Opus2 or an Opus2 Affiliate within the Group (as applicable), shall be the Data Controller in respect of the Personal Data covered in this Notice.

Transcription

1 Introduction Your privacy is important to Opus2. We have drafted this Privacy Notice (also referred to as Notice in this document) to help you understand who we are, what Personal Data we collect about you, why we collect it and what we do with it. By Personal Data (also referred to as Data or your Data in this document) we mean any information, or a set of information from which we are able, directly or indirectly, to personally identify you, in particular by reference to an identifier e.g. name and surname, address, phone number etc. Opus 2 International Limited ( Opus 2 ) is part of the Opus 2 Magnum Holdings Limited group of companies ( the Group ). The Group has offices internationally. Therefore, we may replace or amend this Notice to comply with local laws, as well as to provide you with additional information. Please take the time to read this Notice in full. When does this Privacy Notice apply? This Notice sets out how we collect and use your Data in the context of our recruitment process. For example, this would include when we contact you for job opportunities or when you apply for a job offered by us, use our recruitment channels, visit our career websites, join our recruitment events, or otherwise interact with us in your capacity as candidate or job applicant. By engaging in our recruitment process (where legally required), you expressly consent to our collection, storage, use, transfer, and disclosure of your Data, including any sensitive information you elect to submit (as described in this Privacy Notice). Who are Opus2 Opus 2 develops collaborative analysis software for use by litigation and legal professionals. Delivering sophisticated services for dispute resolution hearings around the world. Our London headquarters has become the de facto provider of quality services to the UK Courts, and our regional offices support high stakes commercial matters in Europe, Asia, the Middle East and the United States. Founded in 2008, the company has become well known for its best in class software and providing truly functional electronic hearing rooms as a service. Opus2 or an Opus2 Affiliate within the Group (as applicable), shall be the Data Controller in respect of the Personal Data covered in this Notice. What types of Personal Data do we collect about you? As part of our recruitment process, Opus2 may collect a range of information constituting Personal Data about you. This includes: your name, address and contact details, including address and telephone number; details of your qualifications, skills, experience and employment history; information about your current level of remuneration, including benefit entitlements; Images or videos through which you may be identified e.g., if included in a CV or online profile

2 whether or not you have a disability for which the organisation needs to make reasonable adjustments during the recruitment process; and information about your entitlement to work in the UK. If we make an offer of employment to you, this will be conditional upon you completing certain preemployment background checks, more detail on this is given later in this policy. Opus2 may collect this information in a variety of ways. For example, (1) you may supply this information to us directly: through submission of a CV, application or submission of a social media profile such as LinkedIn through submission of a passport and/or other ID documentation information which is collected by us during interviews or other forms of assessments (2) we may collect this information from other sources: Recommendation or referrals submitted on your behalf from others Information you submit to organisations we engage to complete pre-employment background checks on our behalf. You will always know the organisation to whom you are submitting your details at the time you provide your information. from recruitment agencies and other recruitment partners e.g., job search websites where applicable (subject to their terms and conditions) when you give us access to data stored by third parties (subject to their terms and conditions) e.g. business and employment orientated social media sites such as LinkedIn. References supplied by former employers or other organisations we will only so once a job offer has been made and will always notify you in advance of making the reference request (3) we may generate this information automatically When you apply for a job offered by us, use our recruitment channels, or visit our career website, in addition to the information you provide to us directly, we may collect information sent to us by your computer, mobile phone or other access device. For example, we may collect: Device information: such as your hardware model, IMEI number and other unique device identifiers, MAC address, IP address, operating system version, and settings of the device you use to access the Services; Log information: such as the time and duration of your use of our channel; Location information: for example, a location derived from your IP address or data that indicates where you are located, such as at a city or postal code level. Lastly, if you visit our premises, for security reasons we might also record your Data through video or other electronic, digital, or wireless surveillance system or device (e.g. CCTV). Your Data will be stored in a range of different places, including on your application record or CV, in HR management systems and on other IT systems (including ). Please note that your election not to provide any of your Data as required or requested in the context of the recruitment procedure, may have effect on your ability to participate in the recruitment process.

3 How do we use your Personal Data? We may use your Data for the purposes of carrying out your application and the entire recruitment process. Below you will find an overview of the purposes for which we may process your Data during the recruitment process: Assess your suitability for employment (including through pre-employment background checks as set out below) for the role for which you are applying, as well as future roles that may become available (unless you tell us you want to us to delete your data). Perform analysis of our applicant pool to better understand who is applying to positions at Opus2 and how to attract top talent To notify you of new role opportunities that may be of interest to you. If you do not want to receive these notifications, please contact us at the details listed in the What are my choices section. Perform any legally-required reporting and respond to legal processes. Opus 2 employees have access to highly sensitive and confidential information because of the nature services we supply and the sector in which we operate. We are required to confirm the identity of our staff, their right to work in the United Kingdom and seek assurance as to their trustworthiness, integrity and reliability. It s in our legitimate interests to process your Personal Data for these purposes so that we can satisfy ourselves of the above-mentioned factors. We complete pre-employment background checks on candidates to whom we make a job offer. You are only asked to complete these checks once a job offer is made, we will ask you to complete this information and you have a right to object. You must successfully complete pre-employment checks to progress. You will therefore be required to provide: Proof of your education and professional qualifications (where applicable). You will be asked to complete a BPSS check. This will include a (a) Right to Work check - Verification of Nationality, ID documentation and Immigration status, (b) Identity ID Data check (electronic identity authentication name, address, aliases, links, accounts etc.), (c) Criminal Records check Search for unspent convictions (Basic Disclosure), and (d) Employment check Confirmation of 3 years Employment History / Activity. We will contact your referees, using the details you provide in your application, directly to obtain references We may, for certain roles, complete an Adverse Financial History check. This will not have an impact on your credit record or history. You are under no obligation to submit to pre-employment checks but please note that if you do not this may result in your application being withdrawn. If you have any questions on these, we would be happy to answer your questions and you can contact us at the address given in this Privacy Policy. If you join Opus2, we will also ask for: Bank details to process salary payments Emergency contact details so we know who to contact in case you have an emergency at work. On what legal grounds do we use your Personal Data In order to be able to process your Data, we may rely on different legal bases, including: The necessity to pursue our legitimate interests, including to assess your suitability for a role, or to prevent or investigate suspected or actual violations of law. This is the legal basis we rely on to complete pre-employment background checks.

