Candidate Agreement

Nijhuis Saur Industries UK Data Protection Policy

Introduction

Nijhuis Saur Industries UK is required to maintain certain personal data about living individuals for the purposes of satisfying operational and legal obligations. Nijhuis Saur Industries UK recognise the importance of the correct and lawful treatment of personal data under GDPR; it maintains confidence in the organisation and provides for successful operations. The type of personal data that Nijhuis Saur Industries UK may require includes information about:

1. Employees - current, past and prospective
2. Suppliers
3. Sub-contractors
4. Clients
5. Other organisations and individuals with whom it is necessary to share personal data.

All personal data held, whether it is held on paper, on computer or other media, will be subject to the appropriate legal safeguards as specified in the Data Protection Act 2018 and GDPR. Nijhuis Saur Industries UK fully endorses and adheres the principles of the Data Protection Act and GDPR. These principles specify the legal conditions that must be satisfied in relation to obtaining, handling, processing, transportation and storage of personal data. Employees and any others who obtain, handle, process, transport and store personal data for Nijhuis Saur Industries UK must adhere to these principles.

Principles

The principles require that personal data shall:

1. Be processed fairly and lawfully and shall not be processed unless certain conditions are met;
2. Be obtained for a specified and lawful purpose and shall not be processed in any manner incompatible with that purpose;
3. Be adequate, relevant and not excessive for those purposes;
4. Be accurate and, where necessary, kept up to date;
5. Not be kept for longer than is necessary for that purpose;
6. Be processed in accordance with the data subject’s rights;
7. Be kept secure from unauthorised or unlawful processing and protected against accidental loss, destruction or damage by using the appropriate technical and organisational measures;
8. And not be transferred to a country or territory outside the European Economic Area, unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

Satisfaction of principles

In order to meet the requirements of the principles, Nijhuis Saur Industries UK will:

• • observe fully the conditions regarding the fair collection and use of personal data;

• • meet its obligations to specify the purposes for which personal data is used;
  • collect and process appropriate personal data only to the extent that it is needed to fulfil operational or any legal requirements;
  • ensure the quality of personal data used;
  • apply strict checks to determine the length of time personal data is held;
  • ensure that the rights of individuals about whom the personal data is held, can be fully exercised under GDPR;
  • take the appropriate technical and organisational security measures to safeguard personal data;
  • ensure that personal data is not transferred abroad without suitable safeguards.

Nijhuis Saur Industries UK Data Protection Officer

Nijhuis Saur Industries UK’s Data Protection Officer is responsible for ensuring compliance with the Data Protection Act/GDPR and implementation of this policy on behalf of the Managing Director. The Data Protection Officer is Gareth Hand, Group Compliance & QHSE Manager.      Any questions or concerns about the interpretation or operation of this policy should be taken up in the first instance with the Data Protection Officer.

Status of the Policy

This policy has been approved by the Managing Director and any breach will be taken seriously and may result in formal action. Any employee who considers that the policy has not been followed in respect of personal data about themselves should raise the matter with their Line Manager or the Data Protection Officer in the first instance.

Subject Access

All individuals who are the subject of personal data held by Nijhuis Saur Industries UK are entitled to:

• • the right to be informed;
  • the right of access;
  • the right to rectification;
  • the right to erasure;
  • the right to restrict processing;
  • the right to data portability:
  • the right to object; and
  • the right not to be subject to automated decision making including profiling.

Employee Responsibilities

All employees are responsible for:

• • Checking that any personal data that they provide to Nijhuis Suar Industries UK is accurate and up to date.
  • Informing Nijhuis Saur Industries UK of any changes to information which they have provided,

e.g. changes of address.