Privacy Policy (United Kingdom)

1. General notes and mandatory information

1.1. Foreword

JAC Recruitment (UK) Limited and our affiliated companies in other countries that form the JAC Group ("JAC") are committed to protecting the confidentiality of information and the privacy of our candidates, clients and other users of our websites and services. We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, this Privacy Policy, and where applicable the Privacy and Electronic Communications Regulations 2003 (“PECR”).

This Privacy Policy explains which data we collect when you visit our website, for contract processing, for marketing measures and for other processing listed in this Privacy Policy, how we use it and to whom we pass it on. We also inform you about your rights regarding your personal data, including the right to access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent, as well as your right to lodge a complaint with the supervisory authority.

We may update this Privacy Policy from time to time, if we introduce new purposes of use or significant changes to processing purposes that affect personal data you have already provided, we will inform you of the changes as clearly as possible before commencing the new processing. If your consent is required for a particular processing activity, we will obtain your consent as necessary.

We would like to point out that data transmission over the Internet (e.g. when communicating by e‑mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Last update: May, 2026

1.2. Note on the responsible body (data controller)

The responsible body (the data controller) is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e‑mail addresses, etc).

The responsible body for data processing is:

JAC Recruitment (UK) Limited (Company No. 04526740)

Beyond (6th Floor), 2 Leman Street, Aldgate Tower, London E1 8FA, United Kingdom

Telephone: +44 (0)20 7382 2400

You can contact our data protection officer contact by e-mail at this address: privacyofficer.uk@jac-recruitment.com or in writing at the following address: Data Protection Contact, JAC Recruitment (UK) Limited, Beyond (6th Floor), 2 Leman Street, London E1 8FA, UK.

1.3. Processing and storage duration

As the responsible body, it is our task to process your data only to the extent permitted by law and to secure the processing with suitable protective measures.

We store your data only for as long as is necessary for the purpose for which it was collected, unless a legal basis requires longer storage (e.g. retention periods under legal, regulatory, accounting or tax requirements). Your data then will be deleted.

The various processing operations that we carry out, and the associated information are listed in detail under Section 3 – Data processing in detail.

1.4. Data transmission

We only pass on your personal data to third parties in the following cases:

•         If you have expressly given us your consent, in accordance with UK GDPR Art. 6(1)(a).

•         If this is legally permissible and necessary for the fulfilment of a contractual relationship or for the implementation of pre-contractual measures, e.g. to payment, shipping, or collection service providers, in accordance with UK GDPR Art. 6(1)(b).

•         If there is a legal obligation to pass on the data, e.g. to authorities, social security institutions, or law enforcement authorities, in accordance with UK GDPR Art. 6(1)(c).

•         If the transfer is necessary to safeguard our legitimate interests or for the establishment, exercise or defence of legal claims and there are no overriding legitimate interests on your part to the contrary, in accordance with UK GDPR Art. 6(1)(f).

•         If we use external service providers (processors), they process your personal data only on our documented instructions and under a duty of confidentiality through a written contract, as required by UK GDPR Art. 28 (e.g., IT and marketing service providers).

If JAC Group or its business is merged with or acquired by another company or business, we may disclose personal information to the new owners of the company or business. You would be notified of such an event.

1.5. Transfer to third countries

Your personal data is generally processed in the United Kingdom where the UK GDPR guarantees a high level of data protection. If we commission service providers outside the United Kingdom, a lower level of data protection may apply in these countries. For restricted transfers to third countries, we ensure compliance with the requirements of UK GDPR Chapter V (Arts. 44 onwards) through appropriate transfer mechanisms, such as UK adequacy regulations where available, or standard data protection clauses (either the UK International Data Transfer Agreement (“IDTA”) or, where we use the EU Standard Contractual Clauses (“EU SSCs”), the UK Addendum to the EU SSCs (“UK Addendum”)). When we engage service providers in the USA, data is transferred on the basis of the UK’s adequacy regulations for the UK Extension to the EU-US Privacy Framework (“UK Extension”), provided the recipient is certified. Otherwise, we will use an IDTA or the UK Addendum as appropriate safeguards. For more information on these transfer safeguards or to obtain a copy of them, you can contact us (see section 1.2 above).

