Legal

Privacy Policy

Last updated:

Várinn Recruitment ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit varinn.net or engage with our recruitment services.

We are the data controller for the personal data we process. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data We Collect

We may collect and process the following categories of personal data:

Contact and identity data: name, email address, telephone number, and any other information you provide when submitting an enquiry through our contact form.

Professional data: CV, employment history, qualifications, skills, and career preferences submitted as part of a recruitment engagement.

Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system, and other technology on the devices you use to access the Site.

Usage data: information about how you use the Site, including pages visited and time spent.

2. How We Collect Your Data

We collect data directly from you when you complete our contact form, submit a speculative application, or correspond with us by email or telephone.

We may also receive data about you from third parties, including professional networking platforms (such as LinkedIn), referrals from existing clients or candidates, and publicly available professional directories.

Technical and usage data is collected automatically as you interact with the Site using cookies and similar technologies.

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to enquiries and provide recruitment services, including identifying suitable roles for candidates and suitable candidates for client vacancies.

To maintain and manage our relationship with you as a candidate or client.

To comply with legal and regulatory obligations.

To improve the Site and our services through analysis of usage data.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Legitimate interests: to operate our recruitment business, respond to enquiries, and match candidates with suitable opportunities.

Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Legal obligation: where we are required to process data to comply with a legal or regulatory requirement.

Consent: where you have given us explicit consent to process your data for a specific purpose, such as retaining your CV for future opportunities.

5. Data Sharing

We do not sell your personal data. We may share your data with:

Client organisations, with your knowledge and consent, as part of a recruitment process.

Service providers who process data on our behalf, such as IT and communications providers, subject to appropriate data processing agreements.

Regulatory or law enforcement authorities where required by law.

6. International Transfers

Given the global nature of our recruitment operations across 50+ countries, your personal data may be transferred to and processed in countries outside the UK and European Economic Area (EEA).

Where we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner's Office (ICO), to protect your data to the same standard as required under UK GDPR.

7. Data Retention

We retain candidate data for up to two years from the date of last contact, unless you ask us to delete it sooner or consent to a longer retention period.

Client data is retained for the duration of our business relationship and for a period of six years thereafter, in accordance with our legal and contractual obligations.

Technical and usage data is retained for no longer than 12 months.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you.

Right to rectification: to request correction of inaccurate or incomplete data.

Right to erasure: to request deletion of your personal data in certain circumstances.

Right to restrict processing: to request that we limit how we use your data.

Right to data portability: to receive your data in a structured, machine-readable format.

Right to object: to object to processing based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact us via the enquiry form on our Contact page. We will respond within one month of receiving your request.

9. Cookies

The Site uses essential cookies necessary for its operation. We do not currently use tracking or advertising cookies. If this changes, we will update this policy and obtain your consent where required.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no transmission over the internet is completely secure, and we cannot guarantee the security of data transmitted to the Site.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when the policy was last revised. We encourage you to review this page periodically.

12. Contact and Complaints

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us via the enquiry form on our Contact page.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.