Privacy Notice – Candidates
Who collects and controls personal information?
Your personal information is collected and controlled by Mlegal Group, Inc which has offices in San Francisco CA, New York NY, Houston TX and Palo Alto CA. Mlegal Group, Inc’s head office is at 437 Kipling Street, Suite 100, Palo Alto, California 94301.Mlegal Group, Inc has a subsidiary in the United Kingdom, Mlegal Group UK Limited, 200 Aldersgate, London, EC1A 4HD.For the purposes of the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018 (“data protection legislation”) Mlegal Group, Inc’s Data Protection Manager is Karina Robles.
How do we collect personal information?
We collect personal information on line, from publicly available resources such as law firm websites, in face to face meetings and telephone conversations, from questionnaires, by email and in writing.
What personal information do we collect?
We routinely collect some or all of the following personal information from you: name, address, email, mobile phone/cell, landline, Bar number, social security number, employment history, Board Memberships, educational background, Association Memberships, practice details, client information, personal opinions and areas of expertise.
What if I visit your website www.mlegalgroup.com?
We do not use any information collecting or tracking cookies on our site. However, if you choose to submit a request through our website, your name, email address, and any information you voluntarily provide will be routed through our internal email system and may be stored in our candidate tracking database. If you wish to have this information removed, please email firstname.lastname@example.org.
What do we use your personal information for?
We will use your personal information for a number of purposes including the following:
- in undertaking candidate research
- to build our knowledge of the legal market and the available talent resource
- to provide personalised career guidance and advice throughout a candidate’s career
- to facilitate the lateral and Partner recruitment process
If we need to process your personal information for a purpose which is different from or incompatible with that for which it was originally collected, we will provide you in advance with information on that other purpose.
Will you be contacted for marketing purposes?
We will only send you marketing emails or contact you if you give us your clear, informed and unambiguous consent or if you have already agreed to be on one of our mailing lists.
Every message we send you will give you the option to opt-out of receiving any further communication from us.
How do we ensure that our collection of your personal information is lawful and fair?
For the purposes of data protection legislation, the legal grounds for our processing your personal information is that the processing is necessary to our legitimate interests or those of a third party where they are not overridden by your fundamental rights and freedoms. Our legitimate interests include provision of services to the legal sector which are essential to the lateral/Partner recruitment process and required by law firms.
Is your personal information shared with anyone?
We will only share your personal information with your expressed authorization; with business partners and vendors working on our behalf who comply strictly with our instructions and have in place the appropriate organisational and technical safeguards; or if we are required by law to do so.
Where do we process your personal information?
We process the majority of your personal information at the closest office to your geographical location, however, we may also use one or more of our registered offices listed below:
- Three Embarcadero, Suite 1130, San Francisco CA, 94111
- 437 Kipling Street, Suite 100, Palo Alto, CA 94301
- One Rockefeller Plaza, Floor 10, New York, NY 10022
- 200 Aldersgate, London, EC1A 4HD
Third parties appointed by us (under contract) may also process your information.
We do not transfer your personal information outside the European Economic Area and countries with adequacy status including the U.S.
How long will we hold your personal information?
We will hold your personal information on our systems for as long as is necessary for the relevant activity or purpose described in this notice or as long as is prescribed by law.
How do we keep your personal information safe?
We are committed to ensuring that your personal information is secure. In order to prevent unauthorised access, disclosure or loss of your personal information, we have put in place the appropriate organisational and technical safeguards to ensure the security of the personal information we collect, including appropriate levels of encryption, data back-up and access-control. We have a Group-wide Information Technology Security Policy which all parties involved in processing personal data are mandated to follow.
What rights do you have over your personal information?
By law you have the right to:
- Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are processing it lawfully;
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected;
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below);
- Object to processing of your personal information where we are relying on our legitimate interests (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes;
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it;
- Request the transfer of your personal information to another party.
Can you withdraw your consent to processing of your personal data?
Where the basis for processing of your personal data is your clear, informed and unambiguous consent, such consent can be withdrawn by you at any time. We will cease processing your personal information immediately, however this will not affect the lawfulness of any processing based on your consent before it was withdrawn.
Who can you complain to?
In the United States you have the right to complain to the Department of Commerce, Federal Communications Commission or Better Business Bureau.
In the United Kingdom, you have the right to complain to the Information Commissioner’s Office (ICO) if you believe we have not handled your request in an appropriate manner. For information on contacting the ICO please go to: https://ico.org.uk/concerns/
Will you use my data to make automated decisions?
You will not be subject to decisions which will have a significant impact on you based solely on automated decision-making, including profiling, unless we have a lawful basis for doing so and we have notified you. We do not envisage that any decisions will be taken about you using automated means, however we will notify you if this position changes.
What happens if this notice changes?
We may need to make changes to this notice to comply with legal or data processing developments. If we change this notice we will provide information on our web site enabling visitors to review the changes. Any significant change to our use of your personal information will be communicated to you and you will be able to decide whether you agree to the new use.