Privacy Notice
1.0 Candidate, Vendors, Contractors’ and Sub-Contractors’ Privacy Notice
This privacy notice sets out the ways in which the Jones Engineering entities (“company” “we” “us “our”) processes your personal data. The data controller for your personal data is the Jones Engineering entity that you are applying as a candidate to or the entity you are contracted with, sub-contracted with or client of or a vendor of (See Annex A for the list of companies). This notice principally applies to candidates or future employees and third parties such as vendors, contractors and sub-contractors when they are processing personal data on our behalf. This notice describes the following:
- Who we are.
- The personal data we process.
- Compliance with the principles relating to processing of personal data.
- How and where we obtain your personal data.
- Automated decision making or the automated processing of personal data.
- How long do we retain your personal data.
- Recipients of personal data transfers.
- CCTV
- Your rights in respect of our processing of your personal data.
- Contact Details for Privacy Rights Requests
1. Who we are
| Data Controller | Data Privacy Officer (For all Jones Engineering entities regardless of your location) |
| The entity you engage with (See Annex A): e.g.: H. A. O’Neil Ltd (10341) 83 Pembroke Rd, Dublin 4, D04 HN50 info@joneseng.com +353 1 474 9800 |
Jones Engineering House, 83 Pembroke Rd, Dublin 4, D04 HN50 privacy@joneseng.com +353 1 474 9800 |
2. Compliance with the principles relating to processing of personal data
Jones Engineering complies with the principles of the General Data Protection Regulation. That means our processing of your personal will be:
- Processed lawfully, fairly and in a transparent manner.
- Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
- Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
- Accurate and, where necessary, kept up to date.
- Kept in a form which permits identification of data subjects no longer than is necessary.
- Processed in a manner that ensures appropriate security of personal data.
3. The personal data we process
3.1. Jones Engineering may process the following categories of personal data of its candidates, former employees, vendors, contractors and sub-contractors. The table below also lists the purpose and lawful basis for the processing
| Personal data categories | Purposes of the processing | Lawful basis of the processing |
| Candidate: CVs, skills, education, continuous professional development, qualifications, passport or visa details, photos or videos, previous employment, interview notes, contact details. | For candidate evaluation and potential employment purposes. | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. |
| Candidate: Financial information such as bank account details, salary, pension payments, PPSN, contact details. | For future employment salary, expenses and pension payment purposes. | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. |
| Candidate: Next of Kin and family details. | For future employment health and safety reasons. | Processing is necessary to protect the vital interests of the employee or their family. |
| Candidate: Special Categories of Data such as trade union membership, biometric data for the purpose of uniquely identifying a natural person, data concerning health and religious belief may be processed. | To fulfil trade union related obligations, control area access, health and safety requirements, incident and accident recording and government documentation or visa requirements. | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. |
| Vendor: Contact details, account details, invoices, quotations, pricing lists, schedules, specifications, products. | To procure materials required by Jones Engineering. | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Processing is necessary for the purposes of the legitimate interests pursued by Jones Engineering. |
| Former Employee: Financial information such as bank account details, salary, expenses, pension payments, PPSN, contact details. | For salary, expenses and pension payment purposes. | Processing is necessary for the performance of a contract with the employee.
Processing is necessary for the purposes of the legitimate interests pursued by Jones Engineering. |
| Former Employee: Employment details, CVs, skills, education and continuous professional development, performance reviews, passport or visa details, photos or videos, equipment issued, previous employment, leave. | For general employment and employee progression purposes. | Processing is necessary for the performance of a contract with the employee.
Processing is necessary for the purposes of the legitimate interests pursued by Jones Engineering. |
| Former Employee: Craft and apprentice employee communications: company and sustainability newsletters and bulletins, relevant event awareness news, training events and course information. | For craft and apprentice employees’ professional development and company awareness | Processing is necessary for the performance of a contract with the employee.
Processing is necessary for the purposes of the legitimate interests pursued by Jones Engineering. |
| Former Employee: Next of Kin and family details. | For health and safety reasons. | Processing is necessary to protect the vital interests of the employee or their family.
