We must collect, use and retain only as much personal information as we need for legitimate business, human resources or scientific purposes, or to satisfy any legal requirements. Where required by law, we must also obtain appropriate consent to such collection and use, and inform individuals about the purposes for which their personal information may be used.
Once its purpose has been fulfilled, personal information must be destroyed in accordance with our legal obligations and Company document retention policies.
We must only share personal information with affiliates and third parties if they have a legitimate need to know it, and only if we are reasonably assured that they will suitably safeguard the information once it is in their hands, or if required by law.
We must give special consideration to any additional applicable requirements before sensitive personal information is collected or used, or where information is transferred or processed outside its country of origin, because it may become subject to different laws with different or competing requirements.
|
QUICK REFERENCE
|
>
|
Comply with all data protection and associated laws applicable to the countries in which we gather and hold personal information.
|
>
|
If you are in doubt as to the proposed use of personal information, you should seek further advice and approval from a data privacy specialist before collecting, accessing or using such information.
|
>
|
Obtain approval from a data privacy specialist before transferring personal information outside its country of origin, or giving other markets electronic access to it.
|
>
|
Do not record things about people that you would be embarrassed to say to them directly.
|
|
|