Cresset BioMolecular Discovery Limited, trading as Cresset, is registered as a company in England and Wales: 4151475. Our registered office address is New Cambridge House, Bassingbourn Road, Litlington, SG8 0SS, UK.
As Data Controller, Cresset takes your privacy seriously. You can contact our Data Controller at firstname.lastname@example.org.
This privacy notice describes how and why we obtain, store and process personal data which can identify you. We will update this notice from time to time and shall indicate on this page when changes have been made.
Information we collect directly from you
When applying for a careers opening, we will use the information you send us to assess your application and suitability for the position. The information you give us will include any combination of, and is not limited to, your name; date of birth; nationality; home address; email address; phone numbers and employment details such as job title, company name, work contact details, right to work status and any previous roles. We will also collect ‘special categories’ of personal information but only where it is relevant to ensuring we are providing a safe and secure working environment. You are required to ensure that the personal data you provide to us is up-to-date, and to contact us immediately if you need to amend any personal information given.
Information we collect from other sources
We also collect information about you from other sources and combine this information with personal data provided by you. This helps us to update, expand and analyze our records, identify new customers and create more tailored advertising to provide services of interest to you. In particular, we collect personal data from third-party providers of business contact information, including professional contact details, employment-related information such as job titles, and device / location-related information such as IP addresses for purposes of responding to an interest you have in our services, targeted advertising, delivering relevant email content, event promotion and profiling.
We obtain information through partners, vendors, distributors, recruitment agencies, suppliers and other third parties. These enterprises largely fall into the following categories: partners, hosts or vendors at events or trade shows, research partners and enterprises that deploy Cresset technology or third-party offerings that include Cresset technology.
Why we collect it
We collect information about you so that we can personalize your use of our website, send you newsletters or email alerts, conduct surveys, register you for events, enable and enhance your use of our software and services. Depending upon your selections at the point of data collection we will send you information about related products and services from us. If specific personal data is not provided it will not be possible for us to provide the products or services you have requested.
If the personal data you provide to us relates to a careers opening for which you are shortlisted we will instigate background checks in order to verify the information you have provided us with, in particular your qualifications and experience.
Where we store the data we collect
The personal data that we collect from you is stored at destinations within and outside the European Economic Area (‘EEA’). It is also processed by staff operating outside the EEA who work for us or for one of our suppliers, partners or distributors. Such staff are engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this privacy notice. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.
Who we disclose it to
The personal data you provide to us will be disclosed to third parties, including our partners and distributors, where there is a legitimate interest to fulfil the service requested by you. In certain circumstances we will need to disclose information about you if you breach this privacy notice or if you breach our Terms and Conditions of sale. We will also disclose your personal data, or access your account, if required to do so by law or by any Governmental body.
Upon commencing employment with Cresset, employee personal data will be shared the purposes of the legitimate interests pursued by the Controller or by a third-party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Examples include, but are not limited to, sharing personal data for the purposes of, payroll, pensions, conference attendance, subscriptions, memberships. Employees will be asked to consent to, or abstain from, how their personal data is further used in instances including, but not limited to on the Cresset website, social media or other third-party channels, such as YouTube, in press/media, testimonials.
How long we retain your data
We retain personal data for the period necessary to provide the services you have requested and fulfill the contractual obligation, including maintaining opt-out lists to fulfill advertising and marketing choices or to comply with mandatory record retention or legal hold requirements, as agreed in an individual consent; and to resolve disputes, and to otherwise fulfill the purposes, rights and obligations outlined in this privacy notice.
Retention periods can vary significantly based on the type of information and how it is used. Our retention periods are based on criteria that include legally mandated retention periods, pending or potential litigation, our intellectual property or ownership rights, contract requirements, operational directives or needs, and historical archiving. When personal data is removed from our systems, it will be deleted or destroyed using appropriate security protocols so that it cannot be reconstructed or read.
If you are unsuccessful in an application for a careers opening, we will permanently delete any application data received after a period of six months, subject to any legal obligations that require us to hold the information for longer. In that case we will only keep the information which we are required to.
Any personal data you provide to us, directly relating to a careers opening, will only be used to inform you about suitable job opportunities but if you would rather we did not please let us know at any time and we will your remove stored details.
Contacting us via social media
We will manage your interactions with us on a number of platforms. Cresset maintains a presence on social media websites including Twitter, Facebook, LinkedIn and YouTube. In addition, we use conference platforms, including Microsoft Teams, GoToMeeting, GoToWebinar and Zoom. If you send us a message via any of these channels we will capture this message in our internal systems.
Keeping information about you secure is very important to us so certain sections of the website will encrypt data using SSL or a comparable standard. However, no personal data transmission over the Internet can be guaranteed to be totally secure. As a result, whilst we strive to protect your personal information, we cannot ensure or warrant the security of any information which you send to us, and you do so at your own risk.
Third-party websites and services we link to through our websites have their own privacy policies, independent of us. We hold no responsibility or liability for these independent policies. We encourage you to look for and review the privacy policies of any third-party website you visit.
Data on minors
We do not knowingly collect personal information of children under 13.
Accessing and updating your personal information
We will always let you have a copy of personal information we have about you, should you request it, and you are entitled to correct it or request deletion if you wish. Provision of your personal information will be provided free of charge, unless the request is deemed to be manifestly unfounded, excessive or repetitive, in which case an administrative fee will be charged. All requests for information will be provided within a month.
If you have any questions or complaints relating to this privacy notice, or require further details on how we use and process the personal information we have about you, please contact us. We will respond to you promptly.
Last updated: February 2021