Processing is necessary for the purposes of the legitimate interests pursued by Jones Engineering. |
| Former Employee: Communications and IT equipment maintenance, administration and monitoring. | To access business related communications and protect the company’s intellectual property, employees, rights and freedoms of individuals, reputation, sensitive personal data and preventing security threats. | Processing is necessary for the performance of a contract with the employee.
Processing is necessary for the purposes of the legitimate interests pursued by Jones Engineering. |
| Former Employee: Special Categories of Data such as trade union membership, biometric data for the purpose of uniquely identifying a natural person, data concerning health and religious belief may be processed. | To fulfil trade union related obligations, control area access, health and safety requirements, incident and accident recording and government documentation or visa requirements. | Processing is necessary for the performance of a contract with the employee.
Processing is necessary for the purposes of the legitimate interests pursued by Jones Engineering. |
| Contractor and Sub-contractor: Contracts, invoices, CVs, account details, employee timesheets, identity and contact details. | To perform contractual obligations of contractors or ensure contractual obligations of sub-contractors. | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Processing is necessary for the purposes of the legitimate interests pursued by Jones Engineering. |
| CCTV Images | To safeguard health and safety, deter criminal acts, monitor unauthorised access and safeguard Jones Engineering property and equipment. | Processing is necessary for the purposes of the legitimate interests pursued by Jones Engineering. |
4. How and where we obtain your personal data
4.1. Direct Interactions
- Jones Engineering may process personal data obtained directly from you in the form of CVs, forms, documents, emails, communications, electronic portals, conversations, phone calls, video calls, instant messaging, interviews, passports, business cards, photos etc.
4.2. Indirect interactions
- Jones Engineering may also process personal data obtained indirectly such as from recruitment professionals that are involved in your recruitment with us, or who put you forward as a candidate or where our own staff provide us with your CV and / or other details, as part of a referral, tax authorities, pension schemes, employee supplied referees, LinkedIn pages or other employment related third parties in the case of candidate personal data. Vendor, contractor and subcontractor data may be obtained indirectly through recommendations, referrals, publicly available information, business cards etc. Any indirectly obtained personal data will only be processed if there is a lawful basis to do so.
5. Automated decision making or the automated processing of personal data
5.1. Jones Engineering does not use automated decision-making technologies for the processing of personal data or to profile candidates, vendors, contractors or sub-contractors.
6. How long do we retain your personal data
6.1. We retain personal data in line with legally defined time periods or as long as necessary to administer and carry out our candidate selection or business relationship including our post-employment or post-business obligations.
6.2. In the event of reasonably expected or actual litigation or investigations, certain personal data may be retained beyond the legally defined time periods or when it is in the legitimate interests of the company to do so.
6.3. We may keep personal data that has been anonymised indefinitely as it will no longer identify you and it is no longer categorised as personal data.
7. Recipients of personal data transfers
7.1. Personal data recipient categories
- Jones Engineering provides personal data to government bodies or law enforcement entities when legally obligated to do so and to third party vendors to process on our behalf. These providers may process personal data related to pensions, expenses, employment visas, personal taxes, human resources, recruitment, qualifications, training and certifications, biometric data, vendor details, employment history, next of kin and family information etc.
7.2. International transfers to third countries
- Jones Engineering is a global organisation with offices, affiliates, subsidiaries, and employees located around the world. It operates in and processes the personal data that it uses predominantly within the EEA. All processing of personal data is by default carried out within the EEA or countries with an EU privacy adequacy decision.
- Jones Engineering may occasionally be required to transfer or disclose personal data outside the EEA to entities in third countries when it is legally obligated to do so or if it is necessary for the purposes mentioned in this privacy notice. Jones Engineering operates the following companies in third countries.
| Company | Country |
| Jones Engineering Group LLC | Qatar |
| Jones Engineering Saudi Arabia Ltd | Kingdom of Saudi Arabia |
| Jones Engineering Group Ltd | Abu Dhabi |
| Jones Engineering Group Ltd | Dubai |
| JEG Bahrain Holding S.P.C | Bahrain |
| JEG Acamar Bahrain Co. W.L.L. | Bahrain |
- Jones Engineering only transfers your personal data to third countries using necessary contractual safeguards i.e. Standard Contractual Clauses. This ensures that there is a lawful basis and adequate technical and organisational measures to protect your personal data.
