This policy explains how we process personal data within our global HR consulting businesses, including how it affects our website: https://OrgShakers.com.
Who we are:
We are OrgShakers LLC. Further information about our organisation and our people can be found by clicking here
“OrgShakers ("we", "us") takes the privacy of all the people whose data it processes very seriously and has put in extensive measures to ensure that the rights and expectations of those people are respected at all times. We are committed to keeping your information secure and managing it in accordance with our legal responsibilities, under the privacy and data protection laws applicable wherever we operate in the world, as well as the General Data Protection Regulation (Regulation (EC) 2016/679 (“GDPR”) in the European Union (“EU”) and the Californian Consumer Privacy Act (CCPA) and similar legislation in the US
This policy was last updated in October 2022
. Please review this policy periodically for any changes.Who this policy applies to:
We provide HR consulting services (“our services”)
to a range of clients throughout the world. Details of our services can be found elsewhere on this website. This policy applies to you whether you are an existing, potential or past client or an employee of one of our existing, potential or past clients; a candidate for one of our clients; an individual we are assessing as an employee of one of our clients; or whether you are a source or a referee in respect of a candidate.
For the purposes of this policy: client(s)
means any, business, firm, organization, government body or individual that mandates us to perform any of our services; candidate(s)
means an individual who is a candidate, applicant, potential candidate, employee of a client; a referee
is a person who provides a personal or work reference in respect of a candidate and; a source
is a person who provides us with information or intelligence about a candidate. Quick Access
The nature of our work means we are occasionally required to process personal data quickly, confidentially, and often without reference to the data subject. Accordingly, we process such data in accordance with Data Protection Laws, using our legitimate interest. Beyond this, we will seek consent in the circumstances explained later in this policy document.
We collect information when you speak with an OrgShakers employee in any office around the world, complete a contact form, or if you are recommended for contact via another party or company. How we use your personal data Employee of client
We may need to process personal data relating to the employees or prospective employees of our clients. This may be through consultancy work, specific information requests, or if a member of the OrgShakers team is placed within a client team in a role which has access to employee data. Client
We will use client data to perform our services to you and for other legitimate business purposes such as marketing. Employee of OrgShakers
We will use your personal data if you apply for a role within OrgShakers, and/or during your time while working for/with OrgShakers. The type of personal data we collect and process
In all cases, we collect and process personal data about you, including your name, address, telephone number and email address. Employee of client
Any personal information being processed by our client, may in turn also be processed by OrgShakers, depending on the engagement and the relationship with the client. Consult your direct employer or prospective employer for more information on the data they manage. Client
As well as basic contact information we will also collect information about your role and other information provided to us by yourself or your organization. What we do
If OrgShakers are engaged to support and advise a firm or fill a vacancy, the individual(s) assigned will often need to be given access to personal information in order to fulfil this requirement. This could range from having access to the client’s email system, through to full access to HR files and client records.
Besides client engagement, we also process personal data when we conduct market intelligence exercises to map out particular business sectors or functions to help clients understand the available talent. Sensitive data
From time to time, we will seek your consent to process personal data in respect of certain specific and limited purposes. We will always do this before processing any sensitive personal data: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning health or sex life and sexual orientation, genetic and/or biometric data. In other day-to-day contact, we encourage you not to provide us with sensitive personal data unless it is specifically requested, and we have your consent. Local agreements
In certain countries, we will not collect personal data from you unless you have specifically agreed to this. Your agreement might come via an electronic tick-box on our website or other electronic channels, or via other similar measures required by local privacy and data protection laws. Your right to object and to have your data erased
You are not obliged to provide any personal data to us. However, please note that this may mean we will not be able to consider you in respect of any of our services.
Remember, you may withdraw any consent you have previously given, at any time. Also, you have the right to ask us to stop processing any personal data and to have it erased.
In these circumstances, we reserve the right to maintain basic personal data such as your name and address. This is to ensure your personal data isn’t further processed by us in the future.
Please note that no automated decisions, such as computerized candidate profiling, are made on the basis of the information we collect. Newsletters and other communications
If you would like to receive one of our newsletters, we will ask you to provide us with your name, email address, job title, company name and country of residence.
When you have indicated you would like to receive newsletter(s) from us, we may send email alerts and bulletins about our services and any roles that might interest you.
You can unsubscribe from our electronic marketing messages by following the “unsubscribe
” instructions included in our communications. Also, you may change your preferences and cease receiving direct marketing from us through your email account settings.
From time to time, we may contact you with updates on our services, terms of business or simply to ensure that the data we hold is current, relevant and up to date. Satisfaction surveys
If you take part in a user satisfaction survey, we may ask you to provide us with personal data, including your name, email address, and your views and opinions. Providing information to others
To help us run this website, and to provide executive search services or assessment services in certain countries, we work closely with trusted partners with whom we need to share personal data. These partners include:
• OrgShakers and our Odgers Berndtson partner offices around the world have signed up to an Intra-Group Data Transfer Agreement. This enables us to transfer personal data to our international group.
