Processing of personal data in connection with instructions undertaken by barristers

For the application of the information set out below to arbitrators conducting arbitrations or mediators conducting mediations see paragraph 26 below.

Notice pursuant to Article 14, GDPR

1. This notice sets out information regarding the processing of personal data collected by barristers and staff of Brick Court Chambers (‘BCC’) in the course of any enquiries made about instructing a barrister at BCC, or in the course of any barrister at BCC carrying out any legal work as a barrister.  The General Data Protection Regulation (the “GDPR”) requires us to make the information in this notice publicly available.
2. This notice applies only in to personal data that is not subject to legal professional privilege.  Barristers have obligations to keep their clients’ information confidential, under legal professional privilege, unless it otherwise becomes public or is disclosed as part of a case or in proceedings.

The data controller(s)

3. Any barrister who obtains personal data in the course of their professional work is the controller of those data under data protection law. 
4. Where staff (including clerks) obtain personal data in the course of assisting an individual barrister with a particular instruction, that barrister is the controller of the personal data. 
5. The contact details for each individual MoC are available on our website.
6. Further information on the way that personal data may be collected, used, disseminated, retained and otherwise processed in specific circumstances is set out below.
7. When enquiries are made by a client or their advisers about instructing a barrister, personal data may be processed for the purpose of responding to such enquiries and agreeing the terms on which the barrister is to be instructed, including the fees that the barrister will charge. This processing will be necessary for the purposes of the legitimate interests pursued by the barrister in receiving instructions and carrying on his or her professional practice. Where the proposed instructions are on a contractual basis, the processing may also be necessary in order to take steps at the client’s (or proposed client’s) request prior to entering into a contract.
8. Barristers obtain and make use of personal data in carrying out their professional work.  These personal data will be obtained from a range of sources, which may include the party engaging the barrister, disclosure obtained from other parties, and from publicly available information.  The personal data may relate to the barrister’s client, or to other persons.
9. When the barrister is instructed to advise, represent or otherwise provide legal services to a client, he or she may process personal data for the purpose of providing the client with advice, representation or other legal services in accordance with the client’s instructions and the barrister’s professional duties.  This processing will be necessary for compliance with the barrister’s duties to the client and with the barrister’s obligations under the Bar Standards Board Handbook.  In cases where the barrister accepts instructions under a contract with the client, the processing will be necessary for the performance of that contract.
10. During and after the period when the barrister is acting for a client, the barrister may also process personal data for the purpose of dealing with any queries, complaints, claims or litigation arising out of or in connection with the instructions; fee collection; dealing with any dispute about fees; the preparation of accounts and tax returns; and checking for conflicts in connection with any instructions or prospective instructions to the barrister in other cases.  
11. The barrister may also process personal data to train other barristers and when providing mini pupillages or other work-shadowing opportunities.  Such processing will be necessary for the purposes of the legitimate interest pursued by the barrister in conducting his or her professional practice.
12. The barrister may process personal data in order to keep records of data processing including the deletion of data. This processing will be necessary for compliance with the barrister’s legal obligations under the GDPR.
13. In certain cases, the barrister may process personal data in order to carry out and keep records of customer due diligence checks, or make disclosures of suspicious activities. This processing will be necessary for compliance with the barrister’s legal obligations under the Proceeds of Crime Act 2002, the Terrorism Act 2006, the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 or under any similar legislation that may be in force from time to time.
14. The GDPR (as supplemented by the Data Protection Act 2018) contains special restrictions on the processing of:
    1. Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data, and data concerning a person’s health, sex life or sexual orientation (“Special Category Data”); and
    2. Personal data relating to criminal offences, alleged offences, convictions or sentences, or related security measures (“Criminal Offence Data”).
15. The processing of personal data by the Barrister may include the processing of Special Category Data where the person to whom those data relates has given explicit consent to the processing, or where the processing is necessary for the establishment, exercise or defence of legal claims.
16. The processing of personal data by the Barrister may include the processing of Criminal Offence Data where the person to whom those data relate has given consent to the processing, or where the processing of those data is necessary for the purpose of, or in connection with, any legal proceedings (including prospective legal proceedings), for the purpose of obtaining legal advice, or otherwise for the purposes of establishing, exercising or defending legal rights.
17. The processing by the barrister of personal data may, where this is lawful and necessary for the purposes described above, involve the disclosure of certain personal data to other persons or entities, including:
    1. courts and tribunals;
    2. solicitors and barristers acting in the matter to which the barrister’s instructions relate;
