Data Protection Policy
Logic Promotions ltd
1. Introduction
Logic Promotions ltd is committed to protecting the personal data of all individuals we engage with, including candidates, clients, employees, and suppliers. This Data Protection Policy outlines our approach to ensuring that all personal data is collected, processed, stored, and deleted in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Data Protection Act 2018.
2. Scope
This policy applies to:
- All employees, contractors, and temporary staff of Logic Promotions ltd
- All data subjects whose personal data is collected or processed by the agency
3. Definitions
- Personal Data: Any information relating to an identified or identifiable individual.
- Processing: Any operation performed on personal data, including collection, storage, use, and deletion.
- Data Controller: Logic Promotions ltd is the controller of the data provided by candidates and clients.
- Data Processor: Any third party that processes data on behalf of Logic Promotions ltd.
4. Lawful Basis for Processing
Logic Promotions ltd processes personal data under the following lawful bases:
- Consent (e.g., for job application submissions)
- Contract (e.g., placing candidates with clients)
- Legal Obligation (e.g., tax and employment law)
- Legitimate Interest (e.g., recruitment services)
5. Types of Personal Data Collected
- Candidate data: CVs, contact details, employment history, references, identification
- Client data: Contact names, emails, and job descriptions
- Employee data: HR records, payroll, and performance data
6. Data Subject Rights
All individuals have the following rights:
- Access their personal data
- Correct inaccurate data
- Request deletion of data
- Restrict or object to processing
- Data portability
- Withdraw consent (where applicable) Requests will be addressed within one month.
7. Data Retention
Data is retained for no longer than is necessary:
- Candidate data: 2 years after last contact (unless consent is renewed)
- Client data: 6 years post-contract
- Employee data: As required by employment and tax law
8. Data Sharing
We only share personal data:
- With clients (for job placement purposes)
- With service providers (e.g., payroll processors)
- When legally required (e.g., Revenue Commissioners)
All third-party processors are vetted and required to comply with GDPR.
9. Data Security
We use appropriate technical and organizational measures, including:
- Encrypted storage
- Password-protected systems
- Staff training
- Regular audits
10. Breach Management
Any data breach will be assessed and, if necessary, reported to the Data Protection Commission within 72 hours, and to affected individuals where required.
11. Roles and Responsibilities
The Data Protection Officer (or designated compliance officer) ensures ongoing compliance and acts as the main contact for data protection queries.
12. Review
This policy is reviewed annually or upon significant changes to our operations or data protection laws.