2. Your rights under data protection law

2.1. Withdrawal of your consent to data processing

Where we rely on your consent for specific data processing activities, you can withdraw your consent at any time. The lawfulness of any data processing carried out before the withdrawal remains unaffected by it.

2.2. Right to object to the collection of data in special cases and to direct marketing (Art. 21 UK GDPR)

IF THE DATA PROCESSING IS BASED ON UK GDPR ART. 6(1)(E), OR ART. 6(1)(F),YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS.THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO UK GDPR ART. 21(1)).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO UK GDPR ART. 21(2)).

2.3. Right to data portability

You have the right to receive the data concerning you which you have provided to us, where we process it by automated means and where the processing is based on your consent or is necessary for the fulfilment of a contract. We will provide this data to you or to a third party you nominate, in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place If it is technically feasible.

2.4. Access, rectification, and erasure

Within the framework of the applicable legal provisions, you have the right at any time to request access and to receive a copy about your stored personal data, its origin and recipient and the purpose of the processing. You also have the right to request rectification of inaccurate personal data and, in certain circumstances, the erasure of this data. You can contact us at any time if you have further questions on the subject of personal data.

2.5. Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do this. The right to restriction of processing exists in the following cases:

•         If you dispute the accuracy of your personal data stored by us, we may need time to verify this. For the duration of the review, you have the right to request that the processing of your personal data be restricted.

•         If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of erasure.

•         If we no longer need your personal data for the purposes of processing, but you need it for the exercise, defence, or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of its erasure.

•         If you have lodged an objection in accordance with UK GDPR Art. 21(1), a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.

2.6. Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the UK GDPR, data subjects have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO): https://ico.org.uk. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

3. Personal Data Processing for Temporary Workers

3.1. Scope

This section applies to individuals employed by JACas temporary workers and assigned to work for client companies. In this context, JAC acts as the employer and data controller.

3.2. Categories of Personal Data

We may collect and process personal data necessary for employment and assignment purposes. This may include identification and contact details, employment and tax-related information, financial details, right to work documentation, and information related to your work assignments.

3.3. Purposes and Legal Bases for Processing

We process personal data for the purposes of managing the employment relationship, complying with legal obligations, and supporting operational needs. The legal bases for processing include:

• Performance of a contract (UK GDPR Art. 6(1)(b))

• Compliance with legal obligations (UK GDPR Art. 6(1)(c))

• Legitimate interests (UK GDPR Art. 6(1)(f)), where applicable

3.4. Recipients of Personal Data

We may share personal data with third parties where necessary for employment administration, legal compliance, or assignment management. This may include clients, government authorities, payroll and pension providers, and professional service providers.

3.5. Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, and contractual obligations, or to establish, exercise, or defend legal claims. Specific retention periods are determined by applicable laws and industry standards.

3.6. Data Subject Rights

You have rights described in Section 2 of this Privacy Policy. Providing the above data is a legal and contractual requirement. Failure to provide it may prevent us from employing you or manage your assignments.

We do not make decisions about your employment based on automated processing.

4. Data processing in detail

In the following section, we provide a detailed overview of our individual data processing operations, including the purposes, legal bases, storage period and recipients of the relevant data.

4.1. Website

4.1.1. General information

If you visit our website without providing further data (for example, by registering or using the contact form), we automatically collect technical log data (so-called log files) that are sent from your end device to our server. This includes, among other things:

·         IP address

·         Date and time of the enquiry

·         URL of the accessed subpage

·         URL of the referring page (referrer URL)

·         Access status/HTTP status code

·         Browser type, language, and version

·         Operating system

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such enquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

This data processing is necessary to display our website to you and to ensure its security and stability. The legal basis is UK GDPR Art. 6(1)(f), as the processing is necessary for our legitimate interests in operating and securing our website and ensuring its reliable, technically error-free display.