    3. other parties in the matter to which the instructions relate, or their representatives;
    4. witnesses or experts in proceedings, and potential witnesses or experts;
    5. clerks at Brick Court Chambers;
    6. support staff at Brick Court Chambers;
    7. pupils and mini-pupils, and persons shadowing barristers or attending BCC on educational visits;
    8. external service providers;
    9. in the event of complaints, the Heads of Chambers and Members of Chambers who deal with complaints, and professional regulatory bodies such as the Bar Standards Board and the Legal Ombudsman;
    10. providers of professional indemnity insurance;
    11. the general public in relation to the publication of legal judgments and decisions of courts and tribunals;
    12. in certain circumstances and to the extent required by law, the Bar Standards Board, the Financial Conduct Authority and the Information Commissioner’s Office.  There is a risk that those authorities may process or disclose information obtained by them for the performance of their lawful duties.
18. This notice is of general application and as such it is not possible to state whether it will be necessary to transfer personal data out of the European Economic Area (the EEA) in any particular case.  In some cases, the barrister may transfer personal data to a country outside the EEA or to an international organisation, for example when communicating with another professional adviser acting in relation to the barrister’s instructions or when the barrister needs to work on a case while in a non-EEA country.   A barrister may also transfer personal data to a country outside the EEA if the client resides or is located outside the EEA, or provides instructions from outside the EEA, or if the matter involves persons, organisations, courts or tribunals outside the EEA.   A transfer to a country outside the EEA may be made:
    1. where the European Commission has determined that the non-EEA country (or a territory or sector within it) or international organisation provides an adequate level of data protection.  Most non-EEA countries have not been assessed by the Commission to provide adequate protection.  If personal data has to be transferred outside the EEA, then it may not have the same protections and the person to whom it relates may not have the same rights as would be the case within the EEA.  The list of those countries that have been assessed to provide adequate protection can be found here;
    2. where the person to whom the personal data relates has explicitly consented to the proposed transfer after having been informed of the possible risks;
    3. where the transfer is necessary for the performance of a contract between the barrister and the person to whom the personal data relates, or the implementation of pre-contractual measures taken at the request of that person; or
    4. where the transfer is necessary for the establishment, exercise or defence of legal claims;
    5. where information concerning a judgment or decision of a court or tribunal is published on BCC’s website, making the information available outside the EEA.
19. The barrister may retain personal data, where necessary for the purposes set out above, for up to 7 years after the latest of the following dates:
    1. The date on which the last item of work is carried out.
    2. The date on which the last fees due to the barrister are paid or written off.
    3. The date on which any proceedings in respect of which the barrister is instructed are finally concluded.
    4. The expiry of the time limit for any further appeal in any such proceedings.
    5. The date on which any legal proceedings by or against the barrister in relation to the matter have finally concluded (including any appeal).
20. At or before the expiry of the 7-year period referred to above, the barrister will securely destroy any personal data that he or she has retained, unless he or she determines that it is necessary to continue to retain any of the personal data for any of the purposes described above, in which case a further retention period may be set and the matter reviewed again on or before the expiry of that further period.
21. The above is subject to the following exceptions:
    1. The barrister may retain records of the client’s name, together with the names of any other parties involved in an instruction and a brief description of the nature of the case, for conflict-checking purposes, until the barrister has retired from any form of legal practice or from any judicial appointment.
    2. Personal data contained in records of processing which the barrister is required by the GDPR to maintain, or which are maintained in order to demonstrate compliance with the GDPR, may be retained for as long as is necessary.
    3. Personal data contained in records that the barrister is required to keep under the legislation referred to in paragraph [13] above may be retained for the periods specified in the legislation.
    4. Personal data contained in records relating to any complaint will be retained for a period of 6 years from the determination of the complaint or such other period as is specified in the Bar Standards Board Handbook.
    5. Annual back-up tapes of Brick Court Chambers’ electronic systems will be retained centrally for 7 years and stored in a locked safe. Any personal data recorded on such tapes will not be deleted whilst the tape is retained. However, such tapes will be used only in order to restore, where necessary, specific files or emails which it is permissible to retain under Chambers Data Retention Policy.
22. A person whose personal data is processed by a barrister may have rights under the GDPR:
    1. to request that the barrister gives that person access to his or her personal data;
    2. to request that the barrister rectifies any inaccurate personal data concerning the person;
    3. to request that the barrister erases the person’s personal data;
    4. to request that the barrister restricts the processing of the person’s personal data;
    5. in certain cases, to receive personal data concerning the person, which the person has provided to the barrister, in a structured, commonly used and machine-readable format.

