PRIVACY POLICY

PURPOSE

This Data Privacy Policy outlines the principles and practices that Altus Group follows to protect the personal and sensitive information of our employees and customers.

SCOPE

This policy applies to all employees, contractors, and prospective workers at Altus Group, as well as our customers and covers the collection, storage, use, and disclosure of personal information obtained directly through our traffic management and Altus Group, as well as from third parties.

POLICY

Personal Information identifies an individual directly or when combined with other data. Data Subjects are individuals whose personal data is collected or processed. Data processing includes handling this data. Information and Technology are considered assets.

PRIVACY PRINCIPLES

Altus Group adheres to the following principles to ensure the protection of personal information:

a)    Lawfulness, Fairness and Transparency: Personal information will be processed lawfully, fairly and transparently.

b)    Purpose Limitation: The collection of personal information will be specified explicitly and used only for legitimate purposes.

c)     Data Minimisation: Only personal information necessary for its processing will be collected.

d)    Accuracy: Personal information will be accurate and, when necessary, kept up to date.

e)    Storage Limitation: Personal information will be retained only for as long as necessary for the purposes for which it was collected.

f)      Security, Integrity and Confidentiality: Personal information will be processed to ensure appropriate security, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage.

USE AND DISCLOSURE

Your personal information may be used in conjunction with:

a)    Work purposes: This includes pay, assessments (e.g., performance and medical), rehabilitation, competence and training needs, complaint or investigation management, and other authorised work purposes.

b)    Operational Improvement: Enhancing company operations' safety, efficiency, or effectiveness.

c)     Enquiries: To respond to enquiries, including compliance with legal and regulatory requirements.

d)    Other Purposes: For other purposes with your consent or as the law permits.

YOUR RIGHTS

Data subjects have the following rights:

a)    Right to Access: The right to access their personal information.

b)    Right to Rectification: The right to request correction of inaccurate personal information.

c)     Right to Erasure: The right to request the deletion of personal information under certain conditions.

d)    Right to Restrict Processing: The right to request the restriction of the processing of personal information.

e)    Right to Data Portability: The right to receive personal information in a structured, commonly used format.

f)      Right to Object: The right to object to processing personal information in certain circumstances.