This is a personal information collection statement under the Personal Data (Privacy) Ordinance (“the Ordinance”).
It is necessary for employees and potential employees of Waystone Governance (HK) Limited (“Waystone”, formerly known as DMS Governance (Hong Kong) Limited) to supply Waystone with personal data in connection with their application or employment.
This statement sets out details of how and why we, together with third parties, collect and process personal information in connection with your application for employment and/or employment with us. We do this in compliance with our obligations under the Ordinance. This statement explains what personal data is collected, the purposes for which it is used, the third parties to whom it may be disclosed and how individuals can exercise their rights in relation to their personal data.
We are the controller of your personal data. We engage third party service providers to process such personal data on our behalf and those third parties act as processors. We are not required to designate a data protection officer.
If you have any questions about the use of your personal data, your data protection rights or if you want to exercise those rights, please contact Laura O’Connell or Louise Mooney.
Laura O’Connell +353.1.619.2340 – [email protected]
Louise Mooney +353.1.619.2329 – [email protected]
Waystone, 3rd Floor, 76 Baggot Street Lower, Dublin, D02 EK81, Ireland
Personal Data that we Process
We collect personal data relating to you from you, or from public sources and in connection with our dealings with you or associated interactions with us and in connection with ensuring compliance with our legal obligations. This may include the following:
- Recruitment related data and information on your personnel file – these include your name, signature, postal address, nationality, email address, fax number, date and place of birth, nationality, curriculum vitae, bank account details, tax identification, credit history, signatures, references, work and educational history, interview notes and other contact details, right to work documentation, your PPS or social security number (or equivalent); passport number; utility bills, photographic identification and verification such as copies of your passport, passport number, gender, drivers licence and address verification, photographs, working hours, annual leave and other holiday records, emergency contact details, marital status, next of kin and family details.
- Payroll information – these include bank account details, salary arrangements, bonus entitlements and allowances.
- Performance, grievance and disciplinary details – these include performance and grievance review forms, notes from performance review and grievance investigation meetings, performance improvement and grievance plan documentation, witness statements, complaints.
- Information obtained through electronic means – these include emails stored in your email inbox, data relating to your internet browsing history, CCTV footage and other information obtained through electronic means such as swipe-card records
- Medical information and pension details – these include sick certificates, medical records, sick leave records, sick pay records, occupational health assessments and pension details.
- Termination of our relationship – these include resignation letters, exit interviews and reference letters.
- Special categories of more sensitive personal information – information about your race or ethnicity, religious beliefs, sexual orientation and political opinions, membership of a trade union or equivalent industrial relations body, information about your health, including any medical condition, health and sickness records, genetic information and biometric data.
We may collect and process personal data relating to you in connection with our on-going relationship with you, such as via correspondence and calls, and in connection with our relationship with you. Telephone calls with you may be recorded for the purposes of record keeping, security and training.
In addition, we may collect personal data relating to you from third party sources in connection with complying with legislation relating to anti-money laundering, taxation, and other legislation or for vetting or screening purposes or fitness and probity assessments or from employment or credit reference agencies or previous employers.