Full details of these rights, and the circumstances in which they apply and limitations to them, are set out in Articles 15 to 20 of the GDPR.

23. A person whose personal data is processed by a barrister may also have the following rights under Article 21 of the GDPR:
    1. The right to object, on grounds relating to the person’s particular situation, to the processing of personal data concerning you based on the legitimate interests pursued by the barrister. If you object to such processing, the Barrister will no longer process the personal data except (i) where there are demonstrable compelling legitimate grounds for the processing which override the person’s interests, rights and freedoms or (ii) for the establishment, exercise or defence of legal claims.
    2. An absolute right to object at any time to the processing of personal data concerning that person for direct marketing purposes.
24. You have the right to make a complaint regarding the treatment of your personal data with the Information Commissioner’s Office: https://ico.org.uk/
25. Any changes we make to this privacy policy in the future will be posted on our website. This privacy notice was last updated on 23/05/2018.
26. In so far as the above information as to processing of personal data is relevant and applicable to a barrister or other member of BCC when acting as an arbitrator or mediator including their engagement as an arbitrator or mediator, the conduct of the arbitration or mediation, any rights of data subjects, or the retention of any such information or otherwise, it will only apply, with such changes and adjustments as apply to the role of an arbitrator or mediator, to the extent that such obligations are not exempted by the GDPR or the Data Protection Act 1998 and are not otherwise precluded by arbitrators’ statutory and other mandatory legal rules and obligations under applicable law including those relating to the preservation of the confidentiality of the arbitral proceedings or mediation. 

Privacy Notice for Business Development & Marketing

1. This notice applies to data used for business development purposes.
2. All tenants (including Members of Chambers and Door Tenants) of Brick Court Chambers (“Chambers”) are joint data controllers for the purposes of processing business development data.
3. Personal data is collected and processed for business development purposes by the Chambers’ Business Development Committee, by individual Members of Chambers and Door Tenants, and by members of Chambers’ staff working under their direction or on their behalf. To view a list of our Members and Door Tenants on our website, where the contact details for each of them are available, please click here.

COLLECTION OF PERSONAL DATA

4. We collect personal data from you when you correspond with Members of Chambers or Chambers’ staff, by telephone, email or otherwise, including during the carrying out of professional instructions, in the course of any enquiries you make with regard to instructing or engaging a Member of Chambers, when you attend a Chambers event or when you subscribe to Chambers email or news updates.
5. We may also collect personal data about you from publicly available sources such as the website of your firm or company or from other individuals within your firm or company.
6. The personal data we process may include any personal details including your name, job title and business contact details e.g. business address, email and phone numbers.

