Return to home page      Candidates      Our Specialist Sectors

All parties agree to comply with all applicable requirements of the Data Protection Act 1998 and the General Data Protection Regulation ((EU) 2016/679) (“GDPR”), as amended or updated from time to time (together “DP Legislation”).below:

11.2 The parties acknowledge that for the purposes of the DP Legislation, it may be necessary for BLS to process certain personal data (as defined in the DP Legislation) on behalf of the Client, and BLS may act as a “controller” or a “processor” (as defined in the GDPR) in respect of such personal data.

11.3 Each party shall ensure that it has all necessary appropriate consents and notices in place to enable lawful transfer of personal data for the duration and purposes of any contract into which these Conditions are incorporated.

11.4 In relation to any personal data processed in connection with its obligations under these Conditions BLS shall:

(i) process the personal data only on the written instructions of the Client unless BLS is required by any applicable law to process such data and notifies the Client to this effect;

(ii) ensure that it has in place appropriate technical and organisational measures to protect against unauthorised or unlawful processing, or against accidental loss or destruction of, or damage to the personal data, appropriate to the harm that might result from such occurrence and the nature of the data to be protected;

(iii) ensure that all personnel who have access to and/or process personal data are obliged to keep it confidential;

(iv) not transfer any personal data outside of the European Economic Area;

(v) promptly assist the Client in ensuring compliance with its obligations under the Data Protection Legislation

with respect to security, impact assessments and consultations with supervisory authorities or regulators and including with any requests from data subjects;

(vi) notify the Client without delay on becoming aware of a personal data breach relating to these Conditions;

(vii) at the request of the Client, delete or return all personal data on termination of any contract into which these Conditions are incorporated unless required by law to store the personal data.