|
|
Bentall shall keep Personal Information only as long as it remains necessary or relevant for the Purposes or as required by law. Depending on the circumstances, where Personal Information has been used to make a decision about an individual, Bentall will retain the information for at least one year so that the individual has a reasonable opportunity to obtain access to it.
Once Personal Information is no longer required to fulfill the Purposes and is no longer required or permitted to be retained for legal or business purposes, it will be destroyed or made anonymous.
Principle 6 – Accuracy of Personal Information
Bentall will take appropriate steps to ensure that Personal Information collected by Bentall is accurate and complete as reasonably required in connection with the Purposes, including where Personal Information is likely to be used by Bentall to make a decision that affects the individual to whom the Personal Information relates or if the Personal Information is likely to be disclosed to a third party.
Principle 7 – Security Safeguards
Bentall stores Personal Information at our premises or at the premises of our services providers and will protect this information by security safeguards appropriate to the sensitivity of the information.
- Bentall takes steps to ensure the security of Personal Information, regardless of the format in which it is held, while in its custody is appropriate to the sensitivity of the information, including physical security measures (such as the use of locked cabinets and storage facilities) and technological security measures (such as the use of passwords and encryption).
- All Bentall employees with access to Personal Information are required to respect the confidentiality of that information.
- Bentall will take appropriate steps to protect Personal Information disclosed to third parties, such as by contractual agreements stipulating the confidentiality of the information and the purpose for which it is to be used.
Principle 8 – Openness Concerning Policies and Practices
Bentall will make available to customers, suppliers, employees and other individuals specific information about its policies and practices relating to the management of personal information.
Bentall will make a reasonable effort to assist individuals and respond as accurately and completely as practically possible.
Principle 9 – Access to Personal Information
Upon request, Bentall shall inform an individual of the existence, use and disclosure of his or her personal information and shall give the individual access to the information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.
- An individual may, upon written request to Bentall’s Privacy Officer, access the Personal Information about the individual that is in the custody of Bentall. Within 30 days of such request (or such longer time as permitted by law), Bentall will inform the individual of existence, use, and disclosure of such information.
- An individual may, upon written request to Bentall, request a correction to an error or omission in any Personal Information that is under Bentall’s control. Bentall will, as appropriate, amend the information as requested and use its best efforts to send the corrected Personal Information to each third party to which it has disclosed the information during the preceding year.
The written request must provide sufficient detail to enable Bentall, with a reasonable effort, to identify the individual and the personal information or correction being sought.
Principle 10 – Challenging Compliance
An individual may, upon written request, address a challenge concerning Bentall’s compliance with the Privacy Policy to our Privacy Officer.
If you have any questions or concerns about this Privacy Policy or about the collection, use, or disclosure of your Personal Information by Bentall, please contact our Privacy Officer.
|