Skip to main content

Privacy Policy

How we keep your information safe

Contents

  1. How we keep your information safe
  2. Who we are
  3. Information we collect and how we collect it
  4. Job Applicants, Employees and Agency Staff
  5. Our Volunteers
  6. The people that we provide support to
  7. Carers, Family Linked Carers and the people who live with them
  8. Families, Next of Kin and Advocates of the people that we support
  9. People who are looking for support
  10. People who complain about our services
  11. Our Suppliers
  12. People who are interested in our work (Marketing)
  13. People visiting our website
  14. Cookies
  15. The IT Systems that we use
  16. How long we will keep your data
  17. Keeping your information up-to-date
  18. Sending your data internationally
  19. Your rights
  20. Your right to complain
  21. Contact our Data Protection Officer
  22. Definitions
  23. Changes to this policy

 

  1. How we keep your information safe

Ategi are a not-for-profit support provider, with over 25 years’ experience in helping people to live their lives, their way. We work with adults over 18 who need help to live their lives. In some situations, we can support those under 18.  

Ategi support people in South Wales, and in England from South Gloucestershire in the west through to London. Our services are regulated by Care Quality Commission (CQC) and Care Inspectorate Wales (CIW).

Safety and quality are at the heart of everything we do.  It is very important to us that we keep your personal information safe and only use it in line with your wishes.  We want you to be in control of your own data. 

This information will let you know exactly how we will use your personal data, who we might share it with and how we protect it.  It also lets you know what your rights are when it comes to the personal information that we hold about you. 

There are no secrets when it comes to how we use your data and we only keep the information we need to help carry out our work. 

You can contact us at any time to request or change the data we hold or to just ask a question relating to your data.  Please get in touch using the details below under the heading ‘Our Data Protection Officer’.

  1. Who we are

Ategi are a not-for-profit support provider, with over 25 years’ experience in helping people to live their lives, their way. We work with adults over 18 who need help to live their lives. In some situations, we can support those under 18.  

We are a data controller.  This means that we collect data about people and use it to help carry out our work.  We are also regulated by the Information Commissioner’s Office (ICO).

Ategi strives to provide the highest quality of care and support.  To do this properly we need to keep records of information about people to ensure you receive the best possible service.  However, we only share information where necessary and we ensure that we have the technical and organisational measures in place to keep your information safe.

  1. Information we collect and how we collect it

We do collect personal information, which we define as any data that can be used to identify you.  However, the information we hold about you and what we use it for depends on your relationship with us.  You can find out more about what data we hold about you by selecting one of the categories below.

  1. Job Applicants, Employees and Agency Staff

The types of personal data we will collect and use about you and why we use it

Whether or not you become an employee of Ategi, we will use your personal data for the reasons set out below and if you do become an employee we will use it to manage our employer/employee relationship. 

We will collect most of this information directly from you during the application process.  We may also collect data about you from a previous employer. 

The personal data we use may include:

  • Full name and personal details including contact information (e.g. home address and address history, email address, home and mobile telephone numbers and next of kin details);
  • Identification documents (to confirm your identity and to carry out any necessary DBS checks in relation to the role). This includes your National Insurance Number;
  • Date of birth and/or age (to make sure you are eligible to apply);
  • Financial details (e.g. bank information so that we can pay your salary);
  • Pension information;
  • Education, employment history and references (to ensure that you are suitably qualified for the role you are applying for);
  • Medical and health Information and medical certificates (to ensure that you are fit to carry out the role you are applying for);
  • Next of kin details (in the event of an emergency);
  • Gender, religious beliefs, ethnic origin, sexual orientation, nationality and marital status (for equality monitoring purposes);
  • Any information relating to claims, complaints, grievances or investigations to which you are a party;
  • Your photograph or videos of you (for items such as rotas, ID cards, Ategi promotional materials, and within our IT systems and intranet).

 We will tell you if providing some personal data is optional, including asking for your consent to process it if we are required to do so. 

We will also use your information to comply with any laws and regulations.

