Who we are: We are a multi consulting and construction based service provider company in Bangladesh.
Our website address is: ”www.attakasur.com”.
At-Takasur Consultancy Firm (ATCF) needs to collect and use certain types of information about its employees and others with whom it comes into contact in order to operate as a business. This personal information must be collected and dealt with appropriately whether it is collected on paper, stored in a computer database or recorded on other material and there are safeguards to ensure this under the General Data Protection Regulation 2016 (GDPR).
The Company intends to ensure that personal information is treated lawfully and correctly. To this end the Company endorses fully and adheres to the six principles of data protection, as set out in the Article 5 of the GDPR:
These principles will be followed at all times when processing or using personal information. Therefore, through appropriate management and strict application of criteria and controls, the Company will:
The Company will ensure that the rights of those about whom information is held, can be fully exercised under the Act. These include:
Under the GDPR the Data Controller post is held by the Company’s Finance Director. This role determines for what purpose any personal information held will be used. This role is also responsible for notifying the Information Commissioner’s Office of the data it holds or is likely to hold and the general purposes that this data will be used for.
Under the GDPR the Data Protection Officer for all employee related data is the Company’s HR Manager. The Data Protection Officer for all other categories of personal data outside of employee data, such as those relating to subcontractors, suppliers and other third parties is the Company’s Facilities Manager.
Under the GDPR a “Data Subject” is any individual who can be identified or distinguished from another from personal data held, e.g. an employee. Data Subjects have certain rights:
Informed consent is when:
The Company will ensure that data is collected within the boundaries defined in this policy. This applies to data that is collected in person or by completing a form.
When collecting data, the Company will ensure that the Data Subject:
Information and records relating to Data Subjects will be stored securely and will only be accessible to authorised individuals.
Information will be stored for only as long as it is needed or required by law and will be disposed of appropriately.
It is the Company’s responsibility to ensure all personal and Company data is non-recoverable from any computer system previously used within the organisation, which has been passed on/sold to a third party.
All Data Subjects have the right to access the information the Company holds about them. The Company will also take reasonable steps to ensure that this information is kept up to date by periodically asking Data Subjects whether there have been any changes. In addition, the Company will ensure that:
The Company may share data with other organisations when it is appropriate to do so, for example HMRC or the DVLA.
Data Subjects will be made aware in most circumstances how and with whom their information will be shared. The circumstances leading to such disclosures include:
There are circumstances where the law allows the Company to disclose data (including sensitive data) without the Data Subject’s consent. These are:
The Company recognises the inherent right for an individual to be forgotten. This means that on request for the individual all information held is securely destroyed and proof given of such destruction. In certain circumstances (for example legal defence) the Company may refuse in part or in full to comply with the request.
The Company backs up data every day and has multiple copies (at least one set for each day of the week and additional weekly ones in order to have at least a month’s worth of data at any one time).
Records of these are kept:
This policy is subject to review and amendment in line with prevailing legislation and best practice. The Company reserves the right to review and amend this policy at any time.