Page 29 - Comerford Employee Handbook 2018 v.1

To ensure you are compliant with Data Protection legislation in Ireland the following eight rules
are applicable:

i. Obtain and process information fairly – the data subject should know that the Company
is gathering personal data, any processing must be after obtaining consent from the
data subject, and processing must be necessary.
ii. The data must be kept for a specified, lawful purpose.
iii. The data should be used and disclosed only for the specified purpose.
iv. The data must be kept safe and secure.
v. The data must be up to date, accurate and complete.
vi. The data must be relevant, adequate but not excessive.
vii. The must be retained for no longer than is necessary.
viii. A copy of the data must be made available to the data subject, on request.

J) CLOSED CIRCUIT TELEVISION

Closed circuit television cameras are used on our premises for security purposes. We reserve
the right to use any evidence obtained in this manner in any disciplinary issue.

K) PUBLIC INTEREST DISCLOSURE

1. If you believe the Company is failing in certain areas as listed below, you should notify a
Supervisor/Manager before making a public disclosure about us. Such public interest
disclosures relate to:

a. committing a criminal offence

b. failing to comply with a legal obligation

c. a miscarriage of justice

d. endangering the health and safety of an individual

e. environmental damage

f. concealing any information relating to the above

2. You should in the first instance report any concern you may have to a Supervisor/Manager. If
you are not satisfied with the explanation or reason given to you, you should raise the matter
with the appropriate external organisation or body, e.g. the Gardai, the Irish Financial Services
Regulatory Authority, the Financial Services Ombudsman or the Health and Safety Authority.

29