Introduction
This policy sets out Elite AV commitment to ensuring that any personal data, including special category personal data, which Elite AV processes, is carried out in compliance with data protection law. Elite AV processes the personal data of staff, including the personal data of a sub-contractors and clients, but is committed to ensuring that all the personal data that it processes is done in accordance with data protection law. Elite AV ensures that good data protection practice is imbedded in the culture of our staff and our organisation.
Elite AV other data protection policies and procedures are (these should be considered
and may not all be necessary):
‘Data Protection Law’ includes the General Data Protection Regulation 2016/679; the UK Data Protection Act 2018 and all relevant EU and UK data protection legislation.
Scope
This policy applies to all personal data processed by Elite AV and is part of Elite AV approach to compliance with data protection law. All Elite AV staff are expected to comply with this policy and failure to comply may lead to disciplinary action for misconduct, including dismissal.
Data protection principles
Elite AV complies with the data protection principles set out below. When processing
personal data, it ensures that:
Elite AV will facilitate any request from a data subject who wishes to exercise their rights under data protection law as appropriate, always communicating in a concise, transparent, intelligible and easily accessible form and without undue delay.
Process/procedures/guidance
Elite AV will:
Elite AV will ensure that all staff who handle personal data on its behalf are aware of their responsibilities under this policy and other relevant data protection and information security policies, and that they are adequately trained and supervised.
Breaching this policy may result in disciplinary action for misconduct, including dismissal. Obtaining (including accessing) or disclosing personal data in breach of Elite AV data protection policies may also be a criminal offence.
Data Subject Rights
Elite AV has processes in place to ensure that it can facilitate any request made by an individual to exercise their rights under data protection law. All staff have received training and are aware of the rights of data subjects. Staff can identify such a request and know who
to send it to.
All requests will be considered without undue delay and within one month of receipt as far as possible.
Subject access: the right to request information about how personal data is being processed, including whether personal data is being processed and the right to be allowed access to that data and to be provided with a copy of that data along with the right to obtain the following information:
Rectification: the right to allow a data subject to rectify inaccurate personal data concerning them.
Erasure: the right to have data erased and to have confirmation of erasure, but only where:
Restriction of processing: the right to ask for certain processing to be restricted in the
following circumstances:
Data portability: the right to receive a copy of personal data which has been provided by the data subject and which is processed by automated means in a format which will allow the individual to transfer the data to another data controller. This would only apply if Elite AV was processing the data using consent or on the basis of a contract.
Object to processing: the right to object to the processing of personal data relying on the legitimate interests processing condition unless Elite AV can demonstrate compelling legitimate grounds for the processing which override the interests of the data subject or for the establishment, exercise or defense of legal claims.
Special category personal data
This includes the following personal data revealing: