data protection policy

Data Protection Policy

 

Introduction

It is a legal requirement for Safeguarding Children Training (the Company) to comply with the General Data Protection Regulations, 25th May 2018 (GDPR). It is also company policy to ensure that every employee maintains the confidentiality of any personal data held by the company in whatever form.

Data Protection Principles

Safeguarding Children Training needs to keep certain information about its staff, customers and suppliers for financial and commercial reasons and to enable us to monitor performance, to ensure legal compliance and for health and safety purposes. To comply with the law, information must be collected and used fairly, stored safely and not disclosed to any other person unlawfully. This means that we must comply with the Data Protection Principles set out in the GDPR.

These principles require that personal data must be:

• obtained fairly and lawfully and shall not be processed unless certain conditions are met
• obtained for specified and lawful purposes and not further processed in a manner incompatible with that purpose
• adequate, relevant and not excessive
• accurate and up to date
• kept for no longer than necessary
• processed in accordance with data subjects’ rights
• protected by appropriate security
• not transferred to a country outside the European Union without adequate protection.

In processing or using any personal information we must ensure that we always follow these principles.

Data Protection Controller

To ensure the implementation of this policy the company has designated Richard Woodley as the company’s data protection Controller. All enquiries relating to the holding of personal data should be referred to Richard Woodley in the first instance.

Notification of Data Held

You are entitled to know:

• what personal information the company holds about you and the purpose for which it is used
• how to gain access to it
• how it is kept up to date
• what the company is doing to comply with its obligations under the GDPR.

This information is available from Richard Woodley.

Data Security

We are responsible for ensuring that:

• any personal data that held, whether in electronic or paper format, is kept securely
• personal information is not disclosed either verbally or in writing, accidentally or otherwise, to any unauthorized third party
• items that are marked ‘personal’ or ‘private and confidential’, or appear to be of a personal nature, are opened by the addressee only.

 

Richard Woodley, Training Manager, Safeguarding Children Training