Data Protection Policy
1. Introduction
Bossplex Ltd is committed to protecting the privacy and security of personal data in accordance with applicable data protection laws. This Data Protection Policy outlines our practices regarding the collection, processing, storage, and protection of personal data.
2. Scope
This policy applies to all employees, contractors, and third-party service providers who have access to personal data processed by Bossplex Ltd.
3. Principles of Data Protection
Bossplex Ltd adheres to the following principles when processing personal data:
3.1. Lawfulness, Fairness, and Transparency: Personal data is processed lawfully, fairly, and transparently in relation to the data subject.
3.2. Purpose Limitation: Personal data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
3.3. Data Minimization: We only collect and process personal data that is necessary for the purposes for which it is being processed.
3.4. Accuracy: We take reasonable steps to ensure that personal data is accurate and kept up to date.
3.5. Storage Limitation: Personal data is kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
3.6. Integrity and Confidentiality: We implement appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data.
4. Lawful Basis for Processing
Personal data is processed on the basis of one or more of the following lawful grounds:
4.1. Consent of the data subject.
4.2. Performance of a contract.
4.3. Compliance with a legal obligation.
4.4. Protection of vital interests.
4.5. The performance of a task carried out in the public interest or in the exercise of official authority.
4.6. Legitimate interests pursued by Bossplex Ltd or a third party.
5. Data Subject Rights
Data subjects have the following rights:
5.1. The right to be informed.
5.2. The right of access.
5.3. The right to rectification.
5.4. The right to erasure.
5.5. The right to restrict processing.
5.6. The right to data portability.
5.7. The right to object.
6. Data Security
Bossplex Ltd implements appropriate technical and organizational measures to ensure the security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
7. Data Breach Response
In the event of a data breach, Bossplex Ltd has established procedures to promptly assess and mitigate the impact of the breach. Data subjects and relevant authorities will be notified as required by law.
8. Data Protection Officer (DPO)
A Data Protection Officer is appointed to oversee and advise on compliance with data protection laws. The DPO can be contacted at dpo@bossplex.com.
9. Review and Update
This Data Protection Policy is reviewed regularly to ensure its ongoing relevance and compliance with applicable data protection laws.