The data is deleted as soon as it is no longer needed for these purposes, and in any event no later than 14 days after your visit, unless we need to retain it longer to investigate and prevent security incidents, or to establish, exercise or defend legal claims. Data collection and storage of log files is necessary for the operation, security and stability of the website. Depending on your circumstances, you may object in accordance with Art. 21 of the UK GDPR.

The content of our website is hosted by Amazon Web Services (AWS). The data is stored on servers in Ireland.

The use of AWS is based on UK GDPR Art. 6(1)(f). We have a legitimate interest in operating and displaying our website as reliably and securely as possible.

Where our website uses cookies or similar technologies that store information on, or access information from, your device (for example, device identifiers or fingerprinting), UK law generally requires that we provide clear information and obtain your consent, unless an exemption applies. Where consent is required, you can withdraw it at any time.

4.1.2. Cookies

Our internet pages use so-called “cookies”. Cookies are small data packets and do not cause any damage to your end device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. to help protect the site or the display of videos). Other cookies can be used to analyse user behaviour or for advertising purposes.

Under UK law, we may store or access strictly necessary cookies without your consent where they are essential to provide an online service you request. Where personal data is processed in connection with strictly necessary cookies, the legal basis is UK GDPR Art. 6(1)(f), as this processing is necessary for the operation and security of our website and services.

For cookies that are not strictly necessary, UK law generally requires that we provide clear information and obtain your consent before placing them on your device. Where consent is required, the processing is carried out based on your consent. You can withdraw your consent at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Our website uses Enzuzo's cookie consent technology to obtain your consent to the storage of certain cookies in your browser and to document this in accordance with data protection regulations. The provider of this technology is Enzuzo Inc, 251 Consumers Rd, Suite 1200, Toronto, ON M2J 4R3, Canada (hereinafter referred to as "Enzuzo").

When you enter our website, an Enzuzo cookie is stored in your browser, in which the consents you have given or the withdrawal of these consents are logged. This information is not passed on to Enzuzo. The Enzuzo cookie does not process any personal data.

The data collected will be stored until you ask us to delete it, delete the Enzuzo cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. Further information on data processing by Enzuzo can be found at: https://www.enzuzo.com/privacy-policy.

Enzuzo cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for maintaining these consent records is UK GDPR Art. 6(1)(c) (where applicable, to support compliance obligations relating to cookie consent) and/or UK GDPR Art. 6(1)(f) (our legitimate interest in demonstrating and managing consent in a transparent and documented manner.

This consent is kept until it is no longer needed (typically until you change your preference or the consent record expires), or you delete the relevant cookie in your browser. If you delete the cookie in your browser and then re-enter/reload the website, you will be asked for your cookie consent again.

You can access the cookie settings at any time via the cookie symbol (biscuit symbol) and change or withdraw your consent there.

If you consent to marketing cookies in your cookie settings, cookie-related information (such as online identifiers and usage data) may be transmitted to third-party vendors (including those located outside the UK) for marketing and analytical purposes. Such transfers will be made only in accordance with your cookie settings. In the event of a transfer outside the UK, we will apply the safeguards described in Section 1.5.

You can find out which cookies and services are used on this website under section 5 – tools from third-party providers.

4.2. Pre‑contractual and contractual processing

We collect personal data from you or, where relevant, from contact persons at companies in the context of a pre-contractual relationship and upon conclusion of a contract. This data includes, for example, first and last names, address, e-mail address, telephone number and (where applicable) payment and invoicing details. This data is collected and processed for the fulfilment of a concluded contract or to take steps at your request prior to entering into a contract, for example in the context of orders, contracts with service providers, contractual partners and other business partners.

