Premsystem is software that gathers and uses certain information about individuals on behalf of Customers.
These can include customers, users, suppliers, business contacts, employees and other people the organisation has a relationship with or may need to contact.
The Data Protection Act 1998 describes how organisations — including Premsystem— must collect, handle and store personal information.
Everyone who works for or with Premsystem has some responsibility for ensuring data is collected, stored and handled appropriately.
• The board of directors is ultimately responsible for ensuring that Premsystem meets its legal obligations.
o Dealing with requests from individuals to see the data Premsystem holds about them (also called ‘subject access requests’).
• Premsystem will provide training to all employees to help them understand their responsibilities when handling data.
• Customers should ensure Personal data should not be shared informally. In particular, it should never be sent by email, as this form of communication is not secure.
The law requires Premsystem to take reasonable steps to ensure data is kept accurate and up to date.
The more important it is that the personal data is accurate, the greater the effort Premsystem should put into ensuring its accuracy.
• Premsystem will make it easy for data subjects to update the information Premsystem holds about them. For instance, via the company website.
Subject access requests from individuals should be made by email, addressed to the data controller at our email address. The data controller can supply a standard request form, although individuals do not have to use this.
Under these circumstances, Premsystem will disclose requested data. However, the data controller will ensure the request is legitimate, seeking assistance from the board and from the company’s legal advisers where necessary.