Data Protection Policy

1. Introduction
AT Technical Limited is committed to ensuring the protection, privacy, and security of the personal and sensitive information entrusted to us. This Data Protection Policy outlines our commitment to compliance with the General Data Protection Regulation (GDPR), the Data Protection Act (DPA), and other relevant data protection laws.

2. Scope
This policy applies to all employees, contractors, clients, and stakeholders associated with AT Technical Limited, covering all aspects of data processing and protection within our organization.

3. Principles
a. Lawful, Fair, and Transparent Processing: AT Technical Limited processes personal data lawfully, fairly, and in a transparent manner.
b. Purpose Limitation: We collect and process personal data only for specified, explicit, and legitimate purposes.
c. Data Minimisation: We ensure that the personal data we collect is adequate, relevant, and limited to what is necessary for the intended purposes.
d. Accuracy: We strive to keep personal data accurate and up to date.
e. Storage Limitation: Personal data is kept in a form that permits identification for no longer than necessary for the purposes for which it is processed.
f. Integrity and Confidentiality: We implement appropriate technical and organizational measures to ensure the security and confidentiality of personal data.

4. Data Protection Officer (DPO)
AT Technical Limited has appointed a Data Protection Officer to oversee and ensure compliance with data protection laws and regulations.

5. Data Collection and Processing
a. Lawful Basis: Personal data is processed on the lawful basis of consent, contract necessity, legal obligation, vital interests, public task, or legitimate interests.

b. Data Subjects’ Rights: We respect the rights of data subjects, including the right to access, rectification, erasure, and the right to object to processing.

6. Security Measures
a. Technical and Organisational Measures: AT Technical Limited implements appropriate measures to ensure the confidentiality, integrity, and availability of personal data.
b. Data Breach Response: In the event of a data breach, we have procedures in place to detect, report, and investigate breaches, as required by GDPR.

7. Data Sharing and Third Parties
a. Third-Party Processors: When engaging third-party processors, AT Technical Limited ensures they meet the same data protection standards we uphold.
b. Data Transfer: Any transfer of personal data outside the European Economic Area (EEA) is done with appropriate safeguards.

8. ICO Registration and Compliance
a. AT Technical Limited is registered with the Information Commissioner’s Office (ICO) and complies with ICO guidelines and regulations.

9. Insurance Coverage
a. AT Technical Limited maintains professional indemnity, public, and private insurance to protect against potential data protection liabilities.

10. Training and Awareness
a. Employees and contractors undergo regular training on data protection principles and compliance.

11. Policy Review and Update
a. This policy is subject to periodic review to ensure its continued relevance and effectiveness.

12. Conclusion
AT Technical Limited is dedicated to upholding the highest standards of data protection and privacy. By following this policy, we aim to safeguard the personal information entrusted to us and maintain the trust of our clients and stakeholders.

AT Technical Limited Leadership Team
04/06/2020