The legal basis for processing is UK GDPR Art. 6(1)(b), where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract. Where we process the contact details of company representatives and the contract is with the company rather than the individual, the legal basis is UK GDPR Art. 6(1)(f), as this is necessary for managing our business relationships and communications.

If you have also given your consent for specific additional processing activities, the legal basis for that is UK GDPR Art. 6(1)(a).

As soon as your data is no longer required for the fulfilment of the purpose of processing, it will be deleted. In addition, legal regulations may require us to retain certain records for longer periods (for example, for tax and accounting purposes). In such cases, we will retain the relevant data for the applicable period and then delete it once those retention requirements have expired (or earlier where deletion is permitted).

4.3. Contact options

Personal data is collected when you contact us (e.g. by telephone, contact form, email, or fax). Which data is collected via the contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of processing your enquiry, contacting you and the associated technical administration.

The legal basis for the processing of the data is our legitimate interest in processing your request in accordance with UK GDPR Art. 6(1)(f). If your contact is aimed at the conclusion of a contract, the legal basis for the processing is UK GDPR Art. 6(1)(b).

Your data will be deleted after final processing of the enquiry if it can be inferred from the circumstances that the matter in question has been conclusively clarified, provided that there are no statutory retention obligations to the contrary.

4.4. Registration on the website and use of our services

On our website, we offer a platform for the publication and placement of job vacancies. This is aimed both at companies that wish to advertise vacancies and at applicants who are looking for suitable positions and can apply directly via the platform.

Registration on our website is required to apply for an advertised position. By registering an account, you enter into a user agreement with us for the use of the platform and the provision of our placement services. As part of this user account, applicants can upload and manage their application documents (e.g. CV, certificates, qualifications, and similar details). The applicant is responsible for ensuring that this data is up-to-date and complete.

To register an account and apply for a position, you may be required to provide certain information, such as your name, contact information, and work history. If you do not provide this information, you may not be able to create an account, apply for a position, or use all or part of our services.

Advisers in our U.K. office may offer to share your information with advisers in another country. In such a case, we will contact you to confirm that you consent to the sharing of your information with another JAC office. Where this involves a transfer of personal data outside the United Kingdom, we apply the safeguards described in Section 1.5 (Transfer to third countries).

The data is processed on the basis of UK GDPR Art. 6(1)(b) for the fulfilment of the user agreement for the use of the platform and the provision of our services. Where we have obtained your consent as part of the registration process or in connection with an application for a position, UK GDPR Art. 6(1)(a) also constitutes an additional legal basis for that processing.

If a registered applicant applies for a job offer through our website, the relevant personal data stored in the profile that is required for the respective job offer (e.g. name, CV, professional experience, qualifications) will be forwarded to the respective company that has advertised the position in question. This data is forwarded exclusively on the basis of your active application for the specific job offer - you therefore decide yourself whether and when your data is forwarded to third parties.

The personal data provided in the user profile is stored exclusively on servers within the United Kingdom or other adequately protected locations (see Section 1.5 (Transfer to third countries)). The data is stored for as long as is necessary for the use of the services offered on the website or until the user deletes their account themselves. The user can review, update, or delete their personal information in their profile at any time, and they may also request deletion by contacting us using the contact details in Section 1.2.

4.5. Newsletter and job notifications by e‑mail

If you would like to receive the newsletter offered on the website, we require an e-mail address from you, as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis.

The data processing takes place based on your consent (UK GDPR Art. 6(1)(a). You can withdraw this consent at any time. Any data processing we carried out under your consent before you withdrew it remains lawful.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe, we may store your e-mail address in a suppression list if this is necessary to prevent future mailings. The data from the suppression list will only be used for this purpose and will not be merged with other data. We maintain this suppression list based on our legal compliance needs and our legitimate interest in respecting your preferences (UK GDPR Art. 6(1)(c) and/or Art. 6(1)(f), as applicable). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

4.6. Applications

You have the opportunity to apply for a job with us. When you apply, we collect and store the personal data you provide and process it only for the purpose of assessing and managing your application. Your data will not be passed on to unrelated third parties. The legal basis for this processing is UK GDPR Art. 6(1)(b).