Purposes of Processing
Personal data will be processed for the following purposes:
- processing your application with us and during the recruitment process, to assess your suitability for the role, establishing your identity and determine the terms on which you work with us and to manage an effective recruitment process;
- during our relationship for normal HR management and administration purposes, to ensure that the terms and conditions of your appointment are properly adhered to and managed, to manage the relationship in accordance with relevant policies. This is necessary for the performance of our contract with you;
- paying you and (where relevant) deducting tax and national insurance and other contributions;
- to ensure your health and safety at work, assess your fitness to work, to provide appropriate workplace adjustments, to monitor and manage sickness absence and to administer benefits;
- to afford natural justice and fair procedures (where relevant);
- conducting performance reviews, managing performance and determining performance requirements including decisions about promotions and pay reviews;
- to protect your vital interests in the event of an emergency or accident;
- to pay trade union premiums or register your status as a protected employee;
- making decisions about your continued relationship with us, to properly manage the termination of the relationship and following the termination of the relationship in accordance with relevant policies;
- complying with our legislative and regulatory obligations in connection with our dealings with you, including pension law, revenue law, health and safety law, taxation, crime-detection, prevention, investigation and prosecution, the prevention of fraud, bribery, anti-corruption, tax evasion or equivalent, to prevent the provision of financial and other services to those who may be subject to economic or trade sanctions, in response to legal or court requests or requests from regulatory authorities or where it is in the public interest;
- for quality control, business and statistical analysis, market research or for tracking fees and costs or for customer service, training and related purposes;
- to communicate with you by way of notice pursuant to applicable legislation or our constitution or circulating reports or other correspondence to you;
- maintaining appropriate business records;
- to ensure network and information security, including preventing unauthorised access to our computer and electronic communications system and preventing malicious software distribution;
- where required for tax reporting purposes;
- education, training and development requirements;
- equal opportunities monitoring;
- to respond to, evaluate or deal with any queries, complaints or legal issues in relation to you;
- internal and external audits and, where necessary, investigations;
- establishing, exercising, defending or gathering evidence relating to any legal claims, litigation or grievance or disciplinary hearings;
Recipients of Data
Your personal data may be disclosed to various recipients in connection with the above purposes, including:
- our Board and (in certain circumstances) other employees of the Waystone group of companies;
- payroll providers, pension and health insurance providers, pensions trustee;
- to the Revenue Commissioners and other foreign tax authorities as required by applicable law;
- to the Securities & Futures Commission, Central Bank of Ireland, Cayman Islands Monetary Authority, the Financial Conduct Authority, National Futures Association, Commission de Surveillance du Secteur Financier, the Workplace Relations Commission, Department of Social Protection, Pensions Authority, auditors, or other competent governmental or regulatory authorities, trade unions or equivalent industrial relations body and bodies as requested or required by law;
- to other third parties who we engage to provide services to us, such as professional advisers, independent investigators, insurers, occupational health specialists, legal advisers, auditors and IT service providers;
- to screening and other reference agencies in order to carry out money laundering and identity checks and to comply with legal obligations;
- to other members of our corporate group or the corporate groups of the entities referred to above, as well as affiliates, agents and delegates, both within and outside the EEA; and
- in the context of a business or group company sale, re-organisation or restructuring or corporate finance activities.
In connection with the above purposes your personal data may be transferred outside Hong Kong, including to a jurisdiction which is not recognised by the Privacy Commissioner as providing for an equivalent level of protection for personal data as is provided for in Hong Kong. These jurisdictions may include the European Union, the United States of America, the Cayman Islands and Singapore. If and to the extent that we do so, we will ensure that appropriate measures are in place to protect the privacy and integrity of such personal data and in particular will comply with our obligations under the Ordinance.
In particular Waystone will take all reasonable precautions and exercise all due diligence to ensure that the data will not, in that place, be collected, held, processed, or used in any manner which, if that place were Hong Kong, would be a contravention of a requirement under the Ordinance.
Further details of the measures that we have taken in this regard and the territories to which your personal data may be transferred are available by contacting us as set out above.
We will retain your personal data for the duration of your relationship with us and for such a period of time after the relationship ends as is necessary to comply with our obligations under applicable law and, if relevant, to deal with any claim or dispute that might arise.
You have the right to access your personal data, together with other information about our processing of that personal data and the right to rectify any inaccuracies in your personal data.
What happens if you do not provide us with your information
It is voluntary for you to provide the personal data requested by us. However, if we believe that we require relevant information to effectively and properly manage your application or the employment relationship, we may not be able to process your application or continue our relationship with you or (in certain circumstances) to pay you or administer your pension if you decline to provide us with that personal data.