GDPR & Data Protection

This GDPR & Data Protection statement explains how CV Panel Online, a trading name of SPECIALISED BUSINESS LIMITED (the “Company”, “we”, “us”, “our”), complies with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), when processing personal data through the website cvpanel.online (the “Website”) and related services.

This document supplements our Privacy Policy and should be read together with it.

1. Commitment to Data Protection

We are committed to protecting the privacy, confidentiality, and security of personal data entrusted to us. We process personal data lawfully, fairly, and transparently, and only for specified and legitimate purposes.

Our internal processes are designed to ensure that personal data is handled responsibly and in accordance with applicable legal requirements.

2. Data Controller

For the purposes of data protection legislation, the data controller is:

SPECIALISED BUSINESS LIMITED
Trading name: CV Panel Online
Company Number: 12961913
Registered Address: 5 Stratford Place, London, United Kingdom

3. Principles of Data Processing

We process personal data in accordance with the following principles:

  • Lawfulness, fairness, and transparency
  • Purpose limitation – data is collected for specified and legitimate purposes
  • Data minimisation – data collected is adequate, relevant, and limited
  • Accuracy – data is kept accurate and up to date
  • Storage limitation – data is not retained longer than necessary
  • Integrity and confidentiality – data is processed securely

4. Categories of Personal Data Processed

Depending on your interaction with the Website and our Services, we may process:

  • identity and contact details,
  • career and professional information provided by you,
  • technical and usage data,
  • communications and correspondence related to orders or enquiries.

Further details are set out in our Privacy Policy.

5. Lawful Bases for Processing

We process personal data only where we have a lawful basis, including:

  • performance of a contract,
  • legitimate interests pursued by the Company,
  • compliance with legal obligations,
  • consent, where required.

6. Data Subject Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • the right to access your personal data,
  • the right to rectification of inaccurate data,
  • the right to erasure (“right to be forgotten”),
  • the right to restrict processing,
  • the right to data portability,
  • the right to object to processing,
  • the right to withdraw consent at any time (where applicable).

Requests may be submitted using the contact details provided on the Website.

7. Data Security Measures

We implement appropriate technical and organisational measures to protect personal data, including:

  • access controls and authentication measures,
  • secure hosting environments,
  • limited access to personal data on a need-to-know basis,
  • internal procedures for handling data incidents.

While we take reasonable steps to protect data, no system can be guaranteed to be completely secure.

8. Data Breaches

In the event of a personal data breach that poses a risk to individuals’ rights and freedoms, we will take appropriate steps to assess, contain, and mitigate the breach.

Where required by law, we will notify the relevant supervisory authority and affected individuals without undue delay.

9. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including service delivery, legal compliance, dispute resolution, and record-keeping obligations.

Retention periods may vary depending on the type of data and applicable legal requirements.

10. Third-Party Processors

Where we engage third-party service providers to process personal data on our behalf (for example, hosting or communication services), we ensure that appropriate contractual safeguards are in place.

Third-party processors are authorised to process personal data only in accordance with our instructions and applicable data protection laws.

11. International Data Transfers

If personal data is transferred outside the United Kingdom or European Economic Area, we ensure that appropriate safeguards are implemented, such as contractual protections or other legally recognised mechanisms.

12. Supervisory Authority and Complaints

If you believe that your data protection rights have been infringed, you have the right to lodge a complaint with a relevant supervisory authority, including the Information Commissioner’s Office (ICO) in the United Kingdom.

13. Changes to This Statement

We may update this GDPR & Data Protection statement from time to time. The “Last updated” date at the top reflects the most recent version.

14. Company Information

CV Panel Online is a trading name of SPECIALISED BUSINESS LIMITED
Company Number: 12961913
Registered: 20 October 2020
Registered Address: 5 Stratford Place, London, United Kingdom