CUSTOMER DATA: PRIVACY NOTICE CONCERNING PERSONAL DATA PROCESSED

1.    Introduction

Creative Artists Agency UK Limited (“Company”, “we”, “our”) is committed to the protection and promotion of individual privacy. In connection with your use of our Services (see below), it is necessary for the Company to collect, store and use personal data about you (the “Candidate”, “you”, “your”) for specified purposes in order to provide the Services. The Company will process any such personal data in accordance with the data protection principles set out in the European Union’s General Data Protection Regulation 2016 (“GDPR”).

This notice (“Notice”) provides relevant information about the personal data that is processed by the Company in the UK and covers any of the personal data that Candidates submit to Company for the recruitment process.

2.    Identity of the Data Controller

The Company is responsible for handling your personal data and is the data controller in respect of your personal data. All written inquiries should be sent to the following address:

Katerina Krumwiede, Creative Artists Agency 2000 Avenue of the Stars Los Angeles, CA 90067 USA, 424-288-2000, privacy@caa.com

3.    Purposes for Processing Personal Data

Company processes personal data in order to place Candidates with prospective employers (our “Clients”).

We will notify you of any changes to the information we collect or to the purposes for which we collect and process it in this context.
4.    Categories of Personal Data that we Process, our Purposes for Processing and our Lawful Basis

Categories of Personal Data: Name, address, telephone number, email address
Purpose of Processing: To communicate with you
Lawful Basis: Legitimate interest – promote our services

Categories of Personal Data: Name, address, telephone number, email address and photo; application status
Purpose of Processing: To assess your suitability for employment and administer your    application
Lawful Basis: Legitimate interest - efficiently fulfill our contractual obligations only to the extent that there is a contract between CAA and the data subject before employment is secured; client management

Categories of Personal Data: 
•Qualifications, skills, experience and employment history
•Information included in your CV or cover letter, such as job history, academic background, skills and competencies, personal interests, languages spoken, professional and trade qualifications
•Job preferences for example, willingness to relocate and type of employment sought
•Current and historic salary details together with salary expectations
•Details of your current benefit entitlements
Purpose of Processing: To facilitate the recruitment selection process and determine which roles you are suitable for
Lawful Basis: Legitimate interest – efficiently fulfill our contractual obligations, only to the extent that there is a contract between CAA and the data subject before employment is secured; Client management

Categories of Personal Data: 
•Qualifications, skills, experience and employment history
•Information included in your CV or cover letter, such as job history, academic background, skills and competencies, personal interests, languages spoken, professional and trade qualifications
•Job preferences for example, willingness to relocate and type of employment sought
•Current and historic salary details together with salary expectations
•Details of your current benefit entitlements
Purpose of Processing: To maintain records of applications we receive
Lawful Basis: Legitimate interest – management reporting

Categories of Personal Data: 
•Qualifications, skills, experience and employment history
•Information included in your CV or cover letter, such as job history, academic background, skills and competencies, personal interests, languages spoken, professional and trade qualifications
•Job preferences for example, willingness to relocate and type of employment sought
•Current and historic salary details together with salary expectations
•Details of your current benefit entitlements
Purpose of Processing: To conduct business reporting and internal management tasks
Lawful Basis: Legitimate interest - management reporting

Categories of Personal Data: Travel information (e.g., passports)
Purpose of Processing: To facilitate the recruitment selection process and determine which roles you are suitable for; to ensure you are entitled to relocate to areas outside the UK for employment
Lawful Basis: Legitimate interest – efficiently fulfill our contractual obligations; client management

Categories of Personal Data: Eligibility to work documentation
Purpose of Processing: To ensure you are entitled to work in the UK or the country where the position is located
Lawful Basis: Legal obligation – to ensure you are entitled to work in the UK or the country where the position is located

Categories of Personal Data: Names and contact details for references (please note that it is your responsibility to obtain consent from your references prior to providing personal information about them)
Purpose of Processing: To conduct reference checks
Lawful Basis: Legitimate interest – client management; provide suitable candidates to clients 

If you object to us using your personal data for these purposes, including direct marketing, please let us know using the address provided in Section 2.

