Source: https://www.owenreed.co.uk/terms/data-protection
Timestamp: 2020-08-03 15:24:50
Document Index: 112799398

Matched Legal Cases: ['art 16', 'arts 18', 'art 20', 'art\n14', 'art 18', 'arts\n21']

Data Protection Policy from Owen Reed
This Policy sets out the obligations of Owen Reed Limited a company registered in England under company number 3902993 whose registered office is at 2 Devonshire Square, London, EC2M 4UJ (“the Company”) regarding data protection and the rights of job seekers who are looking for a new work related opportunities (“data subjects”) in respect of their personal data under EU Regulation 2016/679 General Data Protection Regulation (“GDPR”).
2.5 Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed. Personal
data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of the data subject.
3.5 The right to data portability (Part 16);
3.7 Rights with respect to automated decision-making and profiling (Parts 18 and 19).
5.1 The Company collects and processes the personal data set out in Part 20 of this
7.1 The Company shall ensure that all personal data collected, processed, and held by it is kept accurate and up-to-date. This includes, but is not limited to, the rectification of personal data at the request of a data subject, as set out in Part
14, below.
7.2 The accuracy of personal data shall be checked when it is collected and at regular intervals thereafter. If any personal data is found to be inaccurate or out- of-date, all reasonable steps will be taken without delay to amend or erase that data, as appropriate.
8.3 For full details of the Company’s approach to data retention, including retention
periods for specific personal data types held by the Company, please refer to our
10.1 The Company’s Data Protection Officer is Sebastian Pampanini.
13.2 Employees wishing to make a SAR should do using a Subject Access Request Form, sending the form to the Company’s Data Protection Officer at 2 Devonshire Square, London, EC2M 4UJ.
16.1 The Company processes personal data using automated means.
16.3.1 Microsoft Excel;
18.1 The Company uses personal data in automated decision-making processes using targeted Owen Reed Act Database searches.
18.2 Where such decisions have a legal (or similarly significant effect) on data subjects, those data subjects have the right to challenge to such decisions under the GDPR, requesting human intervention, expressing their own point of view, and obtaining an explanation of the decision from the Company.
18.3 The right described in Part 18.2 does not apply in the following circumstances:
19.1 The Company uses personal data for profiling purposes. Matching job seekers with live roles.
19.2.4 All personal data processed for profiling purposes shall be secured in order to prevent discriminatory effects arising out of profiling (see Parts
21 to 25 of this Policy for more details on data security).
Info about your preferences and interest
21.1 All emails containing personal data must be encrypted using 164K BIT data encryption. All emails containing personal data must be marked “confidential”;
21.4 Personal data contained in the body of an email, whether sent or received, should be copied from the body of that email and stored securely. The email itself should be deleted. All temporary files associated therewith should also be deleted using the delete key;
21.6 Where personal data is to be transferred in hardcopy form it should be passed directly to the recipient;
22.1 All electronic copies of personal data should be stored securely using passwords and using 164K BIT data encryption.
22.3 All personal data stored electronically should be backed up twice daily with backups stored onsite AND/OR offsite. All backups should be encrypted using
164K BIT data encryption.;
22.4 No personal data should be stored on any mobile device (including, but not limited to, laptops, tablets, and smartphones), whether such device belongs to the Company or otherwise without the formal written approval of Sebastian Pampanini, Operations Director, 07805 547592 and, in the event of such approval, strictly in accordance with all instructions and limitations described at the time the approval is given, and for no longer than is absolutely necessary; and
24.1 No personal data may be shared informally and if an employee, agent, sub- contractor, or other party working on behalf of the Company requires access to any personal data that they do not already have access to, such access should be formally requested from Sebastian Pampanini, Operations Director, 07805 547592;
24.2 No personal data may be transferred to any employees, agents, contractors, or other parties, whether such parties are working on behalf of the Company or not, without the authorisation of Sebastian Pampanini, Operations Director, 07805 547592;
24.5 Where personal data held by the Company is used for marketing purposes, it shall be the responsibility of Sebastian Pampanini, Operations Director, 07805 547592 to ensure that the appropriate consent is obtained and that no data subjects have opted out, whether directly or via a third-party service such as the TPS.
25.3 All software (including, but not limited to, applications and operating systems) shall be kept up-to-date. The Company’s IT staff shall be responsible for installing any and all security-related updates as soon as reasonably and practically possible, unless there are valid technical reasons not to do so;
25.4 No software may be installed on any Company-owned computer or device without the prior approval of the Sebastian Pampanini, Operations Director,
07805 547592.
Name: Sebastian Pampanini
Due for Review by: 21 May 2019