We are committed to ensuring that we manage your personal data professionally and in compliance with all applicable data protection laws. Part of this commitment is to ensure that there is transparency about how we process personal data. This policy includes an explanation of: what data we are processing; why we are processing it and what we do with it; whether we will share it with anyone else; whether we will transfer it outside of Gibraltar; How we keep your data safe; and your rights. We hope that you find this Privacy Policy helpful. If you have any questions, please don't hesitate to contact us.
Our company name is Bassadone Automotive Group and we are located at 78 Queensway, The Dockyard, Gibraltar. In this policy, we have referred to Bassadone Automotive Group as: we, us, our or BAG. For any queries concerning your data please contact the Human Resources Department at the above address or by email at people@bassadone.gi or by phone on 0035020059197
We process your personal data if we understand that you may be interested in any of our vacancies or any of our services.
What data do we hold about you and how have we obtained this?
We will obtain information about you when you apply to work for BAG. If you have visited our Portal we may automatically collect some personal information including: details of your browser and operating system, the website from which you visit our website, the pages that you visit on our website, the date of your visit, and the Internet protocol (IP) address assigned to you by your internet service. We may also collect any personal information which you allow to be shared that is part of your public profile on a third party social network. Our telephone calls may be recorded for training purposes and may also be used to verify any comments that were made during any conversation. Sometimes you will have sent your information directly to us, but you may have provided your information to recruitment agencies who, in turn, has provided the information to us.
Where you have consented, we will keep you informed of roles that we think will be of interest to you and ask you to participate in surveys; we will use your interaction with our Portal or social media sites to identify which products and services will be the most relevant to you and deliver targeted and relevant messages to you. We may process your information to comply with legal obligations including assisting the Government of Gibraltar (GOG) departments - Employment Services, Social Services, Tax Office and the Police and the Driver and Vehicle Licensing Agency
If you take up employment with us, we may process your information to allow us to pursue our legitimate interests including: the terms and conditions of your employment; details of your qualifications, skills, experience and employment history, including start and end dates, with previous employers and with the company; information about your remuneration, including entitlement to benefits such as pensions or insurance cover; details of your bank account and social security number; information about your marital status, next of kin, dependents and emergency contacts; information about your nationality and entitlement to work in Gibraltar information about your criminal record; details of your schedule (days of work and working hours) and attendance at work; details of periods of leave taken by you, including holiday, sickness absence, family leave and sabbaticals, and the reasons for the leave; details of any disciplinary or grievance procedures in which you have been involved, including any warnings issued to you and related correspondence; assessments of your performance and behaviours, including appraisals, performance and competency reviews and ratings, training you have participated in, performance improvement plans and related correspondence; information about medical or health conditions, including whether or not you have a disability for which the company needs to make reasonable adjustments; details of trade union membership; and Equal opportunities monitoring information, including information about your ethnic origin, sexual orientation, health and religion or belief. analysing our performance to further improve our customer services; market research, training and to administer our websites; the prevention of fraud or other criminal acts; complying with requests from you including if you exercise any of your rights noted in this Privacy Policy; the purpose of corporate restructure or reorganisation or sale of our business or assets; Enforcing our legal rights or to defend legal proceedings and for general administration purposes.
We will not share your data with any third parties without your consent. We may disclose your information to our third-party service providers for the purposes of undergoing assessments for recruitment. When we use third party service providers, we only disclose to them any personal information that is necessary for them to provide their service and we have a contract in place that requires them to keep your information secure and not to use it other than in accordance with our specific instructions. If we sell all or part of our business to a third party, we may transfer your information to that party to ensure that it can continue to provide information that you have requested or for any of the other purposes that we have noted above. We may transfer your data to government or other official bodies for the purposes of complying with legal obligations, for enforcing our rights, or for the prevention or detection of a crime.
If you have applied for a role and have not been successful we will keep your data for 3 months from the date that we last had contact with you. If you take up employment with us we will keep your data until you leave our employment after that we will keep your data for 7 years after termination date when all data will then be shredded and deleted. The periods stated in this section may be extended if we are required by law to keep your data for a longer period.
The information that you send to us will not be transferred to any third parties without your consent.
We have adopted the technical and organisational measures necessary to ensure the security of the personal data we collect, use and maintain, and prevent their alteration, loss, unauthorised processing or access, having regard to the state of the art, the nature of the data stored and the risks to which they are exposed by human action or physical or natural environment. However, as effective as our security measures are, no security system is impenetrable. We cannot guarantee the security of our database. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use procedures and security features to try to prevent unauthorised access Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone
Our website may contain links to and from other websites (e.g. social media sites such as Twitter, Flickr, YouTube and Facebook). Unless we own such websites, we accept no responsibility for the way in which they process your personal data. You are recommended to check the privacy policy of each website before you submit any personal data to it.
Your right to access data We always aim to be as open as we can and allow people access to their personal information. Where we hold your personal data, you can make a subject access request to us and we will provide you with: a description of it; an explanation of why we are holding it; information about who it could be disclosed to; and a copy of the information in an intelligible form unless an exception to the disclosure requirements is applicable. If you would like to make a subject access request please use the SAR form save on our HR Portal in the intranet. If you agree, we will try to deal with your request informally, for example by providing you with the specific information you need over the telephone. Unless you agree a different time, we will complete your subject access request within one month.
If we hold personal data about you, but it is no longer necessary for the purposes that it was collected and cannot otherwise be justified you have the right to request that we delete the data.
If we hold personal data about you and you believe it is inaccurate, you have the right to request us to restrict the data until it is verified. You also have the right to request that the data is restricted where you have a right to it being deleted but would prefer that it is restricted.
Where we rely on your consent as the legal basis for processing your personal information or need to process it in connection with your contract, how we use your personal information, you may ask us to provide you with a copy of that information in a structured data file. We will provide this to you electronically in a structured, commonly used and machine-readable form, such as a CSV file. You can ask us to send your personal information directly to another service provider, and we will do so if this is technically possible. We may not provide you with a copy of your personal information if this concerns other individuals or we have another lawful reason to withhold that information.
You always have the right to complain to the personal data regulator, the DPO, via their email address dpo@bassadone.gi. If you do not agree with the decision taken you are also entitled to seek compensation from the Gibraltar Regulatory Authority (GRA) if there has been a breach of data protection laws.
This policy was last updated on 17th July 2023, this could change without prior notification.