WHY WE PROCESS PERSONAL DATA

7. We process your personal data for the purpose of marketing the work of Chambers, including providing information to you regarding Chambers’ work and related marketing activities such as seminars or conferences that Chambers might conduct or in which Chambers might have an involvement, or to invite you to social events. 
8. We will invite you to opt in to receiving electronic news items (such as updates about recent cases) and invitations to conferences, seminars and similar events that may be of interest to you. You will only receive electronic marketing communications if you have opted in to do so.
9. Your personal data may be shared internally within Chambers e.g. if you are listed on an event attendance list, your data will be shared with those Members of Chambers, Door Tenants, Pupils and Mini-pupils and staff who may be attending the event.
10. We will not routinely share your personal data for marketing purposes with external organisations, except where we are required to provide attendance lists to external venues of Chambers events for security and fire safety regulations or where a service provider is engaged to assist us in our external communications (e.g. by sending out mail or post on our behalf). We may also provide your personal data to bodies or publications that rank lawyers or organise awards (such as the legal directories) where you are put forward to provide a reference.
11. The legal basis for the processing of your personal data is that the processing is necessary for the purposes of Chambers’ legitimate interests, including for planning and organising business development and marketing of Chambers’ work.  In addition, the processing may be based on your consent where you have expressly given that to us.

TRANSFER OF DATA OVERSEAS

12. In some cases, we may transfer your personal data to a country outside the EEA or to an international organisation, for example in connection with the organisation of a Chambers overseas event or when a Member of Chambers or member of Chambers’ staff needs to access this data whilst overseas.  A transfer of this type may be made:
13. where the European Commission has determined that the non-EEA country (or a territory or sector within it) or international organisation provides an adequate level of data protection; or
14. where you have explicitly consented to the proposed transfer after having been informed of the possible risks.

DATA RETENTION

15. We intend to review our business development contact lists at least every two years for the purpose of ensuring that it remains necessary to retain your personal data for the purposes referred to above.  As part of that exercise, we intend to invite you to re-opt in for the purpose of electronic communications.
16. Annual back-up tapes of Brick Court Chambers’ electronic systems will be retained centrally for seven years and stored in a locked safe. Any personal data recorded on such tapes will not be deleted whilst the tape is retained. However, such tapes will be used only in order to restore, where necessary, specific files or emails when it is permissible to do so under our Data Retention Policy.

YOUR RIGHTS

17. If you have consented to receive marketing communications you may opt out at a later date. If you no longer wish to be contacted for marketing purposes please email marketing@brickcourt.co.uk.  
18. You have the right to object to the processing of your personal data for the purposes referred to in this notice.  To do so, please email marketing@brickcourt.co.uk.
19. You also have the right to request a copy of, deletion of or correction of, your personal data. To do so, please email marketing@brickcourt.co.uk.
20. Full details of these rights are set out in articles 15 to 21 of the GDPR.
21. You have the right to lodge a complaint regarding the processing of your personal data with the Information Commissioner: https://ico.org.uk/.

CHANGES TO OUR PRIVACY POLICY

22. Any changes we make to our privacy policy in the future will be posted on our website. This policy was last updated on 23/05/2018

CONTACT

23. Any questions, comments and requests regarding this privacy notice should be addressed to marketing@brickcourt.co.uk.

Privacy Notice for Pupillage & Tenancy

1. All Members of Brick Court Chambers (“Chambers”) are joint data controllers for the purposes of processing pupillage and tenancy data. To view a list of our Members on our website, where the contact details for each of them are available, please click here.
2. This policy applies in relation to any application for a pupillage, mini-pupillage, work shadowing, tenancy or door tenancy at Chambers and during the course of a mini-pupillage, pupillage or work shadowing placement. The General Data Protection Regulation (the “GDPR”) requires us to provide this notice to you.

