Data Protection Policy
In order to operate effectively and fulfil its legal obligations, Skyform Specialist Contracts Division needs to collect, maintain and use certain personal information about current, past and prospective employees ,customers, suppliers and other individuals with whom it has dealings. All such personal information, whether held on computer, paper or other media, will be obtained, handled, processed, transported and stored lawfully and correctly, in accordance with the safeguards contained in the Data Protection Act 1998 (DPA).
Skyform Group and its corresponding subdivisions (Construction Specialist, ECO, Power Access & Wind) are committed to the eight principles of data protection as detailed in the DPA. These principles require that personal information must:
- Be fairly and lawfully processed and not processed unless specific conditions are met;
- Be obtained for one or more specified, lawful purposes and not processed in any manner incompatible with those purposes;
- Be adequate, relevant and not excessive for those purposes;
- Be accurate and, where necessary, kept up to date;
- Not be kept for longer than is necessary;
- Be processed in accordance with the data subject’s rights under the DPA;
- Be kept secure form unauthorised or unlawful processing and protected against accidental loss, destruction or damage; and
- Not be transferred to countries outside the European Economic Area (EEA) unless the country or territory ensures adequate protection for the rights and freedoms of the data subjects.
In order to comply with the data protection principles, Skyform Group and its corresponding subdivisions (Construction Specialist, ECO, Power Access & Wind) will:
- Observe fully all conditions regarding the fair collection and use of personal information;
- Meet its legal obligations to specify the purpose for which information is used;
- Collect and process appropriate personal information only to the extent that it is needed to fulfil operational needs or to comply with legal obligations;
- Ensure the quality of the personal information used;
- Apply strict checks to determine the length of time personal information is held;
- Ensure that individuals about whom information is held are able to exercise their rights under the DPA, including the right to be informed that processing is taking place, the right of access to their own personal information, the right to prevent processing in certain circumstances and the right to correct, rectify, block or erase incorrect information;
- Take appropriate technical and organisational security measures to safeguard personal information; and
- Ensure that personal information is not transferred outside the EEA without suitable safeguards.
- Overall responsibility for ensuring that the Company complies with its data protection obligations rests with the Financial Director.
- It is the responsibility of all employees to ensure that personal information provided to the Company, for example current address, is accurate and up to date. To this end employees are required to inform the Company immediately when changes occur.
- Employees whose role involves the collection, maintenance and processing of personal information about other employees, customers, suppliers or any other individuals with whom the Company has dealings are responsible for following the Company’s rules on good data protection practice as notified from time to time by their allocated Supervisor.
Information About Employees
Skyform Specialist Contracts Division holds the following personal information about its employees:
Name, address, salary, NI Number, date of birth.
This information is used for payroll and administrative purposes.
We also hold the following sensitive personal information about employees:
Phone number and next of kin and ethnic background.
This information is used for the purpose of health and safety monitoring.
Access to Information
Anyone who is the subject of personal information held by the Company has the right to make a subject access request. Employees who wish to exercise this right should write to a company Director. If, as the result of a subject access request, any personal information is found to be incorrect it will be amended. The Company will deal promptly with subject access requests and will normally respond within 40 days. If there is a reason for delay, the person making the request will be informed accordingly.
IT Communications and Monitoring
Skyform Group and its corresponding subdivisions (Construction Specialist, ECO, Power Access & Wind) provides employees with access to various computer facilities for work and communication purposes. In order to ensure compliance with all applicable laws in relation to data protection, information security and compliance monitoring, the Company has adopted an IT communications and monitoring policy.
Breach of the Policy
Breach of this policy will be regarded as a disciplinary offence and will be dealt with under the Company’s formal discipline procedure.
Employees who consider that there has been a breach of this policy in relation to personal information about them held by the Company should raise the matter via the Company’s formal grievance procedure.