The legal basis for using your data

 We will process your personal data:

  1. As necessary to ensure that both parties perform in line with your employment contract.

 

  1. As necessary for your own or our legitimate interests or those of other persons and organisations, e.g.:
  1. To ensure that we provide an efficient recruitment exercise for you;
  2. To ensure we maintain an efficient employer/employee relationship;
  3. In order to receive funding from government bodies, such as workforce development funding, however the data that we share is always pseudonymised;
  4. To undertake internal investigations;
  5. To comply with data subject access requests; and
  6. To ensure that we provide any credit/reference requests when asked to do so.

 

Note: If your data is processed on the basis of legitimate interests we will document our decision and you can obtain more information about how the balancing of interests test was conducted upon request.

 

  1. As necessary to comply with a legal obligation, e.g.:

 

  1. To ensure that we comply with employment, social security or social protection law, data protection law and any other laws that we are subject too;
  2. For the establishment and defence of any legal rights;
  3. For activities relating to the prevention, detection and investigation of crime; and
  4. To verify your identity as part of a DBS check.

 

  1. Based on your consent:
  1.  When we use your photograph or videos of you at work to promote Ategi either in marketing brochures, on our website or on our social media page.

 

Who we may share the information with

In some cases we will share your personal information.  This will always be in line with Data Protection Law and we will obtain your consent before we share the information if we are required to do so.  Whenever we share your data we will ensure that it is done so securely and the data will always be pseudonymised if it can be so that you are not identified personally. 

We may share your personal data with:

  • The agents, advisors and service providers that assist us in running / we use to administer our business;
  • Our Pensions Providers and Advisors to ensure that we are complying with our obligations in Law to provide you with a suitable pension;
  • Our legal and other professional advisers when required;
  • Government bodies, our regulators and agencies within the UK (e.g. HRMC, the Information Commissioners Office (ICO), Care Quality Commission (CQC0, Charity Commission, Local Authorities) when required;
  • Our training providers to ensure that you have the necessary skills to carry out your role;
  • Our IT provider to ensure you have the IT support you require to carry out your role;
  • Our approved apprenticeship providers where you are working with us as an apprentice;
  • Our occupational health provider if necessary to ensure you are fit to carry out your role;
  • Our insurance providers where you are party to a claim;
  • New providers in the cases of TUPE;
  • Any organisations that contact us for a reference following your instructions (i.e. mortgage providers and credit reference agencies).
  • In an emergency to protect your vital interests; and
  • Anyone else where we have your consent or as required by law.

 

If you would like the names of the organisations that we share your data with or you are unhappy about whom we are sharing your data with you can contact our Data Protection Officer.

 

  1. Our Volunteers

 

How and why we use the information

 

When you volunteer for Ategi, we will use your personal data for the reasons set out below and to manage our employer/volunteer relationship. 

 

We will collect this information directly from you. 

 

The personal data we use may include:

 

  • Full name and personal details including contact information (e.g. home address and address history, email address, home and mobile telephone numbers);
  • Identification documents (to confirm your identity and to carry out any necessary DBS checks in relation to the role);
  • Education, employment history and references (to ensure that you are suitably qualified for the role you are applying for);
  • Date of birth and/or age (to make sure you are eligible to apply);
  • Financial details (e.g. bank information so that we can pay your expenses);
  • Medical and health Information and medical certificates (to ensure that you are fit to carry out the volunteer role);
  • Next of kin details (in the event of an emergency);
  • Gender and nationality (for equality monitoring purposes);
  • Any information relating to claims, complaints, grievances or investigations to which you are a party;
  • Your photograph or videos of you (for items such as ID cards, marketing Ategi services and within our systems and on our intranet).

 We will tell you if providing some personal data is optional, including asking for your consent to process it if we are required to do so. 

We will also use your information to comply with any laws and regulations.

 

The legal basis for using your data

 We will process your personal data:

  1. As necessary for your own or our legitimate interests or those of other persons and organisations, e.g.:
  2. To ensure we maintain an efficient employer/volunteer relationship;

Note: If your data is processed on the basis of legitimate interests we will document our decision and you can obtain more information about how the balancing of interests test was conducted upon request.

