Data Protection Policy
Introduction
Car Park Waterproofing Systems is committed to safeguarding the privacy of our customers, employees, and partners. This Data Protection Policy outlines our approach to data protection to ensure compliance with applicable laws and regulations, particularly the General Data Protection Regulation (GDPR).
Policy Aim
This policy aims to ensure that Car Park Waterproofing Systems:
- Complies with data protection law and follows good practice
- Protects the rights of staff, customers, and partners
- Is open about how it stores and processes individuals' data
- Protects itself from the risks of a data breach
Scope
This policy applies to all employees, contractors, and third parties who have access to data held by Car Park Waterproofing Systems.
Data Protection Principles
Car Park Waterproofing Systems adheres to the following principles when processing personal data:
- Lawfulness, Fairness, and Transparency: Data is processed lawfully, fairly, and transparently.
- Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
- Data Minimization: Data collected is adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
- Accuracy: Data is accurate and, where necessary, kept up to date.
- Storage Limitation: Data is kept in a form which permits identification of data subjects for no longer than is necessary.
- Integrity and Confidentiality: Data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
Individual Rights
Under the GDPR, individuals have:
- The right to be informed about the collection and use of their personal data.
- The right of access to their personal data.
- The right to rectification.
- The right to erasure.
- The right to restrict processing.
- The right to data portability.
- The right to object to processing.
- Rights in relation to automated decision making and profiling.
Data Subject Access Requests
Individuals have the right to access their personal data and supplementary information. Car Park Waterproofing Systems will provide a copy of the information free of charge within one month of the request.
Data Protection Officer
Car Park Waterproofing Systems has appointed a Data Protection Officer (DPO) to oversee compliance with this policy. The DPO can be contacted at:
- Email: dpo@carparkwaterproofingsystems.com
- Address: Unit A1, Marks Hall Farm, White Roding, Dunmow, Essex, CM6 1RT
Data Security
- We have implemented measures to ensure the confidentiality, integrity, and availability of systems processing personal data.
- We assess the effectiveness of these security measures through regular testing and evaluation.
Breach Notification
In the case of a data breach, Car Park Waterproofing Systems will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible.
Training and Awareness
All employees who have access to personal data will receive training on this policy and on their data protection responsibilities.
Review and Updates
This policy will be reviewed annually or as required to ensure it remains effective and compliant with the law.
Conclusion
Car Park Waterproofing Systems is committed to ensuring that personal data is protected and handled with the utmost care and respect in accordance with legal obligations.