Data Protection Policy
All such personal information, whether held on computer, paper or other media, will be obtained, handled, processed, transported and stored lawfully and correctly, in accordance with the safeguards contained in the Data Protection Act 1998 (DPA).
The following are the principles contained in the Data Protection Act:
Data protection principles
a) Personal data should be processed fairly and lawfully.
b) Personal data shall be obtained only for one or more specific and lawful purposes and shall not be
processed in any manner incompatible with those purposes.
c) Personal data shall be adequate, relevant and not excessive in relation to the purposes they are
d) Personal data shall be accurate and, where necessary, kept up to date.
e) Personal data shall not be kept for longer than is necessary.
f) Personal data shall be processed in accordance with the individual’s rights under the Act.
g) Appropriate technical and organisational measures shall be taken against unauthorised or unlawful
processing of personal data and against accidental loss or destruction or damage to personal data.
h) Personal data shall not be transferred to a country or territory outside the European Economic Area
unless that country or territory ensures adequate levels of protection for the rights and freedom of
individuals in relation to the processing of their personal data.
Purposes of obtaining data
In order to fulfil individuals’ contracts of employment, monitor sickness and performance, equal opportunity policies and otherwise administer the business , we will use and process personal information relating to you which we have obtained during the course of your employment. Such information includes but is not limited to:
a) Employment history.
b) Personal circumstances.
c) Educational qualifications.
d) Sickness records.
e) Medical records.
f) Accident reports.
g) Attendance records.
i) Performance appraisals.
j) Disciplinary records.
k) Ethnic or racial origins.
In most cases you have provided such information. In others the information has been provided by your manager, other employees, external referees, or in the case of medical records, a doctor. We hold this personal data about you confidentially and will only disclose it to others where we are required to do so, e.g. to give information about your earnings to HM Revenue & Customs.
Sensitive data concerning employees, such as information about health, racial or ethnic origins, criminal convictions, trade union membership, political or religious belief, may come into our possession. No such data will be divulged to a third party without your permission, unless we have a specific legal requirement to process and allow others access to such data.
Accuracy of data
It is important that any personal data held by us is accurate. You are required to inform the Company if you believe that your personal data is inaccurate or untrue or if you are dissatisfied with the information in any way.
Right to access information
Under the legislation, you are entitled to have access to certain personal data held about you. If you require access, you should contact a Director. The request should be made in writing specifying the information required. An administration fee of £10 may be charged for dealing with any request.
The information shall be provided as soon as reasonably practicable and in any event within 40 days of the Company receiving the administration fee and written request, or the provision by you of the additional information required by the Company for the purposes of locating any information, whichever is later.