Privacy Policy
Last updated: 12 March 2026
This policy explains how MAM Gruppe Limited collects and uses personal data. It covers our website (mamgruppe.com), telephone and email contact, and our recruitment services. Read it alongside any other notice we give you at the point we collect your data.
Contents
1. Who We Are
2. What Data We Collect
3. How We Collect It
4. How We Use It
5. Who We Share It With
6. International Transfers
7. Security
8. Retention
9. Your Rights
10. Glossary
1. Who We Are
MAM Gruppe Limited is the data controller for the purposes of UK data protection law. Registered address: UK House, 2nd Floor, 82 Heath Road, Twickenham, London TW1 4BW. "We", "us" and "our" in this policy refer to MAM Gruppe Limited.
Questions and rights requests should be sent to info@mamgruppe.com.
If you have a complaint you can take it to the Information Commissioner's Office at ico.org.uk. We'd ask you to come to us first.
We update this policy from time to time. Changes go up on this page. If we make material changes and hold your email address, we'll let you know.
Our website may link to third-party sites. Their privacy practices are their own and we are not responsible for them.
2. What Data We Collect
Depending on how you deal with us, we may hold:
- Identity data — name and title
- Contact data — postal address, email, and telephone numbers
- Profile data — CV, employment history, qualifications, and related professional information
- Technical data — IP address, browser type, and device information collected via our website
- Usage data — how you navigate our website
We do not ask for Special Category data (health, ethnicity, religion, sexual orientation, and similar). If your CV includes any, please remove it before sending.
3. How We Collect It
We collect personal data through:
- Direct contact — emails, calls, letters, CV submissions, and website forms
- Professional platforms — publicly visible profiles on LinkedIn and similar networks
- Referrals — when another candidate or contact puts us in touch with you
- Website — automatically, via cookies when you visit mamgruppe.com
If you give us someone else's personal data, such as a referral, make sure you have grounds to do so and point them to this policy.
4. How We Use It
We only process personal data where we have a lawful basis. The table below sets this out.
| Purpose | Data used | Lawful basis |
|---|---|---|
| Registering you as a candidate or client | Identity; Contact | Performance of a contract |
| Matching candidates to roles and communicating with you about our services | Identity; Contact; Profile | Legitimate interests: running a recruitment agency and introducing candidates to employers |
| Maintaining our candidate and client database | Identity; Contact; Profile | Legitimate interests: keeping records so we can provide recruitment services over time |
| Preparing and formatting candidate materials for submission to employers, including through technology tools | Identity; Contact; Profile | Legitimate interests: presenting candidates professionally |
| Keeping you informed of changes to our terms or this policy | Identity; Contact | Performance of a contract; Legal obligation |
| Running and protecting our business and website | Identity; Contact; Technical | Legitimate interests: keeping systems secure and our business operational |
Technology tools
We use technology tools, including automated processing tools, for administrative tasks such as formatting candidate materials. We do not use them for screening, scoring, or making decisions about candidates. Our consultants make those calls. Third-party tools that handle personal data on our behalf are bound by contract to treat it with the same care we do.
Marketing
We do not use your data for marketing and will not pass it to anyone else for that purpose.
Cookies
We use cookies on our website. You can block or limit them through your browser settings, though some parts of the site may not work properly if you do.
5. Who We Share It With
We share personal data only where we need to, and only with:
- Prospective employers — your CV and relevant details, but only with your prior consent
- Service providers — IT, database, and operational suppliers who act as processors under contract and may not use your data for their own purposes
- Professional advisers — lawyers, accountants, and insurers on a need-to-know basis
- Regulatory bodies — HMRC and equivalent authorities where the law requires it
If the business is sold or transferred, personal data may go with it. Any buyer takes it on the same terms as this policy.
6. International Transfers
Some service providers are based outside the United Kingdom. Where data crosses a UK border, we use transfer mechanisms that UK law recognises, such as Standard Contractual Clauses or transfers to countries with an adequacy decision. Contact us if you want to know the specific arrangements for any particular transfer.
7. Security
We use technical and organisational controls to protect personal data from loss, misuse, and unauthorised access. Internally, access is limited to people who need it. We have procedures for dealing with data breaches and will notify you and any relevant regulator where the law requires it.
Data sent over the internet is not fully secure in transit. Anything you send us electronically travels at your own risk until it arrives.
8. Retention
We keep personal data for as long as is necessary for the purpose it was collected, taking into account any legal or regulatory obligations that apply.
As a recruitment agency, we hold candidate records on the basis that relevant roles can come up at any time, and that candidates who register with a recruiter expect their details to be kept on file. You can ask us to delete your data at any time. See Section 9.
9. Your Rights
Under UK data protection law you can:
- Access — ask for a copy of what we hold on you
- Rectify — have wrong or incomplete data corrected
- Erase — ask us to delete your data if we have no good reason to keep it
- Restrict — ask us to pause processing in certain circumstances
- Port — receive your data in a structured, machine-readable format
- Object — challenge processing we base on legitimate interests
- Withdraw consent — where consent is the basis for processing, pull it at any time
No fee applies unless a request is clearly unfounded or excessive. We respond within one month. Contact us at info@mamgruppe.com.
10. Glossary
Lawful bases
Legitimate interests — we have weighed our interest in processing against any impact on your rights and concluded that our interests prevail. You can ask us how we reached that conclusion for any specific activity.
Performance of a contract — processing needed to perform or prepare to perform a contract with you.
Legal obligation — processing needed to comply with a legal requirement that binds us.
Third parties
Processors and sub-processors we use include:
- IT and system administration providers
- Technology and software providers used in our day-to-day operations
- Professional advisers: lawyers, auditors, and insurers
- HMRC and other regulatory bodies where legally required