  1. As necessary to comply with a legal obligation, e.g.:
  1. To ensure that we comply with employment, social security or social protection law, data protection law and any other laws that we are subject too;
  2. For the establishment and defence of any legal rights;
  3. For activities relating to the prevention, detection and investigation of crime; and
  4. To verify your identity as part of a DBS check.

 

  1. Based on your consent:
  1.  When we use your photograph or videos of you at work to promote Ategi either in marketing brochures, on our website or on our social media page.

 

 Who we may share the information with

 In some cases we will share your personal information.  This will always be in line with Data Protection Law and we will obtain your consent before we share the information if we are required to do so.  Whenever we share your data we will ensure that it is done so securely and the data will always be pseudonymised if it can be so that you are not identified personally. 

We may share your personal data with:

  • Our legal and other professional advisers when required;
  • Government bodies, our regulators and agencies within the UK (e.g. HRMC, the Information Commissioners Office (ICO), Care Quality Commission (CQC), Charity Commission, Local Authorities) when required;
  • Our training providers to ensure that you have the necessary skills to carry out your role;
  • Our IT provider to ensure you have the IT support you require to carry out your role;
  • Our insurance providers where you are party to a claim;
  • In an emergency to protect your vital interests; and
  • Anyone else where we have your consent or as required by law.

 

If you would like the names of the organisations that we share your data with or you are unhappy about whom we are sharing your data with you can contact our Data Protection Officer.

 

  1. The people that we provide support to

 The types of personal data we will collect and use about you and why we use it

 If Ategi supports you we will use your personal data for the reasons set out below but primarily to ensure you receive the best care and support possible.  We will collect most of this information directly from you, your family or your advocate or from the local council or commissioning body that is arranging your support with us.  The personal data we use may include:

  • Full name and personal details including contact information (e.g. home address and address history, email address, home and mobile telephone numbers);
  • Date of birth and/or age;
  • Medical and health Information including support plans etc.;
  • Financial and benefit information (e.g. bank information to support you to manage your finances and benefits and, in some rare cases, where we manage your finances as your advocate);
  • Your National Insurance number (so that we can support you with your medical and financial affairs);
  • Next of kin or advocate details (to ensure that they are involved in your life and in the event of an emergency);
  • Gender, religious beliefs, sexual orientation and marital status (to ensure that we can support you in line with your beliefs);
  • Any other information about your life history relevant to your care and support. This would include care and support plans and records and, previous providers and advocate and appointee details;
  • Any information relating to claims, complaints, grievances or investigations to which you are a party;
  • Any criminal record information;
  • On some occasions, your will, if appropriate;
  • Your photograph or videos of you (for items such as missing person’s forms, hospital passports, your person-centred plan and personal memories and for the marketing of Ategi services).

We will tell you if providing some personal data is optional, including asking for your consent to process it if we are required to do so. 

We will also use your information to comply with any laws and regulations.

The legal basis for using your data

We will process your personal data:

  1. As necessary in line with your support contract.
  2. As necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
  3. As necessary for your own or our legitimate interests or those of other persons and organisations, e.g.:
  1. To provide you with the safe and quality driven care and support you require;
  2. To help you to manage your financial affairs;
  3. For research and statistical purposes to ensure that we can continually improve our support practices where possible.

Note: If your data is processed on the basis of legitimate interests we will document our decision and you can obtain more information about how the balancing of interests test was conducted upon request.

  1. As necessary to comply with a legal obligation, e.g.:
  1. To ensure that we comply with health or social care law and any other laws that we are subject too;
  2. For the establishment and defence of any legal rights;
  3. To comply with law or our regulators.
  1. Based on your consent or that of your next of kin or advocate:

 

  1. When we use your photograph or videos of you at work to promote Ategi either in marketing brochures, on our website or on our social media page.

Who we may share the information with

 In some cases we will share your personal information.  This will always be in line with Data Protection Law and we will obtain your consent before we share the information if we are required to do so.  Whenever we share your data we will ensure that it is done so securely and the data will always be pseudonymised if it can be so that you are not identified personally. 

