Data Protection Policy
The Company recognises the importance of protecting individuals’ personal data and processing it lawfully and correctly. Accordingly, the Company complies with the fundamental principles of personal data processing, respects individuals’ rights and ensures that the personal data it holds:
- is collected for specified, explicit and legitimate purposes, as recorded in the Record of Processing Activities;
- is processed lawfully in accordance with individuals’ rights, is accurate and is updated when necessary, particularly before significant decisions concerning individuals are made;
- is not retained longer than necessary for the purpose of processing and/or for the Company’s compliance with legal and regulatory obligations;
- is kept secure against unauthorised access, loss or destruction;
- is transferred to other organisations (whether third parties or otherwise) only where an adequate level of protection is ensured.
In addition, the Company:
- has appointed a Data Protection Officer (DPO) to oversee the implementation of this policy and assess its effectiveness in achieving compliance with the regulatory framework and best practices for personal data protection;
- implements procedures to fulfil individuals’ rights in full, responding to their requests within one month of submission, or within three months where there are justified reasons for delay that have been communicated to the data subject within the initial month following submission;
- provides clear instructions to personnel and partners carrying out work on its behalf on the secure use and transfer of data in accordance with the Management System;
- ensures that transfers of data to other organisations, and processing by those organisations on its behalf, comply with the data protection regulatory framework and this policy;
- designs, adopts and monitors a system of indicators and objectives for secure and lawful data management;
- communicates this policy to all personnel and ensures it is continually updated to achieve full compliance with the applicable regulatory framework.
TECHMELLON S.A. is committed to continuously monitoring and complying with the regulatory and legislative framework, and to continually implementing and improving the effectiveness of its Information Security and Personal Data Protection Management System.
Management of TECHMELLON S.A.