Data Protection Policy - 2024 review

1. Introduction

At Dignity Healthcare Training, we are committed to protecting the privacy and confidentiality of the personal data we collect, process, and store. This Data Protection Policy outlines our approach to ensuring compliance with data protection laws and regulations and our commitment to safeguarding the personal data of our customers, employees, partners, and other stakeholders.

2. Scope

This policy applies to all personal data collected, processed, and stored by Dignity Healthcare Training, whether in electronic or physical format, and regardless of the medium on which it is stored.

3. Principles

Lawfulness, Fairness, and Transparency: We will only collect, process, and store personal data in accordance with applicable laws and regulations. We will be transparent about how we collect and use personal data.
Purpose Limitation: We will only collect personal data for specified, explicit, and legitimate purposes and will not process it in a manner that is incompatible with those purposes.
Data Minimisation: We will only collect personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
Accuracy: We will take reasonable steps to ensure that personal data is accurate and kept up to date. We will promptly rectify or delete any inaccurate personal data.
Storage Limitation: We will not keep personal data for longer than is necessary for the purposes for which it is processed.
Integrity and Confidentiality: We will implement appropriate technical and organisational measures to ensure the security, integrity, and confidentiality of personal data.

4. Data Collection and Processing

We will only collect personal data for specified, explicit, and legitimate purposes, and we will inform individuals about these purposes at the time of collection.
We will only process personal data if one or more of the following conditions are met: the individual has given consent, processing is necessary for the performance of a contract, processing is necessary for compliance with a legal obligation, processing is necessary to protect vital interests, or processing is necessary for the legitimate interests pursued by Dignity Healthcare Training or a third party.

5. Data Security

We will implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage.
We will restrict access to personal data to authorised personnel who have a legitimate need to access such data for the purposes for which it was collected.

6. Data Subject Rights

We will respect the rights of individuals regarding their personal data, including the right to access, rectify, erase, restrict processing, and portability, as well as the right to object to processing.
We will provide individuals with mechanisms to exercise their rights and will respond to such requests in a timely manner and in accordance with applicable laws and regulations.

7. Data Breach Response

We will promptly investigate any suspected or actual data breaches involving personal data and will notify the relevant authorities and affected individuals in accordance with applicable laws and regulations.

8. Training and Awareness

We will provide training to employees who handle personal data to ensure they understand their responsibilities and obligations under this policy and applicable data protection laws and regulations.

9. Compliance

We will regularly review and update this Data Protection Policy to ensure it remains effective and compliant with applicable laws and regulations.
We will monitor our compliance with this policy and applicable data protection laws and regulations and will take appropriate corrective action where necessary.

10. Contact Information

If you have any questions or concerns about our Data Protection Policy or our practices regarding the collection, processing, or storage of personal data, please contact our Data Protection Officer at shona.karppa@dignityhealthcaretraining.com.

11. Conclusion

We are committed to protecting the privacy and confidentiality of personal data and to ensuring compliance with applicable data protection laws and regulations. By implementing this Data Protection Policy, we aim to build and maintain trust with our customers, employees, partners, and other stakeholders.

Feel free to customize this policy according to your organisation's specific needs, applicable laws, and industry requirements.