“Jarrold Training (“the company”) needs to collect and use personal data about employees and delegates in order to carry on its business and meet its customers’ requirements effectively. The company recognises that the data which it collects is subject to the Data Protection Act 1998, with regard to its collection, processing, storage and distribution.”
1.0 Policy Objectives
The policy has been established in order to:
(a) Publicise the principles contained in the Data Protection Act 1998.
(b) Ensure all employees understand their responsibility when collecting, processing, storing and distributing data.
(c) Ensure that the company adheres to its legal obligations.
2.0 Principles
For the purpose of this policy, The Company is the “Data Controller” and the employee or candidate is the “Data Subject”.
The company intends to comply with the 8 principles set out in Part 1 of Schedule 1 of the Data Protection Act 1998 when processing data. These are as follows:
(a) Personal data shall be processed fairly and lawfully.
(b) Personal data shall be obtained only for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or those purposes.
(c) Personal data shall be adequate, relevant and not excessive in relation to the purpose or purposes for which it is processed.
(d) Personal data shall be accurate and, where necessary, kept up to date.
(e) Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
(f) Personal data shall be processed in accordance with the rights of data subjects under the Act.
(g) Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.
(h) Personal data shall not be transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.
This notice will be reviewed in August 2014 or as required.