Staff Policy Statement

Staff Policy Statement


 Company: CBF Service Centre Limited
  
 Date Created: 23/05/2018
 Change/Verification Frequency: Annual or upon any material change
Below are our policies to comply with GDPR legislation. Our Data Processing Officer is Sheryl Basey-Fisher. All queries and information requests should be forwarded to him/her in writing.

Information we hold


Original Job Application and interview notes. We store name, address, DOB and contact information, previous work experience, educational attainments, marital status, previous salary and our job offer and any references provided. The system is paper based and the contents are destroyed 5 years after employment is terminated.

Performance Reviews and on-going HR management. Details of performance reviews and salary increases and any disciplinary issues are recorded and stored using a paper based system. Holidays booked and taken, illness and absenteeism are also recorded. Details are destroyed 5 years after employment is terminated.

Payroll information. All payroll data and the processing of payroll is performed by a 3rd party. The 3rd has been validated as GDPR compliant. All payroll records are deleted 6 years after the financial year end in which employment ceased.

Lawful Basis for Processing Data. All of the data that we store and process is covered under a Contractual Requirement, A legislative Requirement or Legitimate Interest as defined under the provisions of the GDPR.

Privacy, Consent and Individual Rights


Data Sharing. Data is only shared with other organisations or entities as described above to comply with statutory record keeping.

Subject Access. In terms of providing copies of the data we hold, we will upon receipt of a written request provide hard copies of any invoices, quotations and work orders within 40 days of receiving the request.

Individual Data Rights. In terms of providing the right to erase data, data portability and the right to object we are obliged to follow the request as determined by the nature of the data and its processing as defined in the table below.
Right to erasure Right to portability Right to object
Consent X
but right to withdray consent
Contract X
Legal obligation X X X
Vital interests X X
Public task X X
Legitimate interests X
All requests must be submitted in writing and will be actioned within 40 working days of receiving the request. The right to portability only applies to data that is processed electronically.
Share by: