Employee Handbook

Data protection FM Conway take the security and privacy of your data seriously. We are committed to complying with our legal data protection obligations. FM Conway is a ‘data controller’, which means that we determine the purpose and means of the processing of your personal data. Our trained people will only hold data for as long as necessary and use it only for the purposes for which we collected it.

Full details of how we manage data can be found in our Data Protection Policy on our IMS.

Data protection principles

FM Conway will ensure that your personal data is be processed in accordance with the GDPR legislation. It must:

• Be processed fairly, lawfully, and transparently • Be collected and processed only for specified, explicit and legitimate purposes • Be adequate, relevant, and limited to what is necessary for the purposes for which it is processed • Be accurate and kept up to date. Any inaccurate data must be deleted or rectified without delay • Not be kept for longer than is necessary for the purposes for which it is processed • Be processed securely

We are accountable for these principles.

Data protection

76

77