Purpose.

The company respects individuals’ rights of privacy and of protection of personal data. The company also recognises the necessity of open and frank communication and of the collection of personal and sensitive personal data in order to accomplish its business activity, as well as the corresponding necessity to maintain confidentiality and ensure that information is adequately protected.

Operational Principles.

This company handles all personal data in accordance with the following principles:

1. Personal data will be processed in a fair and lawful manner.
2. Personal data will be collected, processed, and used only to the extent necessary to fulfil the business purposes of the organisation.
3. Personal data will be accurate and kept up-to-date. Any error will be corrected as soon as possible after the relevant organisation becomes aware of it.
4. Personal data will be kept only for as long as is necessary for the legitimate purpose(s) of this business.
5. Due consideration will be given to respecting the rights of data subjects.
6. Appropriate technical and organisational measures will be taken to prevent unauthorised or unlawful disclosure of personal data. All computer-held personal data is maintained on password-protected computers to which only authorised users hold passwords. Offices are locked after office hours, and only authorised staff may gain entry.
7. Personal data will not be transferred to other organisations unless this is necessary to accomplish its business purposes.

Scope.

Personal data will be used by this business organisation to achieve its business objectives.

Rights of Data Subjects.

Whenever we process personal data, we take reasonable steps to ensure that personal data is kept accurate and up-to-date for the purpose for which it was collected. A data subject has the following rights regarding the personal data submitted to us:

1. They can request information about the collection and use of their personal information.
2. They can request to access, correct, erase or block your personal information if it is incomplete or inaccurate.
3. Where they have legitimate grounds for doing so, they can object to the processing of their personal information and request us not to process it any further.

If a data subject wishes to carry out any of the above, they should contact the company Data Controller.

Upon receipt of a written request, after the provision of sufficient evidence of identity, and enough information to permit us to identify their personal data, the data controller will fairly consider granting the request by balancing the interests of the individual in gaining access to data or correcting or deleting data against the legitimate interests of the business, including whether granting the request would endanger the organisations right to carry on its business. We will notify any third-party recipients of the necessary changes.

Personal data may not be erased if processing is required by law or if the data may be kept for another legal basis. Requests to delete personal data are subject to any applicable legal reporting or document retention requirements imposed on us. You may also lodge a complaint with your local data protection authority about the processing of the personal data provided to us.

Performance.

This company will abide by the requirements of the current data protection regulations in communicating with data subjects regarding their personal data; including taking steps to make sure it remains accurate.

Basis.

The Data Protection Law in this country is:
General Data Protection Regulation (EU) 2016/679