This policy applies to information relating to identifiable individuals e.g. staff, applicants, former staff, clients, suppliers and other third party contacts.
Guardforce Security Services Ltd. will:
Guardforce Security Services Ltd. recognises that its first priority under the GDPR is to avoid causing harm to individuals. In the main this means:
Secondly, GDPR aims to ensure that the legitimate concerns of individuals about the ways in which their data may be used are taken into account. In addition to being open and transparent, Guardforce Security Services Ltd. will seek to give individuals as much choice as is possible and reasonable over what data is held and how it is used. This includes the right to erasure where data is no longer necessary and the right to rectification where the data is incorrect. Full details are available in the Privacy Notice issued at the point of gathering the data.
Guardforce Security Services Ltd. has identified the following potential key risks, which this policy is designed to address:
In order to address these concerns, to accompany this policy, we have an accompanying Information Security policy and we will issue Privacy Notices to explain what data we have, why we have it and what we will do with it. The Privacy Notice will also explain the data subjects rights. We will offer training to staff where this is necessary and appropriate in the circumstances to ensure compliance with GDPR. Such training will vary according to the role, responsibilities and seniority of those being trained.
We aim to keep data only for so long as is necessary which will vary from according to the circumstances.
We have no intention to transfer data internationally.
The Data Protection Officer is tasked with the following responsibilities:
Significant breaches of this policy will be handled under Guardforce Security Services Ltd’s disciplinary procedures which may amount to gross misconduct.
Subject Access Request
Any subject access requests will be handled by Guardforce Security Services Ltd.
Subject access requests must be in writing. All staff are required to pass on anything, which might be a subject access request without delay. The applicant will be given their data within 1 month unless there are complexities in the case which justify extending this to 2 months. You will be notified of any extensions to the deadline for response and the reasons as soon as possible.
We have the right to refuse a subject access request where data is requested at unreasonable intervals, manifestly unfounded or excessive. You will be notified of the reasons as soon as possible.
Where the individual making a subject access request is not personally known their identity will be verified before handing over any information.
The required information will be provided in a permanent and portable form unless the applicant makes a specific request to be given supervised access in person.
You have the right to request the information we hold is rectified if it is inaccurate or incomplete. You should contact Guardforce Security Services Ltd and provide with the details of any inaccurate or incomplete data. We will then ensure that this is amended within one month. We may, in complex cases, extend this period to two months.
You have the right to erasure in the form of deletion or removal of personal data where there is no compelling reason for its continued processing. We have the right to refuse to erase data where this is necessary in the right of freedom of expression and information, to comply with a legal obligation for the performance of a public interest task, exercise of an official authority, for public health purposes in the public interest, for archiving purposes in the public interest, scientific research, historical research, statistical purposes or the exercise or defence of legal claims. You will be advised of the grounds of our refusal should any such request be refused.