Paramount4 Data Protection Policy

Paramount 4 ( part of DCE Group Ltd) is registered with the ICO (Information Commissioners Office)

INTRODUCTION

Paramount 4 are committed to be/working towards being compliant under The General Data Protection Regulation (GDPR). 

PRINCIPLES

Paramount 4 shall so far as reasonable practicable comply with the principles contained with this Regulations, to ensure all data is:

• Fairly and lawfully processed.
• Processed for all lawful purpose.
• Adequate, relevant and not excessive
• Accurate and up to date
• Kept only for the length of time required.
• Processed in line with data subject rights.
• Secure
• Not transferred to a third party without consent or only under any directive given by law

PERSONAL DATA

Personal data covers any information relating to an identified or identifiable individual known as the ‘data subject’; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to any identification number or to one or more factors specific to the individual, physical, physiological, mental, economic, cultural or social identity.

This could include data of clients, prospects, leads and internal staff or workforce.

Personal data may also include sensitive personal data as defined by the Act

PROCESSING OF PERSONAL DATA

Consent may be required for the processing of personal data unless processing is necessary for the performance of the contract of employment. 

All other data under the definitions of personal data will remain confidential and only 

disclosed to third parties with appropriate consent or requirements under Law.

Paramount 4 will process data for marketing purposes, data subjects have the right to withdraw their consent at any time from this activity.

SENSITIVE PERSONAL DATA

Paramount 4 Group may from time to time, be required to process this data. Sensitive personal data includes data relating to medical information, gender, religion, race, sexual orientation, trade 

unions and criminal records and proceedings.

RIGHTS OF ACCESS TO INFORMATION

Data subjects have the right of access to information held by Paramount 4 subject to the provisions set out in the Act. Any data subject wishing to access personal data should put their request in writing (DSAR – Data Subject Access Request) and send to Paramount 4.

Paramount 4 will ensure the identify of the requestor is known and provide a response within the 40 days under the Regulations.

Under the Act there are certain exemptions on providing data and if any requests for such data, Paramount 4 will refer to the Regulations and advise the data subject of the result, for example 

National Security or detection of Crime.

ACCURACY

Paramount 4 will endeavor to ensure all personal data held in relation to data subjects is accurate. Data subjects that are employees of the Company, should notify Paramount 4 of any changes 

relating to their personal data. Data Subjects have the right in some circumstances to request 

inaccurate information about them to be erased. If the request to erase is not within the act, by Law or adverse to the working of the Company the Data Subject will be notified that the personal data will not be removed but a note made of the request.

ENFORECEMENT

If a Data Subject believes that Paramount 4 has not complied with this policy or acted within the Regulations, they can either utilise the Company’s internal grievance procedure, notify the 

Director of Paramount 4 or if they wish; write to the information Commissioners Office.

DATA SECUTRITY

Paramount 4 will take appropriate technical and organisational steps to ensure the security of 

personal data.

Communication relating to personal data will be made aware within the Company.

Any body within Paramount 4 who may encounter or gather personal data need to respect the privacy of others and ensure the data is appropriately protected.

Our main company on-line system is secured working alongside our external IT Company

Other Third-party systems that we use to hold personal data, Paramount 4 will be holding Privacy confirmation that the data is secure, and they comply with GDPR.

RETENTION/DESTRUCTION OF DATA

Paramount 4 will ensure any personal data is retained for defined periods and destroyed in a secure manner, either paper or technology. 

CCTV

DCE Group have a system installed for the purpose of prevention of crime. Should any DSAR be received and relating to images on CCTV these will be produced in accordance with the Regulations.

OTHER POLICES

DCE Group have the following polices in place:

Data Privacy Policy

Data Subject Access Request Policy

Retention and Destruction Policy

REVIEW

This Policy will be reviewed annually.

AUGUST 2023