We may share your personal data with:

  • Our legal and other professional advisers when required;
  • Government bodies, our regulators and agencies within the UK (e.g. HRMC, the Information Commissioners Office (ICO), Care Quality Commission (CQC), Charity Commission, Local Authorities) when required;
  • Our insurance providers where you are party to a claim;
  • New providers where they are taking over your care and support;
  • Any other person that is involved in your care and support;
  • Our housing partners where we are looking to secure you the most appropriate housing to live in.
  • Funding and research bodies in order to continually improve the care and support that we provide to you.
  • In an emergency to protect your vital interests; and
  • Anyone else where we have your consent or as required by law.

If you would like the names of the organisations that we share your data with or you are unhappy about whom we are sharing your data with you can contact our Data Protection Officer.

An easy read version of this information is available for you here.

 

  1. Carers, Family Linked carers and the people who live with them

The types of personal data we will collect and use about you and why we use it

If you are one of our carers, family linked carers or someone who lives with one we will use your personal data for the reasons set out below but primarily to ensure you are able to provide the best support possible to the person you are matched with.  We will collect most of this information directly from you or the person you live with.  The personal data we use may include:

  • Full name and personal details including contact information (e.g. home address and address history, email address, home and mobile telephone numbers and next of kin details);
  • Identification documents (to confirm your identity and to carry out any necessary DBS checks in relation to the role). This includes your National Insurance Number;
  • Date of birth and/or age (to make sure you are eligible to apply);
  • Financial details (e.g. bank information so that we can pay your salary);
  • Education, employment history and references (to ensure that you are suitably qualified for the role you are applying for);
  • Medical and health Information and medical certificates (to ensure that you are fit to carry out the role you are applying for);
  • Next of kin details (in the event of an emergency);
  • Information about your family and the people you live with and your hobbies and interests (so that we can ensure a safe environment in which the support is provided);
  • Gender, religious beliefs, ethnic origin, sexual orientation, nationality and marital status (for equality monitoring purposes);
  • Any information relating to claims, complaints, grievances or investigations to which you are a party;
  • Your photograph or videos of you (for items such as rotas, ID cards, Ategi promotional materials, and within our IT systems and intranet).

We will tell you if providing some personal data is optional, including asking for your consent to process it if we are required to do so. 

We will also use your information to comply with any laws and regulations.

The legal basis for using your data

We will process your personal data:

  1. As necessary to ensure that both parties perform in line with your employment contract.
  2. As necessary for your own or our legitimate interests or those of other persons and organisations, e.g.:
  1. To ensure that we provide an efficient recruitment exercise for you;
  2. To ensure we maintain an efficient employer/employee relationship;
  3. In order to receive funding from government bodies, such as workforce development funding, however the data that we share is always pseudonymised;
  4. To undertake internal investigations;
  5. To comply with data subject access requests; and
  6. To ensure that we provide any credit/reference requests when asked to do so.

Note: If your data is processed on the basis of legitimate interests we will document our decision and you can obtain more information about how the balancing of interests test was conducted upon request.

  1. As necessary to comply with a legal obligation, e.g.:
  1. To ensure that we comply with employment, social security or social protection law, data protection law and any other laws that we are subject too;
  2. For the establishment and defence of any legal rights;
  3. For activities relating to the prevention, detection and investigation of crime; and
  4. To verify your identity as part of a DBS check.
  1. Based on your consent:
  1. When we use your photograph or videos of you at work to promote Ategi either in marketing brochures, on our website or on our social media page.

Who we may share the information with

In some cases we will share your personal information.  This will always be in line with Data Protection Law and we will obtain your consent before we share the information if we are required to do so.  Whenever we share your data we will ensure that it is done so securely and the data will always be pseudonymised if it can be so that you are not identified personally. 

