The purpose of this Privacy Notice is to outline how we collect, process and share personal data we hold about you. This Privacy Notice will outline the types of personal data we process about you and the legal basis we rely on to do so.
Cpl Resources (“Cpl”) is committed to protecting and respecting your privacy. We wish to be transparent on how we collect, store and share personal data and to ensure that you understand your rights under the General Data Protection Regulation (“GDPR”).
In this Privacy Notice, we outline:
Cpl is a global provider of talent solutions to startup companies, multinationals, and SMEs in every sector from Pharmaceuticals to Fund Accounting. Cpl’s mission is to match the right talent to the right organisation.
If you wish to locate further information on Cpl and the services we offer, you can find this on the Cpl website here.
All personal data we gather will be “processed” in accordance with all applicable data protection laws and principles, including the General Data Protection Regulation, the Data Protection Act 2018 and the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 (“ePrivacy Directive”).
If you are unhappy with the way we have handled your personal data and wish to complain, or if you would like further information about the way your personal data will be used, please contact us at the below:
Data Protection Officer Cpl Resources Ground Floor, One Haddington Buildings, Haddington Road, Dublin 4, D04 X4C9, Ireland Telephone: +353 1 614 6000 Email: [email protected]
If you are unsatisfied with our use of your personal data or our response to any requests by you to exercise any of your rights, then you have the right to complain to the Data Protection Commission. See contact details below:
Data Protection Commission 21 Fitzwilliam Square South Dublin 2 D02 RD28 Ireland Email: [email protected] Telephone: +353 57 868 4800 / +353 761 104 800
We collect personal data to enable the provision of services to support the Cpl purpose. The following non-exhaustive methods of data collection are an indication of ways in which we may obtain your information:
It is important that the personal data you provide to us is up to date and accurate. As outlined in Section 8.2 of this notice, if the personal data we hold about you is inaccurate or incomplete, please contact us and we will update your data.
In order to provide our services, Cpl needs to collect various types of personal data. The type of personal data we collect on you will vary depending on the nature of our relationship with you. Below we have outlined a non-exhaustive list of the types of data we may collect and our purpose for collecting that data.
| Process | Type of Data Collected |
|---|---|
| Recruitment & Selection | Name, date of birth, contact details, address, email address, passport, identification copy, PPS number, CVs, qualifications, employment history, education history, training history, driver license, professional body membership |
| Background / Compliance Checks | Garda vetting, overseas police clearance, visa checks, references |
| Diversity Equity and Inclusion Survey | Gender, age, location, ethnicity, sexual orientation, nationality, disability |
| Talent Support | Interview notes, interview feedback, client provided feedback |
| Direct Marketing | Name, email address, phone number |
| Health and Safety | Medical information, incident reports |
| Operational Security | CCTV footage |
The main purpose for which Cpl processes your personal data is to provide a service to you, or otherwise manage our relationship with you. The following section provides more detail on the purposes for which we process your personal data and the legal basis by which we do this.
| Process | Description | Lawful Basis for Processing |
|---|---|---|
| Recruitment & Selection | To identify and place candidates most suitable for the needs of our clients, or for internal Cpl vacancies. | The use of this data is necessary for the performance of a contract between our client and the candidate or between Cpl and candidate. |
| Background / Compliance Checks | To verify that a candidate is qualified and eligible to work in a given position with Cpl or our client. | The use of this data is necessary to comply with legal obligations to which Cpl is subject. |
| Diversity Equity and Inclusion Survey | To collect information and insights on diversity, equity and inclusion amongst our candidates. | The use of this data is done with the consent of the data subject. |
| Talent Support | To provide support and assistance to candidates to improve the likelihood that they are placed with Cpl clients. |
We only keep your personal data for as long as is necessary for the purpose for which it was originally obtained, and / or in accordance with any requirements imposed by the law. This means that the period of time for which we store your personal data may depend on the type of data we hold. To determine the appropriate retention period of personal data, we consider the amount, nature and sensitivity of the personal data, the purposes for which we process your personal data and any legal requirements to retain your data. The table below outlines a general summary of our retention periods.
| Data Type | Retention Period |
|---|---|
| Recruitment and Selection Data | Internal Recruitment – 7 years post-employment (successful candidate), 3 years (unsuccessful candidate). Client Recruitment – 7 years from last contact with candidate |
| Background / Compliance Check Data | Internal Recruitment – 7 years post-employment (successful candidate), 3 years (unsuccessful candidate). Client Recruitment – 7 years from last contact with candidate |
| Diversity Equity and Inclusion Survey | 14 months from when survey is complete |
| Talent Support Data | 7 years from last contact with candidate |
| Direct Marketing Data | Until data subject withdraws consent |
| Health and Safety Data | 10 years from date of incident |
| Operational Security Data | 30 days |
We may disclose your personal information to outside organisations. Below is a list of the categories of recipients we share your personal data (as outlined above) with:
Cpl Resources is part of the Cpl Group of companies. Cpl Resources may share your application details and contact information with other companies in the Cpl Group to allow them to contact you where they have open roles we believe you would be suitable for based on your experience. More information on the Cpl Group can be found here.