COLLECTION OF PERSONAL DATA

3. Personal data processed and collected by us includes:
4. personal data collected during the  application process  or during the course of work shadowing,  mini-pupillage or pupillage, or from any further correspondence by phone, email or otherwise;
5. personal data collected to enable us to process a Pupillage award or New Tenant loan;
6. personal data received via the Bar Council Pupillage Gateway or any other centralized application process;
7. personal data collected in the course of taking references in support of an application.
4. The personal data collected includes any personal details including name, address, contact details, education and training, employment, right to work in the UK and financial information where relevant.
5. Sensitive personal data collected with your consent includes information about medical or health conditions, including whether or not you have a disability for which Chambers needs to make reasonable adjustments; and equal opportunities monitoring information including information about your ethnic origin, sexual orientation and religion or belief. You are entirely free to decide whether or not to provide such data and there are no consequences of choosing not to.

WHY WE PROCESS PERSONAL DATA

6. We need to process personal data:
   1. to consider and process the application;
   2. to comply with our legal obligations, e.g. to check a potential tenants right to work in the UK, to comply with money laundering regulations and to deduct tax where relevant;
   3. to pursue a legitimate interest, e.g. to assess performance, make a decision on the application, take a reference and protect against a legal claim; and
   4. to process special categories of personal data with the data subjects explicit consent e.g. the Equality & Diversity questionnaire and where specific medical and health information has been disclosed to enable us to make reasonable adjustments.

SHARING OF YOUR INFORMATION

7. Personal Data collected may be  shared with:
   1. the Pupillage Manager and Chambers staff;
   2. solicitors & other third parties where necessary e.g. event attendance lists;
   3. professional regulatory bodies, such as the Bar Standards Board and the Bar Council;
   4. third parties when taking or providing references. 
8. In addition the names of pupils and mini-pupils may be shared with other pupils and mini pupils.

TRANSFER OF DATA OVERSEAS

9. This notice is of general application and as such it is not possible to state whether it will be necessary to transfer your personal data out of the European Economic Area (the EEA). In some cases, we may transfer your personal data to a country outside the EEA or to an international organisation, for example when there is a need for a Member of Chambers to access this data.  A transfer of this type may be made:
   1. where the European Commission has determined that the non-EEA country (or a territory or sector within it) or international organisation provides an adequate level of data protection;
   2. where you have explicitly consented to the proposed transfer after having been informed of the possible risks.

DATA RETENTION

10. We will retain personal data for not more than two years after the final determination of the application or completion of pupillage or work shadowing, whichever is longer. After which we will securely destroy your personal data, with the following exceptions:
11. if a tenancy/door tenancy is agreed, personal data required to support the tenancy will be retained for the duration of your tenancy;
12. financial information relating to payment of Pupillage awards and New Tenant loans will be kept for the current financial year plus 6 years for HMRC.
11. The Equality & Diversity Questionnaires are destroyed once the data has been transferred to the anonymised statistical returns for the BSB.
12. Annual back-up tapes of Brick Court Chambers’ electronic systems will be retained centrally for seven years and stored in a locked safe. Any personal data recorded on such tapes will not be deleted whilst the tape is retained. However, such tapes will be used only in order to restore, where necessary, specific files or emails where it is permissible to do so under our Data Retention Policy.

YOUR RIGHTS

13. You have the right to object to the processing of your personal data for the purposes referred to in this notice; however this will prevent us from considering your application.
14. You also have the right to request a copy of, deletion of or correction of, your personal data, to do so, please email  lyana.peniston@brickcourt.co.uk; however the deletion of your personal data will also prevent us from considering your application.
15. Full details of these rights are set out in Articles 15 to 21 of the GDPR.
16. You have the right to lodge a complaint regarding the processing of your personal data with the Information Commissioner: https://ico.org.uk/.            

CHANGES TO OUR PRIVACY POLICY

17. Any changes we make to our privacy policy in the future will be posted on our website. This privacy notice was last updated on 23/05/2018.

CONTACT

18. Questions, comments and requests regarding this privacy policy should be addressed to lyana.peniston@brickcourt.co.uk.

