Swansea Tribology Services Ltd aims to adhere to the requirements of the General Data Protection Regulations (GDPR), relating to the processing of personal data in manual and electronic records.
Personal data is information that relates to an identifiable person who can be directly or indirectly identified from that information. It may include information containing religious beliefs, an individual’s racial or ethnic origin, political opinions, trade union membership, physical or mental health, sexual orientation and criminal records.
Our commitment requires that personal data must be processed in line with the following basic data protection principles:
This includes where third parties process data on behalf of Swansea Tribology Services Ltd.
DATA STORAGE AND TRANSFER
Whether stored manually or electronically, personal data will be secure as far as is practicable. Swansea Tribology Services Ltd aims to ensure that manual files holding personal data are securely held with locks and only those who should have access retain the key. In the case of computerised records, Swansea Tribology Services Ltd will ensure that strong passwords are established to limit unauthorised access and all laptops that are taken off site will contain necessary information only. Encrypted systems will be used where necessary. Data will not be held for longer than is necessary. Arrangements for the secure disposal of both paper and electronic records have been established.
All forms of data transfer and storage must be approved by management prior to their use if not supplied by Swansea Tribology Services Ltd. Devices such as, floppy disks, memory sticks, USB memory modules, internal and external CD and DVD writers should be considered prohibited unless explicit management consent has been provided.
The transmission of any data from any internal source to a personal computer or storage device is not permitted.
DISCLOSURE OF DATA
Swansea Tribology Services Ltd will only disclose information when an individual has provided their express consent, where we are legally obliged to do so or when there is a business requirement to disclose data that is within the remit of the legislation e.g. for any employee benefits operated by third parties, for statutory payment purposes, for HR management and administration and so forth.
You must treat all data carefully and must not disclose personal data to unauthorised persons, unless there is some other legal justification.
You must check fax numbers and e-mail addresses carefully before sending any information. If a fax or e-mail containing sensitive material is sent to the wrong address, you must inform management immediately.
Those with access to secure documents will be subject to a strict confidentiality clause in their Statement of Main Terms and Conditions of Employment. Any individual discovered to be in breach of confidentiality, data protection or common decency with regards to documentation may face disciplinary action.
SUBJECT ACCESS REQUESTS
You have the right to be informed whether Swansea Tribology Services Ltd processes personal data relating to you and to access such data by submitting a written request to the management.
You will not be charged for the supply of data unless the request is manifestly unfounded, excessive or repetitive, or unless a request is made for duplicate copies to be provided to third parties.
Swansea Tribology Services Ltd will respond to a request without delay. Access to data will be provided, subject to legally permitted exceptions, within one month as a maximum. This may be extended by a further two months where requests are complex or numerous.
You must inform Swansea Tribology Services Ltd immediately if you believe that the data is inaccurate, either as a result of a subject access request or otherwise. Swansea Tribology Services Ltd will take immediate steps to rectify the information.
If a data breach is likely to result in a risk to the rights and freedoms of individuals, it must be reported to the Information Commissioners Office (‘ICO’) within 72 hours of Swansea Tribology Services Ltd becoming aware of it. As such, you must report any breaches to a member of management immediately.
Individuals will be informed directly in the event that the breach is likely to result in a high risk to the rights and freedoms of that individual.
If the breach is sufficient to warrant notification to the public, Swansea Tribology Services Ltd will arrange this without undue delay.
This policy and the related procedures run in conjunction with our Equal Opportunities Policy and anyone who feels that they have been unfairly treated should follow the Grievance Procedure.