5. Tools from third‑party providers

5.1. Google services

We use the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on our website.

When using Google services, data may be transferred to the parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google LLC participates in the UK Extension with active status, which means that transfers to Google LLC may take place based on the UK’s adequacy regulations for the UK Extension, provided the transfer is made to an entity with an active certification on the Data Privacy Framework list and within the scope of the certification.

According to the Data Privacy Framework register, Google LLC’s UK Extension certification covers HR data and non‑HR data and has an active certification status.

Where the UK Extension is not available for a particular transfer, we rely on appropriate safeguards under UK GDPR Art. 46, such as the IDTA or the UK Addendum, as described in Section 1.5.

Please note, however, that where we rely on contractual safeguards (such as the IDTA or UK Addendum), we cannot guarantee that Google will be able to fulfil these contractual obligations in every case.

Further information about Google can be found in Google’s privacy policy available at: https://policies.google.com/privacy.

The individual services used are described below:

5.1.1. Google Tag Manager

We use "Google Tag Manager" on our website to manage and load website tags (small code elements) and to help us control when other tags are triggered (e.g. analytics or marketing tags).

Google Tag Manager does not set cookies itself and does not access the data collected by other tags. However, Google states that Google Tag Manager may collect aggregated diagnostics data about tag firing (for system stability, performance, and installation quality). According to Google, this diagnostics data does not include IP addresses or measurement identifiers associated with a particular individual, and (other than standard HTTP request logs) Google Tag Manager does not collect, retain, or share information about visitors to our website.

Google Tag Manager may trigger other tags that may set cookies and/or process personal data. If you have made a deactivation or objection via our cookie settings, this will remain in place for tags managed through Google Tag Manager (i.e. the relevant tags will not be fired).

The legal basis for data processing in connection with Google Tag Manager is our legitimate interest in the efficient management and technical administration of tags on our website (UK GDPR Art. 6(1)(f)).

5.1.2. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google. Google Analytics uses cookies and similar technologies to help the website analyse how users use the site. Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity and provide other services relating to website activity and internet usage. This is activated only with your consent where required. Legal basis: consent (UK GDPR Art. 6(1)(a)) for analytics cookies/technologies.

Where supported, we use Google Analytics’ IP masking / anonymisation functionality, which truncates IP addresses as soon as technically feasible before storage/processing.

You can refuse analytics cookies via our cookie settings. If you do not grant consent for analytics cookies, Google Analytics will not be activated. You can withdraw your consent at any time by changing your cookie settings. However please note that if you do this you may not be able to use the full functionality of this website.

Further information is available in Google’s Privacy Policy (https://policies.google.com/privacy) and Google Analytics Terms (UK): https://marketingplatform.google.com/about/analytics/terms/gb/

5.1.3. Google Ads (AdWords) conversion tracking

We use Google Ads (formerly “Google AdWords”) to display ads on Google and other third-party websites, and we utilize Google’s conversion tracking to measure the success of our advertising campaigns. Google Ads conversion tracking is a web analytic service provided by Google that uses cookies or similar technologies to track when users interact with our ads and subsequently take action on our website. If you click on one of our Google ads and then visit our website, Google Ads will store a cookie on your device to facilitate this tracking. These cookies generally expire after 30 days and are not intended to identify you personally, they simply record metrics such as the ad impressions, clicks, and certain actions (e.g. whether you made a purchase after clicking an ad).

We do not receive any information from Google that directly identifies you; we only receive aggregate statistical reports (for example, how many users clicked our ad and took a desired action), which help us evaluate which advertising strategies are effective.

