GDPR Statement

Our commitment

Evergreen Talent Group processes personal data about candidates, clients, prospective clients and other business contacts in line with the EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018. Our privacy statement explains in detail what we collect, why, and how long we keep it.

Privacy statement

The principles we follow

• We process personal data lawfully, fairly and transparently.

• We collect it for specified, legitimate purposes and use it only for them.

• We collect only what is necessary for those purposes.

• We keep it accurate, and correct known errors promptly.

• We keep it no longer than necessary, then delete it securely or anonymise it.

• We protect it with appropriate security, and we can show that we comply.

Why we are allowed to use it

Recruitment work usually relies on steps you ask us to take before a contract, our legitimate interests, a contract, or a legal obligation, whichever applies. Where we rely on your consent, it must be freely given and you can withdraw it at any time. Special-category information (health, for example) and information about criminal convictions need an additional legal condition and extra safeguards.

Candidate information

We collect only the information reasonably needed for recruitment and related services, either from you or from lawful professional and public sources, and we tell you how we use it. We share your details with a client only for a genuine recruitment purpose and where you have agreed to it or would reasonably expect it.

Keeping your data safe

• Personal data is held only in approved systems, protected by access controls, multi-factor authentication where available and other technical safeguards.

• Only the people who need it for their work can see it.

• It is never sent to personal email accounts, unapproved cloud storage or unauthorised AI tools.

• Suppliers who process personal data for us are checked first and bound by contract.

• We share personal data only where it is lawful and necessary. If it is transferred outside the European Economic Area, an approved legal transfer mechanism and appropriate safeguards are in place.

New systems and AI

Before we start using a new system, AI tool, sourcing method or marketing activity that involves personal data, we assess it. Where the processing is likely to create a high risk, we complete a data protection impact assessment first.

Your rights

• Access: a copy of the data we hold about you.

• Rectification: correcting data that is wrong or incomplete.

• Erasure: deleting your data where there is no reason for us to keep it.

• Restriction and objection: limiting or stopping how we use it.

• Portability: receiving your data in a common format.

• Automated decisions: asking about any decision made about you by automated means.

• Withdrawing consent, where we rely on it, at any time.

Making a request

Email privacy@evergreentalentgroup.com or write to Dublin, Ireland. We will reply within one month, and may need to confirm your identity first. There is normally no charge.

Data breaches

We treat any loss, misdirection or unauthorised access involving personal data as a possible breach and assess it straight away. If a breach puts people's rights at risk, we report it to the Data Protection Commission within 72 hours of becoming aware of it, and tell the people affected where the risk is high.

Review

We review this statement at least once a year, and whenever the law, our systems or the way we process personal data change.