Privacy Policy for Haven HR
At Haven HR, we are committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you engage with our human resources consulting services or interact with our online platform. We adhere to the principles of the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Who We Are
Haven HR provides comprehensive human resources consulting services including Talent Acquisition & Recruitment, Employee Relations Management, Performance & Reward Systems, HR Strategy Development, Training & Development Programmes, HR Compliance & Policy Setting, Organisational Design & Change Management, and HR Technology Implementation.
Our registered address is: 14 The Quay, Floor 3, Waterford, X91 A32B, Ireland.
Information We Collect
We collect various types of information to provide and improve our services to you. This may include:
- Personal Identification Information: Name, address, email address, phone number, professional title, company name, and other contact details.
- Professional Information: CVs, resumes, employment history, educational background, skills, qualifications, salary expectations, and references for recruitment services.
- Client-Specific Data: Information related to your organisation's HR practices, employee data (anonymised or aggregated where possible), performance metrics, and policy documents, as necessary for delivering our consulting services.
- Technical Data: IP address, browser type, operating system, referring URLs, access times, and other technical information when you visit our online platform.
- Communication Data: Records of communications with us, including emails, phone calls, and other correspondence.
How We Collect Your Information
- Directly from You: When you contact us for services, apply for a role, fill out forms on our online platform, or communicate with us.
- From Clients: When providing our consulting services, clients may share employee data with us under strict confidentiality agreements.
- From Third Parties: From professional networking sites, publicly available sources, or referrals, particularly for talent acquisition. We will always inform you when we receive your data from third parties where this is not obvious.
- Automatically: Through cookies and similar technologies when you interact with our online platform.
How We Use Your Information
We use your information for the following purposes, relying on various legal bases under GDPR:
- To Provide Services (Contractual Obligation): To deliver our HR consulting services, including talent acquisition, employee relations, strategy development, training, and compliance.
- For Recruitment (Legitimate Interest/Consent): To assess your suitability for roles, communicate with you regarding opportunities, and manage the recruitment process.
- To Improve Our Services (Legitimate Interest): To understand how our services are used, conduct research, and enhance our offerings.
- For Communication (Legitimate Interest/Consent): To respond to your inquiries, provide updates, and send relevant information about our services.
- For Marketing (Consent): With your explicit consent, to send you promotional materials about our new services, events, or industry insights. You can withdraw consent at any time.
- To Comply with Legal Obligations (Legal Obligation): To meet legal, regulatory, or ethical requirements, including those related to employment law, data protection, and anti-fraud.
- For Security Purposes (Legitimate Interest): To protect our online platform, prevent fraud, and ensure the security of our data and services.
Disclosure of Your Information
We may share your information with:
- Clients: For recruitment services, your professional information may be shared with potential employers.
- Our Service Providers: Third-party vendors who assist us in providing our services, such as IT support, web hosting, and analytics. These providers are contractually obligated to protect your data and only use it for the purposes specified by us.
- Legal and Regulatory Authorities: When required by law or in response to valid legal requests, such as court orders or government regulations.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred to a new entity.
We will not sell or rent your personal information to third parties for marketing purposes without your explicit consent.
International Data Transfers
As an Irish company, we primarily process data within the European Economic Area (EEA). If any of our service providers transfer data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to guarantee the protection of your personal data.
Data Security
We implement robust technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures include encryption, access controls, secure servers, and regular security assessments. Our staff are trained on data protection and confidentiality.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The precise retention period will depend on the nature of the data and the purpose of processing. For instance, recruitment data may be kept for a period after a role is filled for legitimate business interests, unless you request earlier deletion.
Your Data Protection Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- The Right to Be Informed: To know how your data is being used.
- The Right of Access: To request a copy of the personal data we hold about you.
- The Right to Rectification: To request correction of inaccurate or incomplete data.
- The Right to Erasure ( "Right to be Forgotten"): To request deletion of your personal data under certain circumstances.
- The Right to Restrict Processing: To request that we limit the way we use your data.
- The Right to Data Portability: To receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller.
- The Right to Object: To object to the processing of your data based on legitimate interests or for direct marketing.
- Rights in Relation to Automated Decision Making and Profiling: To safeguards against solely automated decisions.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.
Cookies
Our online platform may use cookies and similar tracking technologies to enhance your experience, analyse site usage, and improve our services. You can manage your cookie preferences through your browser settings.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page and encourage you to review it periodically.
Contact Us
If you have any questions about this Privacy Policy or our data protection practices, please contact us at:
Haven HR
14 The Quay, Floor 3
Waterford, X91 A32B
Ireland
You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) if you believe your rights have been infringed.