We may share your personal data with:

  • The agents, advisors and service providers that assist us in running / we use to administer our business;
  • Our legal and other professional advisers when required;
  • Government bodies, our regulators and agencies within the UK (e.g. HRMC, the Information Commissioners Office (ICO), Care Quality Commission (CQC0, Charity Commission, Local Authorities) when required;
  • Our training providers to ensure that you have the necessary skills to carry out your role;
  • Our occupational health provider if necessary to ensure you are fit to carry out your role;
  • Our insurance providers where you are party to a claim;
  • Any organisations that contact us for a reference following your instructions (i.e. mortgage providers and credit reference agencies).
  • In an emergency to protect your vital interests; and
  • Anyone else where we have your consent or as required by law.

If you would like the names of the organisations that we share your data with or you are unhappy about whom we are sharing your data with you can contact our Data Protection Officer.

 

  1. Families, Next of Kin and Advocates of the people that we support

The types of personal data we will collect and use about you and why we use it

 If Ategi provides support to your loved one we will use your personal data to ensure that you are involved when you need to be. 

We will collect most of this information directly from you or from the local council or commissioning body that is arranging your family member’s support with us. 

The personal data we use will include:

  • Full name and personal details including contact information (e.g. home address and address history, email address, home and mobile telephone numbers);
  • Any information relating to claims, complaints, grievances or investigations to which you or your loved one are a party.

We will tell you if providing some personal data is optional, including asking for your consent to process it if we are required to do so. 

We will also use your information to comply with any laws and regulations.

The legal basis for using your data

 We will process your personal data:

  1. As necessary for your own or our legitimate interests or those of other persons and organisations, e.g.:
  1. To ensure that you are involved in the person’s care and support when you want to be.

Note: If your data is processed on the basis of legitimate interests we will document our decision and you can obtain more information about how the balancing of interests test was conducted upon request.

  1. Based on your consent or that of your next of kin or advocate:
  1.  Any other information that we use or collect will be based on your consent.

Who we may share the information with

In some cases we will share your personal information.  This will always be in line with Data Protection Law and we will obtain your consent before we share the information if we are required to do so.  Whenever we share your data we will ensure that it is done so securely. 

We may share your personal data with:

  • Our legal and other professional advisers when required;
  • Government bodies, our regulators and agencies within the UK (e.g. HRMC, the Information Commissioners Office (ICO), Care Quality Commission (CQC), Charity Commission, Local Authorities) when required;
  • New providers where they are taking over the care and support package;
  • Any other person that is involved in the person’s care and support;
  • In an emergency to protect yours or the person’s vital interests; and
  • Anyone else where we have your consent or as required by law.

If you would like the names of the organisations that we share your data with or you are unhappy about whom we are sharing your data with you can contact our Data Protection Officer.

 

  1. People who are looking for support

 The types of personal data we will collect and use about you and why we use it

If you approach Ategi to provide care and support we will use your personal data for the reasons set out below but primarily to ensure that we have the necessary information to assess whether we can help you. 

We will collect most of this information directly from you, your family or your advocate or from the Local Authority or commissioning body that is arranging your support with us. 

The personal data we use may include:

  • Full name and personal details including contact information (e.g. home address and address history, email address, home and mobile telephone numbers);
  • Date of Birth and/or age;
  • Medical and Health Information including support plans etc.;
  • Financial and benefit information (e.g. bank information to see if we can support you to manage your finances and benefits);
  • Next of kin or advocate details (to ensure that they are involved in your life and in the event of an emergency);
  • Gender, religious beliefs, sexual orientation and marital status (to ensure that we can support you in line with your beliefs);
  • Criminal record information;
  • Any other information about your life history and housing situation relevant to your care and support.

We will tell you if providing some personal data is optional, including asking for your consent to process it if we are required to do so. 

We will also use your information to comply with any laws and regulations.

The legal basis for using your data

 We will process your personal data:

  1. As necessary for your own or our legitimate interests or those of other persons and organisations, e.g.:
  1. To see whether we can provide you with the safe and quality driven care and support you require;

For research and statistical purposes to ensure that we can continually improve our support practices where possible.

Note: If your data is processed on the basis of legitimate interests we will document our decision and you can obtain more information about how the balancing of interests test was conducted upon request.