8. CCTV
8.1. Jones Engineering operates CCTV in some of its locations globally. This data may be shared with our security providers e.g. Covert Security Consultants, Frontline Security Group Ireland, Corvus Property Services, Gallant Security Systems Ltd and national police forces e.g. An Garda Síochána in Ireland in cases when legally obligated to do so.
8.2. The CCTV images are retained in line with national legally required time periods e.g. 30 days in Ireland or longer if litigation is pending or reasonably anticipated.
8.3. The CCTV images are technically secured in accordance with Jones Engineering’s Information Security and Information Technology requirements and organisationally through the Privacy Information Management System and through data processing agreements with third parties.
8.4. Covert recording may be carried out in exceptional case by case circumstances such as if criminal activity is suspected. This use will follow national legislation or supervisory guidance e.g. “Guidance for Data Controllers” by the Irish Data Protection Commissioner and when authorised by the Jones Engineering Data Privacy Officer.
9. Your rights in respect of our processing of your personal data
9.1. Withdrawal of Consent: If you have provided personal data to us where consent was used as the lawful basis for processing you may withdraw this consent at any time if there are no other legal grounds for Jones Engineering’s processing of this data.
9.2. Right of access: You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data.
9.3. Right to rectification: You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
9.4. Right to erasure (‘right to be forgotten’): You may under certain circumstances have the right to obtain from the controller the erasure of personal data concerning you and Jones Engineering shall have the obligation to erase personal data without undue delay.
9.5. Right to restriction of processing: You may under certain circumstances have the right to obtain from Jones Engineering restriction of the processing of your personal data.
9.6. Notification obligation regarding rectification or erasure of personal data or restriction of processing: Jones Engineering will communicate any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom the personal data has been disclosed unless this proves impossible or involves disproportionate effort. Jones Engineering will inform you about those recipients if you request it.
9.7. Right to data portability: You may under certain circumstances have the right to receive the personal data concerning you, which you have provided to Jones Engineering, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from Jones Engineering of the personal data that has been provided.
9.8. Right to object: You may under certain circumstances have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you including profiling. Jones Engineering will no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of you or for the establishment, exercise or defence of legal claims.
9.9. Automated individual decision-making, including profiling: You may under certain circumstances have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
10. Contact Details for Privacy Rights Requests
10.1. If you have any privacy questions or comments or want to exercise your privacy rights please contact Jones Engineering’s Data Privacy Officer at:
Data Privacy Officer
Jones Engineering
83 Pembroke Rd
Dublin 4
D04 HN50
Ireland
+353 1 474 9800
E: privacy@joneseng.com
10.2. Jones Engineering tries to respond to all legitimate requests within one calendar month. It may take us longer than this if your request is particularly complex or if you have made a number of requests. If this is the case, we will notify you and keep you updated as your request is being processed. Jones Engineering may respond differently to requests depending on jurisdictional requirements.
10.3. If you have submitted a privacy request and / or are not satisfied with the way in which Jones Engineering responded, you have the right to lodge a complaint with your national supervisory authority. The Data Protection Commissioner for example is Ireland’s supervisory authority. Jones Engineering operates in the countries listed below and the respective supervisory authorities and their contact details are listed below.
