Candidate data: We process personal data to, among others:
a) assess your suitability for the roles that seek to be filled by the clients;
b) undertake the recruitment process;
c) undertake personality and psychometric tests and thereafter generate reports for the clients;
d) undertake background checks and generate reports for the clients;
e) effectively communicate and coordinate during the recruitment process; and
Participant data: We process personal data to, among others:
a) offer the requested services, for example, talent development, coaching, training etc.;
b) undertake personality and psychometric tests and generate reports for the participants and/or clients;
c) effectively communicate and coordinate during the talent development process; and
Client data: We process personal data to, among others:
a) undertake the Know-Your-Customer process;
b) enter into service contracts;
c) effectively communicate and coordinate when offering services;
d) share information through our marketing campaigns;
e) share information about our events;
f) make tax payments and returns; and
Employee data: We process personal data to, among others:
a) assess your suitability for the role we seek to fill internally;
b) enter into an employment contract with you;
c) populate your employee file;
d) undertake the payroll process;
e) collect emergency contact details;
f) undertake background and reference checks;
g) onboard you on our pension and medical schemes;
h) celebrate your birthday; and
i) complete the employee details form.
Associates, Supplier and Partner data: We process personal data to, among others:
a) enter into supplier and partner contracts;
b) make the necessary payments;
c) effectively communicate and coordinate during the contract period;
d) share information about our marketing campaigns;
e) share information about our events;
f) make tax payments and returns; and
Alumni data: We process personal data to, among others:
a) effectively communicate and coordinate;
b) share information about our events; and
We also process personal data to:
a) communicate and respond to your requests and inquiries to the Company;
b) to engage in transactions with business partners;
c) to analyse, develop, improve and optimize the use, function and performance of our sites and products and services;
d) to manage the security and operation of our sites, facilities and networks and systems;
e) to operate our business;
f) to analyse the trends in our sector of operation;
g) for research purposes;
h) for marketing purposes in collaboration with our marketing agents;
help us establish or defend legal claims; and
i) to comply with applicable laws and regulations.
OUR LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATA
The Company processes your personal data for the following lawful bases:
a) where you consent to the processing for one or more specified purposes; or
b) where the processing is necessary;
c) for the performance of a contract to which you are a party or to take certain steps at your request before entering a contract;
d) for compliance with any legal obligation to which we are subject;
e) to protect your vital interests or that of another person/individual;
f) to enable us to perform a task carried on in public interest or in the exercise of official authority vested in us; and
g) for our legitimate interest.
SHARING OF YOUR PERSONAL DATA
Any disclosure of your personal data shall be in accordance with applicable law and regulations. We may disclose your personal data to:
a) potential employers, where you are a candidate.
b) individuals and organisations who hold information related to your reference such as current, past or prospective employers, referees, educators and examining bodies.
c) tax or other authorities when we believe in good faith that the law or other regulation requires us to share this data.
d) service providers who perform functions on our behalf (including external consultants, business associates and professional advisers such as lawyers, auditors and accountants, partners for assessment tools and training solutions, administration functions, technical and support functions and IT consultants carrying testing and development work on our systems).
e) third party outsourced IT and document storage providers.
debt-collection agencies or other debt-recovery organisations.
f) relevant third parties in the event of a reorganisation, merger, sale, joint venture, assignment, transfer or disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings).
g) emergency service providers where such disclosure to emergency service providers is necessary for your rescue, health and safety, including your approximate location.
SAFEGUARDING YOUR PERSONAL DATA
We care about protecting your personal data. That is why we have put in place appropriate measures that are designed to prevent personal data breaches. We do this by having in place a range of appropriate technical and organisational measures including measures to deal with any suspected personal data breaches.
If you suspect any misuse or loss of or unauthorized access to your personal data, please let us know immediately by contacting us.
STORAGE OF YOUR PERSONAL DATA
We will only keep your personal data for as long as it is necessary to achieve the purposes for which it was required unless the retention is required or authorized by law, reasonably necessary for a lawful purpose, you have consented to longer retention periods or if the personal data is required for auditing or compliance purposes.
THE RIGHTS YOU HAVE OVER YOUR PERSONAL DATA
The Act accords you several rights over your data.
a) right to information: you have a right to be informed of how the Company will use your personal data.
b) right of access: you are entitled to access your personal data that is in our possession or custody.
c) right to object: you can object to the processing of all parts of your personal data, unless we can demonstrate: a compelling legitimate interest for the processing which overrides your interests: orthat we are processing your personal data for the establishment, exercise or defense of a legal claim.
d) right to rectification: you have the right to request us to rectify or correct, personal data in our possession or under our control that is inaccurate, outdated, incomplete or misleading.
e) right to erasure: you can request us to delete or destroy personal data that we are no longer authorized to retain, or which is irrelevant, excessive, or obtained unlawfully.
d) right to data portability: you have the right to receive personal data concerning you in a structured, commonly used and machine-readable format and to transmit the data to another data controller without hinderance. Where technically possible, have personal data transmitted directly from us to another data controller or data processor.automated decision making you have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning or that significantly affects you. Career Connections may from time to time make decisions based on automated processing of your personal data. In such instance, you will be informed, in writing, whenever a decision based on automated processing is taken. In addition, you can request us to reconsider any decisions made based on automated processing or to take a new decision that is not based solely on automated processing.
e) right of restriction: You have the right to request us to restrict the processing of personal data where: you contest the accuracy of the personal data.the personal data is no longer required for the purpose of the processing.the processing is unlawful, or you are opposed to the erasure of the personal data and requested for restriction of its use instead.you have objected to the processing of personal data, pending verification as to whether the legitimate interests of the data controller or data processor overrides those of the data subject.
f) right to raise a complaint: You can raise a complaint about the processing of your personal data.
If you wish to exercise any of our rights above, please contact us using our contact address. We will endeavour to deal with your request without undue delay. We may ask for identification to ascertain whether we are issuing the data to the right person.
COMPLAINTS MANAGEMENT
If you have any complaint regarding our compliance with this Privacy Policy, please contact us. We will investigate and attempt to resolve complaints and disputes regarding use of personal data in accordance with our policies and the applicable law. You also have the right to file a complaint with the Office of the Data Protection Commissioner.
INTERNATIONAL TRANSFER OF YOUR PERSONAL DATA
To provide you with the best services and carry out the purposes outlined in this Privacy Policy, we may need to transfer your personal data;
a) to our oversees partners or service providers;
b) to oversees clients; or
c) to cloud-based storage providers.
We will only transfer your data outside Kenya where such transfer is compliant with the provisions of the Act.
To ensure that your personal data receives adequate levels of protection, we shall put in place appropriate procedures with the third parties we share your personal data with to ensure that your personal data is treated by those third parties in a way that is consistent with, and which respects the data protection laws.