Importantly, we only activate Google Ads conversion tracking on our site if you have given your consent to advertising cookies via our cookie consent tool (as these cookies are not strictly necessary). Accordingly, the legal basis for this processing is your consent as per UK GDPR Art. 6(1)(a). You can withdraw your consent at any time by adjusting your cookie settings. Please note that if you do not consent or if you withdraw consent, the Google Ads conversion cookies will not be set.

Even if you have consented, you can still refuse or remove these cookies by selecting the appropriate settings on your browser. You can also control the personalization of ads you see via Google by visiting Google’s My Ad Centre in your Google account. Further information on data protection at Google (including Google’s Privacy Policy) is available at: https://policies.google.com/privacy.

5.1.4. Google Ads Remarketing

We use Google Ads Remarketing. This application allows us to show you adverts on other websites after you have visited our website. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate user behaviour when you visit various websites. This allows Google to recognise your previous visit to our website. According to its own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.

The Google Ads Remarketing service is used to analyse the usage behaviour of our website. The legal basis is the consent of the user of the website in accordance with UK GDPR Art. 6(1)(a).

The stored data will be deleted by us as soon as it is no longer required for our purposes.

You can also manage ad personalisation in your Google account via My Ad Center. Further information about Google’s advertising cookies is available from Google, and Google’s privacy policy is available at: https://policies.google.com/privacy.

5.1.5. Campaign Manager

We use Google’s Campaign Manager 360 (“Campaign Manager”) to display adverts that are relevant to users, to improve advertising campaign performance or to prevent a user from seeing the same adverts more than once.

Google uses a cookie ID to record which adverts are displayed in which browser and can thus prevent them from being displayed more than once. In addition, Campaign Manager can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Campaign Manager advert and later visits the advertiser's website with the same browser and makes a purchase there. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server.

By integrating Campaign Manager, Google receives the information that you have accessed the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will collect and store your IP address.

The Campaign Manager cookies used enable us to track whether you perform certain actions on our website after you have accessed or clicked on one of our adverts on Google or on another platform via Campaign Manager (conversion tracking). This allows us to send you targeted advertising.

Campaign Manager cookies/technologies are activated only with your consent where required. The legal basis for the processing is your consent, pursuant to UK GDPR Art. 6(1)(a).

The stored data will be deleted by us as soon as it is no longer required for our purposes.

Google explains that users can also opt out of Google’s advertising cookies by visiting Google’s Ads Settings / My Ad Center and may opt out of cookies from participating advertisers via the Network Advertising Initiative (NAI) opt‑out page.

Further information can be found in Google’s privacy policy: https://policies.google.com/privacy and Google’s information about advertising technologies/cookies: https://policies.google.com/technologies/ads.

5.1.6. Google Fonts

We use Google Fonts on our website. This allows us to integrate certain fonts into our website and to ensure a consistent presentation.

When you access our website, your browser sends HTTP requests to the Google Fonts Web API (e.g. fonts.googleapis.com / fonts.gstatic.com) to retrieve the required fonts. These requests include, in particular, the visitor's IP address, the requested URL on Google’s servers and standard HTTP headers (such as browser/device information and the referrer). Google states that the Google Fonts API is unauthenticated and does not set or log cookies; it processes the IP address only as necessary to transmit the font files and for security purposes. The legal basis is our legitimate interest in a consistent and user-friendly presentation of our website, as per UK GDPR Art. 6(1)(f).

The data transmitted to Google in the context of using Google Fonts is not retained or otherwise processed by us.

5.1.7. Google reCAPTCHA

We use Google reCAPTCHA" ("reCAPTCHA") on this website. The purpose of reCAPTCHA is to check whether data is entered on this website (e.g. in a contact form) by a human or by an automated programme, and to protect our website from spam and abusive automated activity. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. To analyse this, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

The data is stored and analysed based on UK GDPR Art. 6(1)(f). We have a legitimate interest in protecting our website from abusive automated spying and SPAM.