Any party you have given us permission to speak to (such as a relative, friend or legal advisor) and other people or companies associated with you that are authorised by you to act on your behalf.
Our employees, agents and contractors including companies that provide services in relation to telecommunications and postage, data storage, document production and destruction, IT and IT security, or design.
© 2026 Cpl. All rights reserved.
| The use of this data is necessary for the performance of a contract between Cpl and candidates. The use of this data is for the legitimate interest of the company to ensure that candidates are lace with Cpl clients. |
| Direct Marketing | To keep candidates / prospective candidates up to date on job opportunities. | The use of this data is done with the consent of the data subject. |
| Health and Safety | To record accidents or incidents that take place on Cpl premises. | The use of this data is necessary to comply with Cpl’s record-keeping obligations under the Safety, Health and Welfare Act. |
| Operational Security | To monitor who has access to Cpl premises. | The use of this data is for the legitimate interest of the company to ensure security and health and safety for those on the premises. |
Where required by law, state regulators and authorities such as the Data Protection Commission, the Revenue Commissioners, and law enforcement agencies such as An Garda Síochána.
We may also disclose your personal data to the following recipients or categories of recipients:
On occasion, we may need to transmit your personal data outside of the European Economic Area. In these circumstances, we will ensure that the transfer complies with our data protection obligations, and we will ensure that the transfer agreement is based on an approved transfer mechanism, such as the European Commission’s standard contractual clauses or an adequacy decision.
As a data subject, you will have the following rights in relation to the processing of your personal data. Please note that these rights are not absolute, and restrictions may apply in certain situations.
Please send all requests to [email protected] with as much detail as possible about your requirements to allow us to deal with your request efficiently. Before fulfilling your request, we may ask you to provide identification to enable us to verify your identity.
Upon receipt of a valid request, we will have one calendar month to respond to your request, with the possibility of extending by two further months. If we require more time to deal with your request, we will notify you of the delay and the reasons behind it within 30 days of the receipt of the request. If we refuse your request, we will also notify you within 30 days of the receipt of the request accompanied by the reasons for the refusal.
You are entitled to contact the Data Protection Commission if we refuse your request.
You have the right to know what personal data we hold about you, why we hold the data and how we process your personal data.
When submitting your request, please provide us with information to help us verify your identity and as much detail as possible to help us identify the information you wish to access (i.e. date range, subject of the request).
If the request is submitted by a third party (such as a solicitor) on your behalf, the request will be required to include written authorisation from you for the provision of specific data to the third party.
Please note that an access request is free of charge, however, where we determine a request to be unjustified or excessive, we may charge you a reasonable fee.
You have a right to request that the personal data held in relation to you is up to date and accurate.
Where information is inaccurate or incomplete, we encourage you to contact us to have this information rectified. Upon receipt of your request, we will ensure that the personal data is rectified and as up to date as is reasonably possible.
You have the right to seek the erasure of personal data we hold on you in the following circumstances:
However, we will be unable to fulfil an erasure request if the personal data is required for any of the below activities:
You have the right to restrict the extent for which your personal data is being used by us in circumstances where:
When the use of your data has been restricted, your personal data will only be further used:
We will contact you to confirm where the request for restriction is fulfilled and will only lift the restriction after we have informed you that we are doing so.
You have the right to the provision of all personal data, which you provided to us, provided to you in a structured, commonly used and machine-readable format where:
You may also request that we send this personal data to another legal entity where technically feasible.
We will only refuse such a request if the data being requested may adversely affect the rights and freedoms of others.
You have the right to object to the further use of your personal data where:
If you wish to object to the use of your data, please contact us with your request. We will then stop using the data or personal data unless it is required for legal proceedings.
Where we are processing your personal data based on your consent, you will have the right to withdraw your consent at any time. If you wish to withdraw your consent, please contact us with your request. We will then stop the further processing of your personal data.
You have a right not to be subject to a decision based solely on automated processing or profiling, where such decisions would have a legal effect or significant impact on you.
Currently, we do not employ any systems which use automated decision making or profiling on data relating to our candidates.
Where we (or one of our third-party processors) use profiling, which produces legal effects for you or otherwise significantly affects you, you will have the right to object to such processing.
Cpl may contact you with information about products and services of ours that we think may be of interest to you.
You have the right at any time to stop Cpl from contacting you for marketing purposes.
If you no longer wish to be contacted for marketing purposes, you can use the unsubscribe button in the footer of every marketing communication or by contacting [email protected].
Cpl respects the privacy of all visitors to our website. This website employs cookies in order to operate effectively. More information on how this website uses cookies can be found here.
We will review this Privacy Notice regularly and reserve the right to make changes at any time to take into account changes in our business, legal requirements, and the manner in which we process personal data. This Privacy Notice was last updated on 18/10/2025.