  1. As necessary to comply with a legal obligation, e.g.:
  1. To ensure that we comply with health or social care law and any other laws that we are subject too;
  2. For the establishment and defence of any legal rights;
  3. To comply with law or our regulators.

Who we may share the information with

 In some cases we will share your personal information.  This will always be in line with Data Protection Law and we will obtain your consent before we share the information if we are required to do so.  Whenever we share your data we will ensure that it is done so securely and the data will always be pseudonymised if it can be so that you are not identified personally. 

We may share your personal data with:

  • Our legal and other professional advisers when required;
  • Government bodies, our regulators and agencies within the UK (e.g. HRMC, the Information Commissioners Office (ICO), Care Quality Commission (CQC), Charity Commission, Local Authorities) when required;
  • Any other person that is involved in your care and support;
  • Our housing partners where we are looking to secure you the most appropriate housing to live in.
  • In an emergency to protect your vital interests; and
  • Anyone else where we have your consent or as required by law.

If you would like the names of the organisations that we share your data with or you are unhappy about whom we are sharing your data with you can contact our Data Protection Officer.

An easy read version of this information is available for you here.

  

  1. People who complain about our services

The types of personal data we will collect and use about you and why we use it

If you make a complaint to Ategi we will use your personal data to ensure that you kept fully up to date in the investigation of the compliant. 

We will collect your information directly from you. 

The personal data we use will include:

  • Full name and personal details including contact information (e.g. home address and address history, email address, home and mobile telephone numbers);

We will tell you if providing some personal data is optional, including asking for your consent to process it if we are required to do so. 

We will also use your information to comply with any laws and regulations.

The legal basis for using your data

 We will process your personal data:

  1. As necessary for your own or our legitimate interests or those of other persons and organisations, e.g.:
  1. To ensure that you kept fully updated in respect of your complaint.

Note: If your data is processed on the basis of legitimate interests we will document our decision and you can obtain more information about how the balancing of interests test was conducted upon request.

Who we may share the information with

In some cases we will share your personal information.  This will always be in line with Data Protection Law and we will obtain your consent before we share the information if we are required to do so.  Whenever we share your data we will ensure that it is done so securely. 

We may share your personal data with:

  • Our legal and other professional advisers when required;
  • Government bodies, our regulators and agencies within the UK (e.g. HRMC, the Information Commissioners Office (ICO), Care Quality Commission (CQC), Charity Commission, Local Authorities) when required;
  • Anyone else where we have your consent or as required by law.

If you would like the names of the organisations that we share your data with or you are unhappy about whom we are sharing your data with you can contact our Data Protection Officer.

  1. Our Suppliers

 The types of personal data we will collect and use about you and why we use it

 If you provide a service to Ategi we will use your personal data to ensure that we maintain a good working relationship. 

We will collect your information directly from you. 

The personal data we use will include:

  • Full name and personal details including contact information (e.g. home address and address history, email address, home and mobile telephone numbers);
  • Insurance certificates, UTR codes, VAT details and any other relevant business information (to validate your ability to provide the services/supplies);

We will tell you if providing some personal data is optional, including asking for your consent to process it if we are required to do so. 

We will also use your information to comply with any laws and regulations.

The legal basis for using your data

 We will process your personal data:

  1. As necessary for your own or our legitimate interests or those of other persons and organisations, e.g.:
  1. To ensure that you are fit to provide the services/supplies and that we have the necessary safeguards in place.

Note: If your data is processed on the basis of legitimate interests we will document our decision and you can obtain more information about how the balancing of interests test was conducted upon request.

Who we may share the information with

In some cases we will share your personal information.  This will always be in line with Data Protection Law and we will obtain your consent before we share the information if we are required to do so.  Whenever we share your data we will ensure that it is done so securely. 

We may share your personal data with:

  • Our legal and other professional advisers including our insurers when and if required;
  • Anyone else where we have your consent or as required by law.

If you would like the names of the organisations that we share your data with or you are unhappy about whom we are sharing your data with you can contact our Data Protection Officer.