4 Your consent (only when legally required or permitted). If we rely on your consent as a legal basis for processing your Personal Data, you may withdraw your consent at any time. By submitting your Personal Data, you consent to us processing in accordance with the terms of this notice. The necessity to establish a contractual relationship with you; or The necessity for us to comply with legal obligations and to establish, exercise, or defend our self from legal claims; or The necessity to respond to your requests (such as responding to your requests regarding the handling of, deletion of, or changes to your Personal Data); Any other legal basis otherwise permitted by local laws; When do we share your Personal Data? We will never share your Personal Data with third parties outside of Opus2 Limited except in the limited circumstances described here: Opus2 Affiliates: Due to our global nature, your Personal Data may be shared with certain Opus2 Affiliates i.e. other companies within the Group. Access to Personal Data within Opus2 will be limited to those who have a need to know the information, for the purposes described in this Notice, and may include your interviewers, the relevant manager(s) of the respective job offer and other selected personnel within Opus2. Service Providers: Like many businesses, we may outsource certain Personal Data processing activities to trusted third party service providers to perform functions and provide services to us, such as IT consultants and companies providing support to or with our business technology systems, or to companies who carry out reference or background checking on our behalf and to companies that Public and Governmental Authorities. When required by law, or as necessary to protect our rights, we may share your Personal Data to entities that regulate or have jurisdiction over Opus2 or our Affiliates. When do we transfer your data outside of the EEA? Due to our global nature, the Personal Data you provide to us may be transferred to or accessed by Opus2 Affiliates outside of the UK e.g. if you apply for a role in one of our international offices. As a result, your Personal Data may be processed outside the country where you live if this is necessary for the fulfilment of the purposes described in this Notice. If you are applying for a role in the UK, your Personal Data will not be transferred outside of the EEA. Where your Personal Data is transferred outside of the UK, either (a) the recipient country will be a country which is recognized by the European Commission as providing an adequate level of protection in respect of Personal Data, or (b) we will in place adequate measures to protect your Data, such as organizational and legal measures (e.g. approved European Commission standard contractual clauses). How long do we keep your Personal Data? We keep your Personal Data for the period necessary to fulfil the purposes for which it has been collected (for details on these purposes, see above section How Do We Use Your Personal Data? ) and we may retain and use your Data to consider you for other positions.

5 The criteria used to determine our retention periods include: How long is the Personal Data needed to provide you with a job offer? Have you indicated that we can retain your Data to consider you for other positions? Are we subject to a legal, contractual, or similar obligation to retain the Personal Data? In most cases this will be in the unlikely event where Data must be retained for the purposes of litigation. If you are unsuccessful in your application, we shall retain a copy of your CV (all other Personal Data will be destroyed within a reasonable timeframe) for up to 6 months to be able to consider you for future opportunities which may be of interest to you. Of course, if you do not want to be considered for other positions or would like to have all your Personal Data removed or deleted before 6 months, you can contact us at: [dataprotection@opus2.com]. We will action this request straight away. If you are successful in your application, we shall retain a copy of your Personal Data for as long as you are an employee of Annotate, and a further 6 years once you have left the business. If you are required to submit to a BPSS Pre-Employment Check, we will permanently delete your DBS Certificate within 3 months of the date you begin employment. What are your responsibilities We would like to remind you that it is your responsibility to ensure, to the best of your knowledge, that the Data you provide us with are accurate, complete, and up-to-date. Furthermore, if you choose to share Personal Data of other people with us, it is your responsibility to collect such Data in compliance with local legal requirements. For instance, you should inform such other people, whose Personal Data you provide to us, about the content of this Notice and obtain their consent (provided they are legally competent to give consent) for the use of that Personal Data by us as set out in this Notice (including transfer and disclosure). What your choices? If you would like to review, change, restrict, or delete the Personal Data you have supplied to us (to the extent Opus2 is not otherwise permitted or required to keep such Data), if you wish to object to certain data processing operations (as permitted by applicable law), or if you would like to receive a copy of your Data (in a common machine readable format, to the extent such is required by applicable law), then you can contact: dataprotection@opus2.com. We will do our best to address your request in time and free of charge, except where it would require a disproportionate effort. In certain cases, we may ask you to verify your identity before we can act on your request. If you are unsatisfied with the reply received, you may then refer your complaint to the relevant regulator in your jurisdiction. Update to this Notice This Notice might change from to time. The most current version of this Notice will govern our use of your Personal Data and can be found on the Opus2 Website.