Page 60 - ITM Employee Handbook September 2020

the EEA, before doing so we will take the necessary steps to ensure that there is adequate protection,
as required by the GDPR.

3.19.7 How can I find out what personal information the Company holds about me and change
it if inaccurate?
If you want to know what personal information the Company holds about you, you can obtain it by
making your specific request in writing to the nominated Data Protection Officer.
We will confirm your request within 72 hours of receipt and process your request within one-month
of receipt. If the information we hold about you is inaccurate, please let us know and we will make
the necessary amendments and confirm that these have been made.

3.20 ELECTRONIC COMMUNICATIONS POLICY

The Company is committed to the correct and proper use of its electronic communications, email, and
internet services.

The inappropriate use of electronic communications, email or internet could expose the organisation
to risks ranging from virus attacks, theft and disclosure of information, disruption of network systems
and services, litigation and reputational damage to the Company. The purpose of this policy is to define
acceptable use of the Company’s electronic communications, email, internet and intranet services.
This policy is mandatory and by using any of the Company’s electronic communications, email or
internet, employees are agreeing to abide by the terms of this policy.

This policy applies to:

• All electronic communications, email, internet and intranet services provided by the
Company;
• All Information Technology (I.T.) resources provided by the Company;
• All user (employees, students, contractors, sub-contractors and authorised third-party
commercial service providers) of the Company’s electronic communications, email and
internet facilities;
• All use (both personal and Company business related) of the Company’s electronic
communications, email and internet facilities;
• All connections to (locally or remotely) the Company’s email, internet and intranet facilities;
• All connections made to external networks through the Company’s broadband network.

Acceptable Use:
The acceptable use of the Company’s electronic communications, email and internet and services is
based on the following principles:

• Access to the Company’s email and internet facilities should be regarded as a business
requirement and not an automatic entitlement.
• Users have a responsibility to ensure that they use Company’s email, internet and intranet
facilities at all times in a manner which is lawful, ethical and efficient.
• Users are expected to respect the rights and property of others, including privacy,
confidentiality and intellectual property.
• Users are expected to respect the integrity and security of the Company’s email, internet, and
intranet facilities.
Monitoring:
The Company reserves the right to routinely monitor, log and record any and all use of its electronic
communications, email and internet facilities for the purpose of:

• Helping to trace and resolve technical faults.
59