Privacy Notice for Suppliers

1. All Members of Brick Court Chambers (“Chambers”) are joint data controllers for the purposes of processing supplier data. To view a list of our Members on our website, where the contact details for each of them are available, please click here.
2. This notice sets out the basis of processing of any personal data about you or your staff or subcontractors that we may receive in the course of engaging in business with you.  The General Data Protection Regulation (the “GDPR”) requires us to provide this notice.

COLLECTION OF PERSONAL DATA

3. We may obtain information from suppliers of goods and services to Chambers, which contains personal data such as:
   1. Contact information i.e.  Name, email address, telephone number, address, limited personal information notes;
   2. invoice information i.e.  Details of invoices, payments bank details, financial information; 
   3. in the case of suppliers of onsite subcontracted cleaning staff: evidence that the supplier pays the London Living Wage and undertakes criminal records checks as permitted by law.
4. We may also collect personal information relating to suppliers of goods and services to Chambers from places such as business directories and other commercially or publicly available sources e.g. to give better contact information if we are unable to make contact directly.

WHY WE PROCESS PERSONAL DATA

5. We need to process data:
   1. for the performance of a contract or to take steps to enter into a contract;
   2. to ensure we are complying with our legal obligations, e.g. to comply with HMRC requirements;
   3. to pursue a legitimate interest e.g. for insurance purposes, to ensure security of premises and staff, to enable Chambers to comply with our supplier policies and to protect against a legal claim.

SHARING OF PERSONALDATA

6. Personal Data collected may be  shared with:
   1. Chambers’ staff;
   2. with our bank when processing supplier payments;
   3. with our landlord and legal representatives when engaging building/facilities contractors or other third parties when taking or providing supplier references. 

TRANSFER OF DATA OVERSEAS

7. This notice is of general application and as such it is not possible to state whether it will be necessary to transfer personal data relating to suppliers of goods and services to Chambers out of the European Economic Area (the EEA). We may when relevant transfer such personal data to a country outside the EEA or to an international organization: e.g. in performance of a contract to provide goods or services to a member of chambers whilst they are overseas. This may include event organization, legal, travel or courier services.  A transfer of this type may be made:
   1. where the European Commission has determined that the non-EEA country (or a territory or sector within it) or international organisation provides an adequate level of data protection;
   2. where you have explicitly consented to the proposed transfer after having been informed of the possible risks.

DATA RETENTION

8. We retain personal data relating to suppliers of goods or services to Chambers for the period in which the goods and services are being provided to Chambers, or for the period in which those goods and services continue to be used, to allow for any issues as to those goods and services to be addressed. 
9. It may also in some cases be necessary to retain this information for a defined period following the supply so as to deal with any potential claim that may arise.  This period would commence on the date of the supply, and run for the limitation period, plus an additional year. 
10. Information may also need to be retained for seven years for tax purposes. 
11. Annual back-up tapes of Chambers’ electronic systems will be retained centrally for seven years and stored in a locked safe. Any personal data recorded on such tapes will not be deleted whilst the tape is retained. However, such tapes will be used only in order to restore, where necessary, specific files or emails which it is permissible to do so under our Data Retention Policy.

YOUR RIGHTS

12. You have the right to object to the processing of your personal data for the purposes referred to in this notice.  However, this may prevent us from continuing to contract with the supplier of goods and services to which the personal data relates. You also have the right to request a copy of, deletion of or correction of, your personal data. However, the deletion of your personal data may also precent us from continuing to contract with the supplier of goods and services to which the personal data relates. To do so, please email administration@brickcourt.co.uk. Full details of these rights are set out in Articles 15 to 21 of the GDPR.
13. You have the right to lodge a complaint regarding the processing of your personal data with the Information Commissioner: https://ico.org.uk/.            

CHANGES TO OUR PRIVACY NOTICE

14. Any changes we make to our privacy notice in the future will be posted on our website. This privacy notice was last updated on 23/05/2018.

CONTACT

15. Questions, comments and requests regarding this privacy notice should be addressed to administration@brickcourt.co.uk.

