Athwal Resourcing & Coaching GDPR Compliance Statement

The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a privacy and data protection regulation in the European Union (EU) that will be in force from the 25th of May 2018.The GDPR imposes new obligations on organisations that control or process relevant personal data and introduces new rights and protections for EU data subjects.

Athwal Resourcing Limited will be complying with the GDPR as a processor and controller of data and will be working with our suppliers and partner organisations to ensure they can meet these obligations. Athwal Resourcing Limited places a high importance on information security and we already have in place procedures we follow to protect personal data from breaches. Members of staff have also been trained in adhering to these procedures.

Going forward, we will ensure that all data processing we carry out are done in light of the following principles laid out in the GDPR:

• The processing is lawful, fair and transparent
• Transparent about what the data is being used for
• Data is collected for a specific purpose
• The data is necessary for the purpose
• The data must be accurate and kept up to date
• Data is not kept for longer than necessary
• The data is kept safe and secure