| Country / Entity(s) | Supervisory Authority Details |
IrelandH.A.O’Neil Ltd Jones Engineering Manufacturing Ltd O’Shea’s Electrical Ltd Patrick Lynch Ltd Jones Celtic BioEnergy Ltd Thermo Pressure Technologies Ltd |
Data Protection Commission 21 Fitzwilliam Square South Dublin 2 D02 RD28 Ireland T: +353 1890 252 231 E: info@dataprotection.ie W: www.dataprotection.ie |
Abu DhabiJones Engineering Group Ltd – Branch Abu Dhabi |
Abu Dhabi Office of Data Protection ADGM Building Abu Dhabi Global Market Square Al Maryah Island T: +971 333 8888 E: Data.Protection@adgm.com W: https://www.adgm.com/operating-in-adgm/office-of-data-protection |
BahrainJEG Bahrain Holding S.P.C. JEG Acamar Bahrain Co. W.L.L. |
Personal Data Protection Authority Building No. 1088 Road no. 4025 Block no. 840 – Isa Town T: +973 8000 8001 E: info@pdp.gov.bh W: https://www.pdp.gov.bh/en/index.html |
BelgiumJones Engineering Group Belgium BVBA |
Data Protection Authority Rue de la Presse 351000 Brussels T: +32 2 274 48 00 E: contact@apd-gba.be W: www.dataprotectionauthority.be |
DenmarkJones Engineering Group ApS (Denmark) |
The Danish Data Protection Agency Carl Jacobsens Vej 352500 Valby Copenhagen T: +45 33 19 32 00 E: dt@datatilsynet.dk W: www.datatilsynet.dk |
DubaiJones Engineering Group Ltd – Branch Dubai |
Commissioner of Data Protection Level 14 The Gate P.O. Box 74777 T: +971 4 362 2222 E: dpo@difc.ae W: https://www.difc.com/business/registrars-and-commissioners/commissioner-of-data-protection |
FinlandJones Engineering Group Finland Oy |
Office of the Data Protection Ombudsman P.O. Box 800 FIN-00521 Helsinki T: +358 29 566 6700 E: tietosuoja@om.fi W: www.tietosuoja.fi |
GermanyJones Engineering Group Germany GmbH |
Federal Commissioner for Data Protection and Freedom of Information Graurheindorfer Straße 153 53117 Bonn T: +49 228-997799-0 E: poststelle@bfdi.bund.de W: www.bfdi.bund.de |
NetherlandsJones Engineering Group BV (Holland) |
Dutch Data Protection Authority Hoge Nieuwstraat 8 Postbus 93374 2509 AJ Den Haag T: +31 70 888 8500 E: info@autoriteitpersoonsgegevens.nl W: www.autoriteitpersoonsgegevens.nl/nl |
NorwayJones Engineering Group Norway AS |
The Norwegian Data Protection Authority P.O. Box 458 Sentrum 0105 Oslo T: +47 22 39 69 00 E: postkasse@datatilsynet.no W: www.datatilsynet.no |
PortugalJE Engineering, Unipessoal LDA |
The Portuguese data protection authority Avenida D. Carlos I Nº134 – 1º 1200-651 Lisboa T: +351 213 928 400 E: geral@cnpd.pt W: www.cnpd.pt |
QatarJones Engineering Group LLC |
National Cyber Governance and Assurance Affairs National Cyber Security Agency P.O. Box 24100 Wadi Al Sail Street Doha T: +974 2362220 E: privacy@ncsa.gov.qa W: www.ncsa.gov.qa |
Saudi ArabiaJones Engineering Saudi Arabia Ltd |
Saudi Authority for Data and Artificial Intelligence Northern Ring Road Al Nakheel District 12382 Riyadh T: +966 114 792 700 E: info@sdaia.gov.sa W: www.sdaia.gov.sa/en/default.aspx |
SpainJones Engineering Group Spain SL |
Spanish Agency for Data Protection
C/Jorge Juan, 6. 28001 Madrid T: +34 91 266 3517 |
SwedenJones Group Sweden AB |
The Swedish Authority for Privacy Protection Fleminggatan 14, plan 7 – Box 8114 104 20 Stockholm T: +46 8 657 61 00 E: imy@imy.se W: www.imy.se |
United KingdomJones Engineering Group Ltd (UK) |
The Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF T: +44 1625 545 745 E: casecom@ico.org.uk W: www.ico.org.uk |
Effective date: 25 SEPT 2023
Last Update: 25 SEPT 2026