Privacy Notice for Job Applicants

1. All Members of Brick Court Chambers (“Chambers”) are joint data controllers for the purposes of processing applicants’ data. To view a list of our Members on our website, where the contact details for each of them are available, please click here.
2. Chambers collects and processes personal data as part of the process of recruiting any member of staff. This notice also applies to applications for work experience. Chambers is committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.

COLLECTION OF PERSONAL DATA

3. Chambers collects and processes a range of personal data about you. This includes:
4. name, marital status, address and contact details, including email address and telephone number, date of birth and gender;
5. qualifications, skills, experience and employment history,
6. current remuneration information, including benefits such as pensions etc;
7. nationality and entitlement to work in the UK;
8. medical or health conditions, including whether or not you have a disability for which Chambers needs to make reasonable adjustments; and
9. personal data collected in the course of taking references in support of an application or in checking for any criminal record.
4. Chambers may collect this information from you, e.g. from application forms or CVs, from correspondence with you, or through interviews and aptitude tests.
5. Chambers may collect personal data about you from third parties, such as references supplied by former employers, information from employment background check providers and information from criminal records checks permitted by law. Chambers seeks information from third parties with your consent only.

WHY WE PROCESS PERSONAL DATA

6. We need to process personal data:
   1. to consider and process your application;
   2. to check an employee’s entitlement to work in the UK and to comply with health and safety laws;
   3. to run a recruitment process and to respond to and defend against any legal claims;
   4. to process special categories of personal data with the data subjects explicit consent e.g. where specific medical and health information has been voluntarily disclosed to enable us to make reasonable adjustments for interview.

SHARING OF YOUR DATA

7. Your information may be shared internally, including with Chambers staff involved in recruitment, and IT staff if access to the data is necessary for performance of their roles.
8. Chambers will share your data with third parties in order to obtain references and/or necessary criminal records checks from the Disclosure and Barring Service.
9. This notice is of general application and as such it is not possible to state whether it will be necessary to transfer your personal data out of the European Economic Area (the EEA). In some cases, we may transfer your personal data to a country outside the EEA or to an international organisation, for example when there is a need for a Member of Chambers to access data while in a non-EEA country.  A transfer of this type may be made:
   1. where the European Commission has determined that the non-EEA country (or a territory or sector within it) or international organisation provides an adequate level of data protection; and
   2. where you have explicitly consented to the proposed transfer after having been informed of the possible risks.

DATA RETENTION

10. If your application is unsuccessful, Chambers will hold your relevant personal data for a maximum of one year from the final determination of your application before it is destroyed. This is to enable us to answer any queries and defend against a potential legal claim.
11. If your application is successful, personal data collected during the recruitment process will be transferred to your personnel file. The periods for which your data will be held will be specified in the Privacy Notice for Chambers Staff.
12. Annual back-up tapes of Brick Court Chambers’ electronic systems will be retained centrally for seven years and stored in a locked safe. Any personal data recorded on such tapes will not be deleted whilst the tape is retained. However, such tapes will be used only in order to restore, where necessary, specific files or emails which it is permissible under our Data Retention Policy.

YOUR RIGHTS

13. You have the right to object to the processing of your personal data for the purposes referred to in this notice; however, this may prevent us from considering your application.  You also have the right to request a copy of, deletion of or correction of, your personal data; however the deletion of your personal data will also prevent us from considering your application. To do so, please email joanne.case@brickcourt.co.uk.
14. Full details of these rights are set out in articles 15 to 21 of the GDPR.
15. If you believe that Chambers has not complied with your data protection rights, you can complain to the Information Commissioner https://ico.org.uk/.

CHANGES TO OUR PRIVACY POLICY

16. Any changes we make to our privacy policy in the future will be posted on our website and, where appropriate, notified to you by e-mail. This privacy notice was last updated on 23/05/2018.

CONTACT

17. Questions, comments and requests regarding this privacy notice should be addressed to joanne.case@brickcourt.co.uk.