• Our clients, for whom we provide consultancy and other services.
• Prospective clients, where we might need to demonstrate an understanding of a particular market and the individuals that work within it.
Where we share information with such a third party, you will not be contacted by them, unless we have obtained your prior consent. Third parties
We may also provide information to third party service providers who process information on our behalf. This is to help run some of our internal business operations, including email distribution, IT services, and customer services. As part of our agreements with them, these third parties are required to process such data securely and only in accordance with our instructions.
Your information may also be shared with organizations located elsewhere in the world. As their privacy laws may not match your home country’s standards, we’ll only make a transfer data if adequate levels of protection are in place to protect any information held in that country, or the local service provider complies with applicable privacy laws at all times.
Where required by law, we will take measures to ensure that personal data handled in other countries will receive at least the same level of protection as in your home country.
We may sometimes be required to disclose information about you to law enforcement bodies, agencies or third parties, under a legal requirement or court order. We will act responsibly and take account, where possible, of your interests when responding to these requests.
If you are concerned about these arrangements to disclose or share personal data with third parties, you should contact us and ask us not to process your personal data. Keeping information secure
We invest significant resources to protect your personal data, from loss, misuse, unauthorized access, modification or disclosure. However, no system can be 100% secure, and so we cannot be held responsible for unauthorized or unintended access that is beyond our reasonable control. Information about others
We keep your personal data for as long as required to provide our services, and in accordance with legal, tax and accounting requirements. Where your personal data is no longer required, we will ensure it is disposed of in a secure manner. Where required by law, we will notify you when this has happened. Access rights
In some jurisdictions, you may have the right to request copies of your personal data held by us. If you think any of that data is inaccurate, you may also ask us to correct it. You may also have a right, in certain circumstances, to require us to stop processing your personal data. Also, you have the right to ask us to transfer your personal data to someone you nominate for your own purposes.
To get in touch with us about any of this, please email or write to us at the address below. Please note that we may request proof of identity. We will respond to your requests within the time frame that applies in the country concerned.
In certain circumstances, in countries where it is required or permitted by law, we might not be able to provide you with access to some of your personal data. Wherever possible, we will notify you of the reasons for this. About our websites
The primary purpose of our websites is to provide you with information regarding the services provided by the OrgShakers company and consultants.
We use the personal data we collect from you on our website for additional purposes such as personalizing the look and feel of the website to fit the personal preferences inferred from how you’ve used the site. (See the "Analytics
" and "Cookies
" sections for more information.)
We may disclose or share personal data with third parties as outlined above to operate the website and provide our executive search services, as well as assessment services in certain countries. If you are concerned about these arrangements, you should not use the website and contact us to ask us not to process your personal data.
Finally, we might also use your data, to help our clients understand who is making use of our website. Updating your account and preferences
If you register an account with us, or with a local partner who provides a job application portal on our behalf, please do keep your details up to date, and notify us of any changes to your personal data. You can do this by updating your user preferences through your account login, or by contacting us using the details below. Analytics
We use analytics tools and cookies on this website to help deliver our online services, identify any service issues, improve our services, provide content tailored to users' personal preferences, and to monitor site traffic and usage.
These tools may be provided by third-party service providers and may include the collection and tracking of certain data and information regarding the characteristics and activities of visitors to our website. We may disclose data, including personal data, to certain third-party services providers in order to obtain such services.
One of these providers is Google Analytics. More information about the ways in which they collect and process your personal data can be found here: www.google.com/policies/privacy/partners
You can opt-out of Google Analytics here: tools.google.com/dlpage/gaoptout
. Please note that Hotjar does not store identifiable personal data but stores a pseudonymized user profile. Neither Hotjar nor us will ever use this information to identify individual users or to match it with further data on an individual user.
You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link
Cookies are small computer files which are downloaded onto your device when you browse the web. They collect information about the way in which you navigate and use this website and the wider web. This information may allow us to identify you or your approximate location. Cookies also help us provide you with a more personal experience, like a local version of the website in a local language. Information from cookies also allows us to make improvements to our services.
We only collect "session
" cookies, which are not usually stored after your browsing session has ended. These are used to establish your approximate location and to serve up the website in an appropriate language. (IP address collection happens during this process.)
You may delete and block all cookies, or just certain types of cookies, via your browser settings. However, if you choose to block or delete cookies, this may affect the functionality of the website. Third party websites
This Policy only applies to this website. If you land on our site from other websites or move to other ones from our website, you should read their separate privacy policies. Complaints procedure
If you have a complaint about how we have handled your personal data, contact us using the details below, and we will investigate your complaint. Please use the same contact details to instruct us to cease processing your personal data. Contacting us
or write to:
Data Protection Team,
730 Third Avenue, 23rd Floor
New York, NY 10017