  

  1. People who are interested in our work (Marketing)

The types of personal data we will collect and use about you and why we use it

If we contact you to show you our work or you contact us for marketing information we will use your personal data to ensure that you receive the information you want. 

We will collect your information directly from you. 

The personal data we use may include:

  • Full name and personal details including contact information (e.g. home address and address history, email address, home and mobile telephone numbers).

Providing this personal data is optional and we will always ask for your consent to process it before we do so. 

The legal basis for using your data

We will process your personal data only where we have your consent to do so.

Who we may share the information with

In some cases we will share your personal information.  This will always be in line with Data Protection Law and we will obtain your consent before we share the information if we are required to do so.  Whenever we share your data we will ensure that it is done so securely. 

We may share your personal data with:

  • Anyone else where we have your consent or as required by law.

If you would like the names of the organisations that we share your data with or you are unhappy about whom we are sharing your data with you can contact our Data Protection Officer.

  1. People visiting our website

The types of personal data we will collect and use about you and why we use it

When you visit our website we will collect Cookie information and you can find out more about this in the Cookies section below.  If you visit our website and you are applying to work at Ategi your application will also be kept and stored on our website which includes the following information:

 

  • Full name and personal details including contact information (e.g. home address and address history, email address, home and mobile telephone numbers);
  • Employment history;
  • Any other information which you provide.

 

We will tell you if providing some personal data is optional, including asking for your consent to process it if we are required to do so. 

 

We will also use your information to comply with any laws and regulations.

 

The legal basis for using your data

 We will process your personal data:

  1. As necessary for your own or our legitimate interests or those of other persons and organisations, e.g.:
  1. To ensure we can respond to your application and liaise with you about the job in question.

 

Note: If your data is processed on the basis of legitimate interests we will document our decision and you can obtain more information about how the balancing of interests test was conducted upon request.

Who we may share the information with

In some cases we will share your personal information.  This will always be in line with Data Protection Law and we will obtain your consent before we share the information if we are required to do so.  Whenever we share your data we will ensure that it is done so securely. 

We may share your personal data with:

  • Our legal and other professional advisers including our insurers when and if required;
  • Our website provider and any developer;
  • Anyone else where we have your consent or as required by law.

If you would like the names of the organisations that we share your data with or you are unhappy about whom we are sharing your data with you can contact our Data Protection Officer.

  1. Cookies

A cookie is a small amount of data generated by a website and saved by your web browser. We use your cookies to give you a more personalised experience when you visit our website.  It helps us create a more effective website that reflects your needs.  We may also collect and record information about how you use our site by collecting your IP address (in simple terms that just means a number that identifies your computer or internet device).

By continuing to use our site, you agree to our use of cookies – but these cookie files and IP address will never identify you as an individual.  For more information on cookie files and IP addresses read our cookies policy.  This page also includes instructions on how to stop us collecting this information.

Cookies are small text files that are placed on your computer or mobile phone when you browse websites.

Our cookies help us:

  • Make our website work as you’d expect;
  • Allow you to share pages with social networks like Twitter; and
  • Continuously improve our website for you.

Information gathered includes browsing patterns, so we can understand what pages are being visited and how long you stay on our site, but no individual user is identified.

  1. The IT Systems that we use

Ategi store the personal data that it holds on a range of different IT systems so that our work can be carried out in the most efficient way possible.  These IT systems are hosted by third party providers and we ensure that they protect your data in line with our policies and procedures and the UK Data Protection Law. 

  1. How long we will keep your data

We keep all personal data in line with our Data Retention Schedule which can be accessed here.

  1. Keeping your information up-to-date

To make sure we always have the most up-to-date information about you, we may, from time to time, update your records to reflect any changes to your information.

This information may come directly from you, or it may come from a third party that we consider as legitimate and trustworthy and in the circumstances where it is appropriate and where you will have had a clear expectation that your details would be passed on for this purpose.  

  1. Sending your data internationally

At Ategi it is very unlikely that we will send your personal data outside of the UK and the European Economic Area (EEA).  However, there may be very rare occasions that we are required to do so (i.e. to respond to a reference request).

