Notice regarding your

our duty to comply with data protection requirements under

the European General Data Protection Regulation (GDPR)

Under the GDPR, Employees should not access or process personal data without authorisationation. Personal data
may only be processed where there is a legal basis for doing so, for example
example, in order to comply with a legal
obligation or to comply with a contract of employment or with the individual’s consent. Article
Art 5 paragraph 1
of the GDPR Regulations set out the following principles which must be complied with at all times:

The data protection principles are:

a) Lawfulness, fairness and transparency. Personal data must be processed lawfully, fairly and in a
transparent manner in
n relation to the data subject.

b) Purpose limitation. Personal data must be collected only for specified, explicit and legitimate
purposes and not further processed in a manner that is iincompatible
ncompatible with those purposes.
purposes

c) Data minimisation. Personal data must be adequate, relevant and limited to what is necessary in
relation to the purposes
oses for which it is processed.

d) Accuracy. Personal data must be accurate and, where necessary, kept up to date. Every reasonable
step must be taken to ensure that personal data that is inacc
inaccurate,
urate, having regard to the purposes for
which it is processed, is erased or rectified without delay.

e) Storage limitation. Personal data which is kept in a form which permits identification of data
subjects must be kept for no longer than is necessary for the purposes for
or which the data is
processed.

f) Integrity and confidentiality. Personal data must be processed in a manner that, through use of
technical or organisational measures, ensures appropriate security, including protection against
unauthorised or unlawful processing and against accident
accidental
al loss, destruction or damage.

Infringements of such obligations can put both you and the company at risk and can be punished with
significant fines. Infringement can also constitute a breach of company policy and your contract of
employment and could result in disciplinary action up to and incl
including
uding dismissal. Finally, please note that the
confidentiality obligations under your contract of employment remain unaffected by this notice and shall
continue to apply after the end of your employment with the company.

Version 1
25th May 2018