Paramount4 Data Protection Policy
Paramount4 (part of DCE Group Ltd) is registered with the ICO (Information Commissioners Office)
Paramount 4 ( part of DCE Group Ltd) is registered with the ICO (Information Commissioners Office)
Paramount 4 are committed to be/working towards being compliant under The General Data Protection Regulation (GDPR).
Paramount 4 shall so far as reasonable practicable comply with the principles contained with this Regulations, to ensure all data is:
- Fairly and lawfully processed.
- Processed for all lawful purpose.
- Adequate, relevant and not excessive
- Accurate and up to date
- Kept only for the length of time required.
- Processed in line with data subject rights.
- Not transferred to a third party without consent or only under any directive given by law
Personal data covers any information relating to an identified or identifiable individual known as the ‘data subject’; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to any identification number or to one or more factors specific to the individual, physical, physiological, mental, economic, cultural or social identity.
This could include data of clients, prospects, leads and internal staff or workforce.
Personal data may also include sensitive personal data as defined by the Act
PROCESSING OF PERSONAL DATA
Consent may be required for the processing of personal data unless processing is necessary for the performance of the contract of employment.
All other data under the definitions of personal data will remain confidential and only
disclosed to third parties with appropriate consent or requirements under Law.
Paramount 4 will process data for marketing purposes, data subjects have the right to withdraw their consent at any time from this activity.
SENSITIVE PERSONAL DATA
Paramount 4 Group may from time to time, be required to process this data. Sensitive personal data includes data relating to medical information, gender, religion, race, sexual orientation, trade
unions and criminal records and proceedings.
RIGHTS OF ACCESS TO INFORMATION
Data subjects have the right of access to information held by Paramount 4 subject to the provisions set out in the Act. Any data subject wishing to access personal data should put their request in writing (DSAR – Data Subject Access Request) and send to Paramount 4.
Paramount 4 will ensure the identify of the requestor is known and provide a response within the 40 days under the Regulations.
Under the Act there are certain exemptions on providing data and if any requests for such data, Paramount 4 will refer to the Regulations and advise the data subject of the result, for example
National Security or detection of Crime.
Paramount 4 will endeavor to ensure all personal data held in relation to data subjects is accurate. Data subjects that are employees of the Company, should notify Paramount 4 of any changes
relating to their personal data. Data Subjects have the right in some circumstances to request
inaccurate information about them to be erased. If the request to erase is not within the act, by Law or adverse to the working of the Company the Data Subject will be notified that the personal data will not be removed but a note made of the request.
If a Data Subject believes that Paramount 4 has not complied with this policy or acted within the Regulations, they can either utilise the Company’s internal grievance procedure, notify the
Director of Paramount 4 or if they wish; write to the information Commissioners Office.
Paramount 4 will take appropriate technical and organisational steps to ensure the security of
Communication relating to personal data will be made aware within the Company.
Any body within Paramount 4 who may encounter or gather personal data need to respect the privacy of others and ensure the data is appropriately protected.
Our main company on-line system is secured working alongside our external IT Company
Other Third-party systems that we use to hold personal data, Paramount 4 will be holding Privacy confirmation that the data is secure, and they comply with GDPR.
RETENTION/DESTRUCTION OF DATA
Paramount 4 will ensure any personal data is retained for defined periods and destroyed in a secure manner, either paper or technology.
DCE Group have a system installed for the purpose of prevention of crime. Should any DSAR be received and relating to images on CCTV these will be produced in accordance with the Regulations.
DCE Group have the following polices in place:
Data Subject Access Request Policy
Retention and Destruction Policy
This Policy will be reviewed annually.