COMPANY DATA PROTECTION POLICY公司数据保密政策

政策简介和目的
我们公司的数据保密政策是指我们承诺以最大的谨慎和保密态度对待员工、客户、利益相关者和其他相关方的信息。

根据这项政策,我们确保公平、透明地收集、存储和处理数据,尊重个人权利。

范围
本政策是指向我们提供任何数量信息的各方(员工、求职者、客户、供应商等)。

谁受数据保密政策保护?
本公司及其子公司的员工必须遵守本政策。代理商、顾问、合作伙伴和任何其他外部实体也包括在内。一般来说,我们的政策是指我们与之合作或代表我们行事的任何人,可能需要偶尔访问数据。

政策要素
作为我们行动的一部分,我们需要获取和处理信息。这些信息包括任何使人可识别的离线或在线数据,如姓名、地址、用户名和密码、数字足迹、照片、社会保险号码、财务数据等。

我们公司以透明的方式收集这些信息,并且只有在相关方的充分合作和了解下才能收集这些信息。一旦我们获得这些信息,以下规则适用。

我们的数据是:
准确及时
仅为合法目的而公平收取
由公司在其法律和道德范围内处理
防止内部或外部未经授权或非法访问

我们的数据不会是:
非正式沟通
存储超过指定时间
转移到没有适当数据保护政策的组织、国家或国家
分发给任何一方,但数据所有者同意的除外(不包括执法当局的合法要求)
除了处理数据的方式外,公司还对数据所属的人负有直接义务。具体而言,我们必须:

让人们知道他们收集了哪些数据
告知人们我们将如何处理他们的数据
告知人们谁可以访问他们的信息
有丢失、损坏或泄露数据的规定
允许人们请求我们修改、删除、减少或更正数据库中包含的数据

行动
为了实施数据保护,我们承诺:
限制和监视对敏感数据的访问
制定透明的数据收集程序
对员工进行在线隐私和安全措施培训
建立安全网络以保护在线数据免受网络攻击
建立明确的程序来报告隐私泄露或数据滥用
包括合同条款或沟通我们如何处理数据的声明
建立数据保护实践(文档切碎、安全锁、数据加密、频繁备份、访问授权等)
我们的数据保护条款将出现在我们的网站上。

纪律后果
必须严格遵守本政策中描述的所有原则。违反数据保护准则将引发纪律处分,并可能引发法律诉讼。

Company data protection policy

Policy brief & purpose
Our Company Data Protection Policy refers to our commitment to treat information of employees, customers, stakeholders and other interested parties with the utmost care and confidentiality.

With this policy, we ensure that we gather, store and handle data fairly, transparently and with respect towards individual rights.

Scope
This policy refers to all parties (employees, job candidates, customers, suppliers etc.) who provide any amount of information to us.

Who is covered under the Data Protection Policy?
Employees of our company and its subsidiaries must follow this policy. Contractors, consultants, partners and any other external entity are also covered. Generally, our policy refers to anyone we collaborate with or acts on our behalf and may need occasional access to data.

Policy elements
As part of our operations, we need to obtain and process information. This information includes any offline or online data that makes a person identifiable such as names, addresses, usernames and passwords, digital footprints, photographs, social security numbers, financial data etc.

Our company collects this information in a transparent way and only with the full cooperation and knowledge of interested parties. Once this information is available to us, the following rules apply.

Our data will be:
Accurate and kept up-to-date
Collected fairly and for lawful purposes only
Processed by the company within its legal and moral boundaries
Protected against any unauthorized or illegal access by internal or external parties

Our data will not be:
Communicated informally
Stored for more than a specified amount of time
Transferred to organizations, states or countries that do not have adequate data protection policies
Distributed to any party other than the ones agreed upon by the data’s owner (exempting legitimate requests from law enforcement authorities)
In addition to ways of handling the data the company has direct obligations towards people to whom the data belongs. Specifically we must:

Let people know which of their data is collected
Inform people about how we’ll process their data
Inform people about who has access to their information
Have provisions in cases of lost, corrupted or compromised data
Allow people to request that we modify, erase, reduce or correct data contained in our databases

Actions
To exercise data protection we’re committed to:
Restrict and monitor access to sensitive data
Develop transparent data collection procedures
Train employees in online privacy and security measures
Build secure networks to protect online data from cyberattacks
Establish clear procedures for reporting privacy breaches or data misuse
Include contract clauses or communicate statements on how we handle data
Establish data protection practices (document shredding, secure locks, data encryption, frequent backups, access authorization etc.)
Our data protection provisions will appear on our website.

Disciplinary Consequences
All principles described in this policy must be strictly followed. A breach of data protection guidelines will invoke disciplinary and possibly legal action.