Page 60 - Kildare House Hotel EHB Rev.1.2

3.19.6 How does the Company protect data about me if it is transferred out of Europe?
Countries in the European Economic Area (EEA) are required to have a similar standard of protection
of personal data. This is not always the case outside that area. If we are required to transfer data
outside the EEA, before doing so we will take the necessary steps to ensure that there is adequate
protection, as required by the GDPR.

3.19.7 How can I find out what personal information the Company holds about me and
change it if inaccurate?
If you want to know what personal information the Company holds about you, you can obtain it by
making your specific request in writing to the nominated Data Protection Officer.

We will confirm your request within 72 hours of receipt and process your request within one-month
of receipt. If the information we hold about you is inaccurate, please let us know and we will make
the necessary amendments and confirm that these have been made.

3.20 ELECTRONIC COMMUNICATIONS POLICY
The Company is committed to the correct and proper use of its electronic communications, email, and
internet services.

The inappropriate use of electronic communications, email or internet could expose the organisation
to risks ranging from virus attacks, theft and disclosure of information, disruption of network systems
and services, litigation, and reputational damage to the Company. The purpose of this policy is to
define acceptable use of the Company’s electronic communications, email, internet, and intranet
services.

This policy is mandatory and by using any of the Company’s electronic communications, email or
internet, employees are agreeing to abide by the terms of this policy.

This policy applies to:
• All electronic communications, email, internet and intranet services provided by the
Company;
• All Information Technology (I.T.) resources provided by the Company;
• All user (employees, students, contractors, sub-contractors and authorised third-party
commercial service providers) of the Company’s electronic communications, email and
internet facilities;
• All use (both personal and Company business related) of the Company’s electronic
communications, email and internet facilities;
• All connections to (locally or remotely) the Company’s email, internet and intranet facilities;
• All connections made to external networks through the Company’s broadband network.

Acceptable Use:

The acceptable use of the Company’s electronic communications, email and internet and services is
based on the following principles:

• Access to the Company’s email and internet facilities should be regarded as a business
requirement and not an automatic entitlement.

Page 59 of 84
ORC/Doc/Rev.1.1