GDPR Statement

Nicholl HR GDPR Policy

Introduction

At Nicholl HR, we value privacy and the protection of personal data. This policy outlines our commitment to complying with the General Data Protection Regulation (GDPR) and safeguarding personal data.

Scope This policy applies to all employees, contractors, and third parties who process personal data on behalf of Nicholl HR.

Data Protection Principles

We adhere to the following GDPR principles:

Lawfulness, Fairness, and Transparency
Purpose Limitation
Data Minimization
Accuracy
Storage Limitation
Integrity and Confidentiality
Accountability

Lawful Basis for Processing

We process personal data based on the following lawful bases:

Performance of a Contract
Legal Obligation
Legitimate Interests
Rights of Individuals We respect individuals' rights regarding their personal data, including:
Right to Access
Right to Rectification
Right to Erasure
Right to Restriction of Processing
Right to Data Portability
Right to Object

Data Breach Management

We have procedures to detect, investigate, and report personal data breaches as required by law.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) responsible for monitoring compliance and acting as a point of contact for data protection matters.

Data Protection Training and Awareness

We provide regular training to ensure understanding of data protection responsibilities and compliance with this policy.

Third-Party Data Processors

We ensure third-party data processors guarantee GDPR compliance and personal data protection.

Review and Updates

This policy is regularly reviewed and updated to comply with legal requirements and best practices.

Contact Information

For questions, concerns, or to exercise GDPR rights, contact our Data Protection Officer at info@nichollhr.co.uk.

This policy guides employees, contractors, and third parties on Nicholl HR's commitment to data protection and GDPR compliance. Please refer to other relevant policies and procedures.