Where we engage third parties to process personal data on our behalf, they do so on the basis of written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.
FOR HOW LONG DO WE KEEP YOUR PERSONAL DATA
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. After this period, we will securely destroy your personal data in accordance with applicable laws. In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you. We may retain your personal data on file on the basis that a further opportunity may arise in future and we may wish to consider you for that. We will only do this if you have given your explicit consent for us to retain your details for this purpose as part of the recruitment process.
WHAT ARE YOUR RIGHTS?
Under certain circumstances, by law you have the right to: • Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it; • Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected; • Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below); • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes; • Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it; And • Request the transfer of your personal data to another party. If you want to review, verify, correct or request erasure of your personal data, object to the processing of your personal data, or request that we transfer a copy of your personal data to
7
INFOSEC-20 v3.2 Dated 03/03/2026
Made with FlippingBook - Online catalogs