Data Protection Policy
In order to operate effectively and fulfil its legal obligations, Quentor needs to collect, maintain and use certain personal information about current, past and prospective employees, Customers, Suppliers and other individuals with whom it has dealings. All such personal information, whether held on computer, paper or other media, will be obtained, handled, processed, transported and stored lawfully and correctly, in accordance with the safeguards contained in the Data Protection Act 2018 (DPA).
Quentor is committed to the principles of data protection as detailed in the DPA. These principles require that personal information must:
- be fairly and lawfully processed and not processed unless specific conditions are met
- be obtained for one or more specified, lawful purposes and not processed in any manner incompatible with those purposes
- be adequate, relevant and not excessive for those purposes
- be accurate and, where necessary, kept up to date
- not be kept for longer than is necessary
- be processed in accordance with the data subject’s rights under the DPA
- be kept secure form unauthorised or unlawful processing and protected against accidental loss, destruction or damage
- and not be transferred to countries outside the European Economic Area (EEA) unless the country or territory ensures adequate protection for the rights and freedoms of the data subjects
Compliance
In order to comply with the data protection principles, Quentor will:
- observe fully all conditions regarding the fair collection and use of personal information
- meet its legal obligations to specify the purpose for which information is used
- collect and process appropriate personal information only to the extent that it is needed to fulfil operational needs or to comply with legal obligations
- ensure the quality of the personal information used
- apply strict checks to determine the length of time personal information is held
- ensure that individuals about whom information is held are able to exercise their rights under the DPA, including the right to be informed that processing is taking place, the right of access to their own personal information, the right to prevent processing in certain circumstances and the right to correct, rectify, block or erase incorrect information
- take appropriate technical and organisational security measures to safeguard personal information
- ensure that personal information is not transferred outside the EEA without suitable safeguards.