible to ARTHUR’S Consulting Ltd.  For more about their policy`s see: https://www.heroku.com/policy/security

We may also share your personal data with our third-party provider, First Advantage or Hire right in order to carry out necessary pre-employment checks, in the event that you accept an offer of employment from one of our clients.

We may also share your personal data to the extent that we are required by law, with certain public authorities such as law enforcement or professional or regulatory authorities. If this is necessary for our exercise or defence of legal claims, we may also share your personal data with our insurers or professional advisors. 

8. International Recruitment

As a global recruitment firm, we may need to share your personal data with other entities of our Clients or third parties in other locations. Adequate safeguards for personal data transfers within ARTHUR's (and where necessary with other third parties working with or for us in respect of your application) will be ensured through standard contractual clauses; with your consent; or on the basis that the transfer is otherwise compliant with Applicable Data Protection Laws. Additionally, within ARTHUR's we have in place binding firm-wide data protection and information security policies which govern our internal data processing activities.

Any personal data you provide to us is recorded on our CRM Manatal and will be securely stored within Manatal’s cloud servers.  Their data security is detailed here; https://www.heroku.com/policy/security

9. Possible Consequences

There are no negative consequences if you do not wish to provide us your personal data in the context of submitting an application. However, without providing your personal data it will not be possible to progress your application and your application will be closed. Incomplete or incorrectly completed applications cannot be considered.

10. Processing at Offer Stage

If you accept an offer from a client we represent or from us,  we will process further personal data preparatory to contract with you.

Where you have been successful with an application, it will be necessary for us to verify certain details you have submitted. We will also conduct pre-employment background checking. Depending on the nature of your role and where local law requires and/or permits this (for example where it is required to meet certain professional regulatory standards), we may request our third-party screening provider to undertake criminal and/or financial history checks as a part of the final screening process. Where such checks are conducted, we will ensure that appropriate safeguards are in place to protect your personal data, including minimising access to such data.

Our Staff Privacy Notice which will be provided with you prior to your employment, will apply to any processing of personal data we conduct whilst you are an employee. If you have accepted an offer for a student vacation scheme or graduate placement, you will be provided with a separate notice at a later point.

11. Automated Decision Making

We do not currently use any automatic decision making as part of our recruitment processes.

12. Your Rights

Right to Information

You have the right to be informed about the purpose of use of your personal data and about security measures implemented in order to protect your personal data.

Right to Access

Subject to certain exceptions you have the right to request a copy of your personal data.

Right to be Forgotten

Subject to certain exceptions, if you consider that we should stop processing some or all of your personal data, you have the right to request its deletion.

Right to Rectification

If the personal data that we process is not factually correct, you have the right to request that we correct, add to or delete the incorrect data.

Contact Details

If you wish to exercise your rights you can get in touch with us by email at info@arthursconsulting.com 

You also have the right to lodge a complaint:

• by using the contact details above; and/or

• with a competent supervisory authority.