Subject Access Requests

Data Subject Access Request Form

Article 15 of the EU General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) grants you the right to access your personal data held by C&M Recruitment Ltd, including the right to obtain confirmation that we process your personal data, receive certain information about the processing of your personal data, and obtain a copy of the personal data we process.

Please print, complete, sign and send this completed Subject Access Request Form along with proof of your identity (copy of passport or utility bill dated in the past 3 months – see further below at Section II) by email to data@candm.co.uk (by providing a scan of the original documents) or by Recorded Delivery Postal Mail to this address:

C&M Recruitment Ltd

Floor 5

15 Half Moon Court

Leading off Bartholomew Close

London

EC1A 7HF

We expect to respond within one month of receipt a fully completed form and proof of identity sent to the above address by recorded delivery.

In addition to exercising your access right, the GDPR also grants you the right to:

Request correction or erasure of your personal data.
Restrict or object to certain types of data processing.
Make a complaint with the local data protection authority.

For more information on your rights under the GDPR, see C&M Recruitment Ltd’s Privacy Notice available here.

It is UK Law to record a list of all Subject Access Requests. A copy of this form will be scanned and held for audit purposes of ICO Compliance in our secure storage for future reference.

Subject Access Request Form

I. Please provide the data subject's information in the space provided below.

If you are making this request on the data subject's behalf, you should provide your name and contact information in Section III.

We will only use the information you provide on this form to identify you and the personal data you are requesting access to, and to respond to your request.

First and last name:

Any other names that you have been known by (including nicknames):

Home address:

Date of birth:

Telephone number:

Email address:

If you are a current or former employee of C&M Recruitment Ltd, please provide your employee identification number and your approximate dates of employment:

Please provide other unique identifiers or related information to help us locate your personal data (for example, government identification number or customer account number):

II. Proof of Data Subject's Identity

We require proof of your identity before we can respond to your access request. To help us establish your identity, you must provide identification that clearly shows your name, date of birth, and current address.

We accept a photocopy or a scanned image of one of the following as proof of identity: passport or photo identification such as a driver's license, national identification number card, or birth or adoption certificate.

Please also attach a copy of a bank or credit card statement or utility bill showing your current address and dated within the last three months.

If you have changed your name, please provide the relevant documents evidencing the change.

If you do not have any of these forms of identification available, please contact C&M Recruitment Ltd’s Data Protection Officer, Owen Mckeon at 0161 238 4497 or owen@candm.co.uk for advice on other acceptable forms of identification.

We may request additional information from you to help confirm your identity and your right to access, and to provide you with the personal data we hold about you. We reserve the right to refuse to act on your request if we are unable to identify you.

III. Requests Made on a Data Subject's Behalf

Please complete this section of the form with your name and contact details if you are acting on the data subject's behalf.

First and last name:

Home address:

Date of birth:

Telephone number:

Email address:

We accept a photocopy or a scanned image of one of the following as proof of your identity: passport or photo identification such as a driver's license, national identification number card, or birth or adoption certificate.

We may request additional information from you to help confirm your identity if necessary.

We also require proof of the data subject's identity before we can respond to the request. To help us establish the data subject's identity, you must provide identification that clearly shows the data subject's name, date of birth, and current address.

Please also attach a copy of a bank or credit card statement or utility bill showing the data subject's current address and dated within the last three months.

If the data subject has changed his or her name, please provide the relevant documents evidencing the change.

We accept a copy of the following as proof of your legal authority to act on the data subject's behalf: [a written consent signed by the data subject, a certified copy of a Power of Attorney, or evidence of parental responsibility.

We may request additional information from you to help confirm the data subject's identity. We reserve the right to refuse to act on your request if we are unable to identify the data subject or verify your legal authority to act on the data subject's behalf.

IV. Information Requested

To help us process your request quickly and efficiently, please provide as much detail as possible about the personal data you are requesting access to. Please include time frames, dates, names, types of documents, file numbers, or any other information to help us locate your personal data.

For example, you may specify that you are seeking:

Employment records or personnel records.
Personal data held by HR.
Billing information.
Photographs.
Video footage.

We will contact you for additional information if the scope of your request is unclear or does not provide sufficient information for us to conduct a search (for example, if you request "all information about me").

We will begin processing your access request as soon as we have verified your identity and have all of the information we need to locate your personal data.

In response to your request, we will provide you with the information required by Article 15 of the GDPR, including information on:

The purposes of processing.
Categories of personal data processed.
Recipients or categories of recipients who receive personal data from us.
How long we store the personal data, or the criteria we use to determine retention periods.
Information on the personal data's source if we do not collect it directly from you.
Whether we use automated decision-making, including profiling, the auto-decision logic used, and the consequences of this processing.
Your right to: (i) request correction or erasure of your personal data; (ii) restrict or object to certain types of processing with respect to your personal data; and (iii) make a complaint with the local data protection authority.

If the information you request reveals personal data about a third party, we will either seek that individual's consent before responding to your request, or we will redact third parties' personal data before responding. If we are unable to provide you with access to your personal data because disclosure would violate the rights and freedoms of third parties, we will notify you of this decision.

Applicable law may allow or require us to refuse to provide you with access to some or all of the personal data that we hold about you, or we may have destroyed, erased, or made your personal data anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal data, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

V. Signature and Acknowledgment

I, ___________________________, confirm that the information provided on this form is correct and that I am the person whose name appears on this form. I understand that: (1) C&M Recruitment Ltd must confirm proof of identity and may need to contact me again for further information; (2) my request will not be valid until C&M Recruitment Ltd receives all of the required information to process the request; and (3) I am entitled to one free copy of the personal data I have requested, and acknowledge that for any further copies I request, C&M Recruitment Ltd may charge a reasonable fee based on administrative costs.

If you would like to receive a copy of the personal data you are requesting access to, please indicate below whether you would like a hard copy or an electronic copy:

____ Hard copy.

____ Electronic copy.

__________________________________

Signature

__________________________________ (wet signature)

Date

VI. Authorized Person Signature

I, _____________________________, confirm that I am authorized to act on behalf of the data subject. I understand that C&M Recruitment Ltd must confirm my identity and my legal authority to act on the data subject's behalf and may need to request additional verifying information.

__________________________________

Signature

___________________________________ (wet signature)

Date