Some countries have adequate protections for personal data under laws similar to UK Law but in other countries steps will be taken to ensure appropriate safeguards are put in place so that your data is protected. 

If Ategi transfers your personal data outside of the UK we will always ensure that it is done so in line with Data Protection Law and we will ask for your consent to do so if we are required too.

  1. Your rights

You have the right to be informed about how we use your data. We do this by providing you with this notice but if you have anymore questions you can contact our Data Protection Officer.

  • You have the right to have your personal data corrected if it’s inaccurate and to have incomplete personal data completed.
  • You have the right to object to the processing of your personal data. This right only applies in certain circumstances and more information can be found in our Data Protection Policy available here or on request.
  • You have the right to restrict the processing of your personal data. This right only applies in certain circumstances and more information can be found in our Data Protection Policy available here or on request.
  • You have the right to have your personal data erased (this is also known as the ‘right to be forgotten’). This right only applies in certain circumstances and more information can be found in our Data Protection Policy available here or on request.
  • You have the right to request access to your personal data and information and more information about how we use it. You can do this by contacting our Data Protection Officer on the contact details below.
  • You have the right to move, copy or transfer your personal data (also know as ‘data portability’); and
  • You have the rights in relation to automated decision making including profiling.

For more information about these rights and to enforce them you should contact our Data Protection Officer on the contact details below.

  1. Your right to complain

You have a right to complain if you think you are unhappy with the way we have used your personal data.  You can complain directly to our Data Protection Officer (see below), or you can complain directly to the Information Commissioner’s Office (ICO).  The ICO is the UK’s Data Protection Regulator and it has enforcement powers and can investigate compliance with data protection law.  You can contact the ICO by visiting their website: www.ico.org.uk

 

  1. Contact our Data Protection Officer

Our Data Protection Officer:

Email:                 karent@Ategi.co.uk

Telephone:          07597 590547

  1. Definitions

“Data Controller” means an organisation who determines the purposes and means of processing personal data.

“DBS Check” means a check carried out by the Disclosure and Barring Service which helps employers make safer recruitment decisions and prevent unsuitable people from working with vulnerable groups, including children. It replaces the Criminal Records Bureau (CRB) and Independent Safeguarding Authority (ISA).

 “GDPR” means the General Data Protection Regulation which is a regulation in EU law on data protection and privacy for all individuals within the European Union. It addresses the export of personal data outside the EU.

“Information Commissioners Office” means the non-departmental public body which reports directly to Parliament and regulates UK Data Protection Law. 

“Pseudonymised” means when the most identifying fields within a database of information are taken out and replaced them with artificial identifiers, or pseudonyms. For example a name is replaced with a unique number. The purpose is to render the data record less identifying and therefore reduce concerns with data sharing and data retention. 

“TUPE” means the TUPE Regulations which preserve employees' terms and conditions when a business or undertaking, or part of one, is transferred to a new employer. Any provision of any agreement (whether a contract of employment or not) is void so far as it would exclude or limit the rights granted under the Regulations.

  1. Changes to this policy

We may make changes to this policy from time to time to ensure that it is giving you the right information.  Each time you visit this site you should check this page and the sections that are important to you.  Where appropriate we will notify you of any changes. 

 

Ategi Head Office

Flynn House, Cardiff Road
Rhydyfelin
Pontypridd
Rhondda Cynon Taf
Wales
CF37 5HP

01443 484400
info@ategi.co.uk

South Gloucestershire office

Spur 4.7, The Vassall Centre
Gill Avenue
Fishponds
Bristol
BS16 2QQ

0117 3321030

Buckinghamshire office

Unit M1, Mosquito Studios
Dehavilland Court
Penn Street
Amersham
Buckinghamshire
HP7 0PX

01494 932 920

 

 

 

Opening hours

Monday 8.30am-4.30pm

Tuesday 8.30am-4.30pm

Wednesday 8.30am-4.30pm

Thursday 8.30am-4.30pm

Friday 8.30am-4.30pm

Saturday Closed

Sunday Closed