Data Protection Protocol for Moving Connect
1. Introduction
This document outlines the data protection protocol for Moving Connect, a software company that manages removalist clients. The protocol focuses on safeguarding all data managed and controlled by the company, including but not limited to customer, employee, and business partner information.
2. Purpose
The purpose of this protocol is to ensure that Moving Connect manages data in a secure, lawful, and ethical manner in accordance with applicable legislation, including the General Data Protection Regulation (GDPR) and local data protection laws.
3. Scope
This protocol applies to all data in possession of or controlled by Moving Connect, including physical and electronic data, and to all staff, contractors, suppliers, and other third parties who access or manage data on behalf of Moving Connect.
4. Definitions
- Data: Any information that Moving Connect has access to, including personal data, customer data, employee data, and business partner data.
- Data subject: The identified or identifiable natural person to whom the data relates.
- Data processing: Any operation or set of operations performed on data, including collecting, recording, organizing, storing, adapting, altering, retrieving, consulting, using, disclosing, disseminating, aligning, combining, erasing, or destroying data.
5. Data Protection Principles
Moving Connect commits to the following principles:
- Lawfulness, fairness, and transparency: Data will be processed lawfully, fairly, and transparently.
- Data minimization: Only data necessary for the purpose for which it was collected will be processed.
- Purpose limitation: Data will be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
- Accuracy: Data will be accurate and, where necessary, kept up to date.
- Storage limitation: Data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed.
- Integrity and confidentiality: Data will be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage.
6. Data Collection and Use
Data is collected only for the purposes stated at the point of collection and used strictly in line with data protection laws. Customers are informed about the data collection purposes at the point of collection.
7. Data Storage and Security
Moving Connect has implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, secure networks, and intrusion detection systems. Data is stored securely, and access to data is restricted to authorized personnel only.
8. Data Access and Disclosure
Data is not disclosed to third parties without the express consent of the data subject, except where required by law or to protect the rights, property, or safety of Moving Connect, our customers, or others.
9. Data Subject Rights
Data subjects have the right to access, correct, delete, or restrict processing of their data, and the right to data portability, object to processing, and lodge a complaint with a supervisory authority.
10. Data Breach
In case of a data breach, Moving Connect will notify the supervisory authority and affected data subjects within 72 hours, unless the breach is unlikely to result in a risk to the rights and freedoms of data subjects.
11. Training and Awareness
All staff, contractors, and suppliers who handle data are provided with data protection training and are aware of their responsibilities for protecting data.
12. Regular Review
This protocol is regularly reviewed and updated as necessary to ensure it remains effective and compliant with data protection laws.
13. Compliance
Failure to comply with this protocol may result in disciplinary action, up to and including termination of employment or contracts, and legal action.
14. Contact
For any questions or concerns about this protocol, please contact Moving Connect's Data Protection Officer at data@movingsoftware.com.au.
This protocol is effective from 1st June 2023.
Document Approved by:
Mark Edwards
Director
1/06/2023