Introduction to Policy Statement

VentluxLtd needs to collect and use certain types of information about the people with whom it deals in order to operate as a company. This includes current, past and prospective clients, suppliers and employees. This information is dealt with properly, whether it is recorded on paper, stored electronically or collected via other media. Ventlux regards the correct and lawful treatment of personal information as being very important to the successful operation of our company as well as maintaining confidence between all companies and individuals who deal with us. We ensure that our organisation treats personal information correctly and lawfully.

Personal Information:

Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data. It shall be accurate and, where necessary, kept up to date. Information shall be processed in accordance with the rights of data subjects. It shall be obtained only for specified and lawful purposes and shall not be further processed in any manner incompatible with that purpose. Ventlux Ltd through appropriate management of information will:

• Meet its legal obligations to specify the purposes for which the information is used.
• Observe the conditions regarding the fair collection and use of the information.
• Ensure that the rights of the people for which information is held are fully exercised under that Act.

This includes the right to be informed about the processing of information being undertaken, the right of access to the personal information, the right to prevent the processing of information in certain circumstances and also the right to correct, block, rectify or delete information which can be regarded as wrong information. In addition Ventlux Ltd will ensure that:

• Everyone who is managing and handling Personal Information is appropriately supervised.
• The Methods of handling Personal information are clearly described.
• Everyone managing and handling Personal Information is appropriately trained to do so.
• Methods of handling Personal Information are regularly assessed and evaluated.

The company IMS is correctly encrypted as authorised by the software company. This system covers General Data Protection Regulation (GDPR) for all data relating to suppliers, clients and employees as all personal data is protected and stored in the correctly and safely following GDPR regulations. Signed: Adrian Knowles Managing Director Dated: 22/05/2023