We use your personal information throughout the relationship that we have with you. This includes a number of different processing activities throughout the engagement that you have with the Company.
This notice should be read in conjunction with the Overview.
What processing activities do you undertake that include my personal information?
We undertake administration and management of Information Technology systems and services which contain your personal information.
What categories of personal information are included in these processing activities?
To run the processes set out above, we process Staff related data, Data related to your engagement with the Company, Recruitment data, Regulatory data, Vetting data, Monitoring data (to the extent permitted by applicable laws) and Employment claims, complaints and disclosures data.
We may also incidentally process special categories of personal information and criminal records information.
What is the reason for these processing activities?
We process your personal information in order to:
- change access permissions;
- provide technical support and maintenance for HR information systems;
- carry out testing of the performance and security of the Company’s IT, including systems and applications as well as migrating data to new systems, applications and/or databases; and
- operate email, IT, internet, social media, HR related and other company policies and procedures.
In addition, to the extent permitted by applicable laws, the Company carries out monitoring of the Company's IT systems to protect and maintain the integrity of the Company's IT systems and infrastructure, to ensure compliance with the Company's IT policies, and to locate information through searches where needed for a legitimate business purpose.
What are the legal grounds you rely on to carry these out?
This processing is necessary for the compliance with legal obligations to which the Company is subject.
This processing is also necessary for the purpose of the legitimate interests pursued by the Company.
(See “What are the legal grounds for processing personal information?” in the Overview section.)
What are the 'legitimate interests' referred to above?
The Company considers that it has a legitimate interest in managing its workforce and operating its business. Its IT function is essential to ensuring that this can be carried out in the most effective way.
This includes:
- complying with the Company’s policies and access controls;
- ensuring the operational readiness and effectiveness of its IT infrastructure, systems and/or applications;
- maintaining the integrity and security of data; and
- facilitating records management.
As this processing may include special categories of personal information or information relating to my criminal record, in addition to the above, what are the additional legal grounds you rely on to justify this processing?
This processing is necessary for reasons of substantial public interest.
(See “What are the legal grounds for processing special category personal information?” in the Overview section.)
To the extent that you did not get this personal information from me, how did you collect this information?
The information processed as part of this activity is stored within our IT systems, having been collected as part of other processing activities referred to within this Notice. Please refer to the information relating to sources as set out in this Notice (see “Where do you get my personal information from?” in the Overview section).
Who do you share this personal information with?
Your personal information is shared internally, as set out in this Notice (see “When do you share my personal information with others?” in the Overview section). This will include with the IT department.
In addition, some of your personal information will be shared externally with any suppliers or partners as needed and as otherwise set out in this Notice (see “When do you share my personal information with others?” in the Overview section).