For more information about Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Use at the following links: https://policies.google.com/privacy and https://policies.google.com/terms.

5.1.8. Integration of YouTube videos

We use the YouTube embedding function to display and play videos from the provider Google. The extended data protection mode is used here, which, according to the provider, only starts storing user information when the videos are played. If the playback of embedded YouTube videos is started, YouTube uses cookies to collect information about user behaviour. According to YouTube, these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your data can be assigned directly to your account, when you click on a video. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them.

We embed videos to enrich our content and provide helpful information. Our legal basis for loading the YouTube player is our legitimate interest, based on UK GDPR Art. 6(1)(f). Any non-essential cookies that YouTube may set when you play a video are used based on your consent, as per UK GDPR Art. 6(1)(a). Regardless of whether the embedded videos are played, a connection to the Google network "DoubleClick" is established each time this website is accessed, which can trigger further data processing operations without our influence.

Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://policies.google.com/privacy.

5.1.9. Google Maps

This site uses the map service Google Maps provided by Google.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Fonts for the purpose of standardising the display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

We load Google Maps content to display locations on our website and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of UK GDPR Art. 6(1)(f). However, Google Maps may use cookies for analytics or personalization. We only allow these non-essential cookies to be set if you have consented via our cookie banner, compliant with UK GDPR Art. 6(1)(a). Consent can be withdrawn at any time.

5.2. New Relic APM

We use New Relic APM provided from New Relic, Inc, 188 Spear Street, Suite 1200, San Francisco, California 94105, USA on our website. This allows us to statistically analyse the performance and speed of our website.

For this purpose, New Relic sets cookies for the user. These cookies record, for example, that the user has called up a page from us, how long the use lasts or which browser the user is using. The information compiled with the help of cookies is transferred to New Relic servers in the USA for the purpose of analysis. We then receive the transferred data from New Relic in analysed and processed statistical form.

We only enable the New Relic performance monitoring cookies if you have given your consent via our cookie banner. The legal basis for this processing is your consent, as per UK GDPR Art. 6(1)(a). If you do not consent, these cookies will not be placed. Where no personal data is collected or stored, for example, if data is immediately aggregated, we rely on our legitimate interests in ensuring our website’s efficiency, as per UK GDPR Art. 6(1)(f), but in such cases we will honour your opt-out preferences.

Insofar as personal data is collected via New Relic, we retain it only for as long as necessary to complete the performance analysis and to achieve the purposes described, after which the data is deleted.

You can prevent the setting of New Relic cookies by selecting the appropriate settings in your browser to block cookies. Further information about New Relic’s data practices can be found in New Relic's privacy policy at https://newrelic.com/termsandconditions/services-notices.

5.3. Volcanic (recruitment platform)

We use the platform "Volcanic" provided by Access Workspace Malaysia Sdn Bhd, Level 17, Exchange 106, Lingkaran TRX, Tun Razak Exchange Wilayah Persekutuan, Kuala Lumpur 55188 Malaysia to operate our recruitment website and handle our application process.

Volcanic is a cloud-based recruitment platform that enables us to design, build, and manage our JAC Recruitment website. Through the platform, we can publish job advertisements from our CRM system and receive applications from candidates. Volcanic processes personal data such as your name, contact details and application-relevant information exclusively for operational purposes within our recruitment process.

Where personal data is transferred to countries outside the European Economic Area (such as Malaysia), we apply appropriate safeguards in accordance with UK GDPR Chapter V as described in Section 1.5 (Transfer to third countries).

The legal basis for this data processing is UK GDPR Art. 6(1)(b). The data processing is necessary for the fulfilment of the usage contract on the application platform to provide you with the application processing services.

For more information, please refer to Volcanic's privacy policy at https://www.volcanic.com/privacy-policy.