Data Protection & Privacy Policy
1. Introduction
Acceleration Media Ltd is committed to ensuring the security and protection of personal data that we process, and to providing a compliant and consistent approach to data protection. We are dedicated to safeguarding the personal data under our remit and developing a data protection regime that is effective, fit for purpose, and demonstrates an understanding of and appreciation for the UK GDPR.
2. Scope
This policy applies to all Acceleration Media Ltd’s employees, contractors, consultants, temporary staff, and other workers, including all personnel affiliated with third parties. It covers all personal data processed by Acceleration Media Ltd, including that related to customers, clients, suppliers, business contacts, employees, and others.
3. Data Protection Principles
We adhere to the principles relating to processing of personal data set out in the UK GDPR, which require personal data to be:
Processed lawfully, fairly, and in a transparent manner.
Collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
Accurate and, where necessary, kept up to date.
Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
Processed in a manner that ensures appropriate security of the personal data.
4. Lawful Basis for Processing
Acceleration Media Ltd will only process personal data where there is a lawful basis for doing so. These bases include:
The data subject has given consent.
The processing is necessary for the performance of a contract.
The processing is necessary for compliance with a legal obligation.
The processing is necessary to protect the vital interests of a data subject or another person.
The processing is necessary for the performance of a task carried out in the public interest.
The processing is necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights, or freedoms of the data subject.
5. Data Subject Rights
Data subjects have the following rights regarding their personal data:
The right to be informed about the collection and use of their personal data.
The right of access to their personal data.
The right to rectification of inaccurate personal data.
The right to erasure of their personal data in certain circumstances.
The right to restrict processing of their personal data.
The right to data portability.
The right to object to the processing of their personal data.
Rights in relation to automated decision-making and profiling.
6. Data Security
Acceleration Media Ltd will implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
Ensuring the confidentiality, integrity, availability, and resilience of processing systems and services.
Ensuring the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.
Regularly testing, assessing, and evaluating the effectiveness of technical and organisational measures for ensuring the security of processing.
7. Data Breach Management
In the event of a personal data breach, Acceleration Media Ltd will:
Notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the breach, if it is likely to result in a risk to the rights and freedoms of individuals.
Notify the affected individuals without undue delay if the breach is likely to result in a high risk to their rights and freedoms.
Document all data breaches, regardless of their effect.
8. Data Protection Impact Assessments (DPIAs)
Acceleration Media Ltd will conduct DPIAs for processing activities that are likely to result in a high risk to the rights and freedoms of individuals. The DPIA will:
Describe the nature, scope, context, and purposes of the processing.
Assess necessity, proportionality, and compliance measures.
Identify and assess risks to individuals.
Identify any additional measures to mitigate those risks.
9. Training and Awareness
All Acceleration Media Ltd employees will receive data protection training upon joining and at regular intervals thereafter. Training will cover:
Data protection principles and individual rights.
Data security measures.
Procedures for data breach management.
Any changes in data protection legislation.
10. Review and Maintenance
This policy will be reviewed annually or when significant changes occur to ensure its continued relevance and effectiveness in compliance with the UK GDPR.
11. Contact Information
For any questions or concerns regarding this policy, please contact the Data Protection Officer (DPO) at:
Email: dpo@accelerationmedia.co.uk
Phone: +44 (7)961 621111
Approval
This Data Protection Policy has been approved by the management of Acceleration Media Ltd.
Date: 05/05/2024
