1.0 Purpose
The purpose of this policy is to set out responsibilities with respect to the collection and management ofPersonal Information in accordance with the Privacy Act 2020 and General Data Protection Regulation (GDPR).
2.0 Scope
This policy applies to all employees, past and present, of Vertex UV Ltd.
3.0 Definitions
Personal information is any information that is about or could identify an employee.
4.0 Responsibilities
The collection of Personal Information by Vertex UV Ltd is governed by the Privacy Act 2020. Employees who wish to collect, update, use, store, disclose or share Personal Information must adhere to the privacy principles contained in the Privacy Act 2020, this includes:
- Collecting and using personal information only with the individual’s knowledge or consent, and fora specific purpose for use in our business.
- Accessing and using of personal information only for the purposes for which we collected it or as permitted under applicable legislation.
- Managing, storing and retaining personal information only for the length of time for which we require it.
- Deleting or disposing of personal information in a secure and timely manner when the information is no longer required for legal or legitimate business reasons.
- Providing access to, amending, or deleting an individual’s personal information that we hold about them upon their request, where applicable legislation provides for this.
Our Privacy Statement on www.vertex.co.nz sets out our commitments to privacy and applies to all our websites and external-facing digital platforms.
5.0 Responsibility for monitoring compliance
- The Privacy Officer is responsible for monitoring compliance with this policy and reporting any breaches to the CEO, external agencies, and affected individuals (where appropriate).
- Requests for information or any questions about the interpretation of, or compliance with this policy must be referred to the Privacy Officer.