 

If you object to us using your personal data for these purposes, including direct marketing, please let us know using the address provided in Section 2.

5.    How We Source Your Personal Data

We obtain the majority of your personal data directly from you, but we may also obtain your personal data from a company with which you are associated as an employee, officer or shareholder. We may also obtain your personal data from publicly available sources, third parties, or through your use of our website.
Company may also collect personal data about Candidates from other third parties, subject to your consent or where required by law, including but not limited to academic history, references supplied by former employers and information from employment background check providers. Company will seek information from third parties only once we have communicated to you that we will be doing so.
We may also review social media profiles (generally professional networks) and consider information that is publicly available.
6.    Recipients of Personal Data and International Transfers

We may also share your personal data with our affiliates, subsidiaries and parent company.
In some circumstances, on an as needed basis, Company may transfer your personal data outside the European Union (“EU”)/European Economic Area (“EEA”) to our Clients.
We may disclose information about you to organisations that provide a service to us, on the understanding that they will keep the information confidential and will comply with the GDPR and other relevant data protection laws.
We may share your information with the following types of service providers:
1.    subsidiaries
2.    regulatory authorities
3.    legal and other professional advisors
4.    prospective employers
We may also transfer your personal data to potential purchasers and their advisors, subject to appropriate confidentiality obligations, in the event we decide to dispose of all or parts of our business.

If and when transferring your personal data outside the EU or EEA, we will only do so using one of the following safeguards:

a)    the transfer is to a non-EEA country that has been the subject of an adequacy decision by the EU Commission;
 
b)    the transfer is covered by a contractual agreement, which covers the GDPR requirements relating to transfers to countries outside the EEA;
c)    the transfer is to an organisation which has binding corporate rules approved by an EU data protection authority; or
d)    the transfer is to an organisation in the US that is EU-US Privacy Shield certified.

International transfers to our affiliates, subsidiaries and parent company are governed by EU Commission-approved Standard Contractual Clauses.

You may request a copy of these agreements by contacting us using the following email address: privacy@caa.com.
7.    Your Rights

You have the following rights:

a)    to obtain access to your personal data - you may request information on how your personal data is handled by us and request a copy of such personal data;
b)    to request us to correct or update your personal data if it is inaccurate or out of date;
c)    to object to the processing of your personal data for the purposes of our legitimate interests, unless we:
i.    demonstrate compelling legitimate grounds which override your right to object, or
ii.    the processing is necessary for the establishment, exercise or defence of legal claims;
d)    to erase your personal data held by us:
i.    which are no longer necessary in relation to the purposes for which they were collected,
ii.    to the processing of which you object, or
iii.    which may have been unlawfully processed by us;
e)    to restrict processing by us, i.e. the processing will be limited to storage only:
i.    where you oppose to deletion of your personal data and prefer restriction of processing instead, or
ii.    where you object to the processing by us on the basis of its legitimate interests; and
f)    to transmit personal data, you submitted to us back to you or to another organisation in certain circumstances.
The right to erasure, to restrict processing and to transmit personal data listed above may not apply in cases where the processing is necessary for compliance with our legal obligation or the establishment, exercise or defence of legal claims.

Where the processing of your personal data is based on your consent you have the right to withdraw your consent at any time, this will not affect the lawfulness of processing based on your consent prior to withdrawal.

You also have the right to lodge a complaint with the data protection Supervisory Authority, if you are not happy with how the Company processes your personal data and we could not provide you with a satisfactory resolution to your request.
 
These rights are not absolute and may be subject to certain conditions under the GDPR. Should you wish to exercise any of these rights, please contact privacy@caa.com.

8.    Retention of Personal Data

Candidate personal data will not be kept for longer than is necessary for the recruitment process, unless the data is relevant to a successful Candidate’s employment.

9.    Contact Us

For more information on how we process your personal data or if you are unhappy with how we handle your personal data, please contact us at privacy@caa.com or the address specified in Section 2.