The WPP-Chromatic platform does not require you to provide personal data beyond your username, ID number, mobile phone number, your work email address. This is in line with the Appropriate Data Processing notice and which will have been communicated to you regarding how your personal data is processed in the course of your employment.

PRIVACY POLICY

During the course of its activities, WPP processes personal data of employees (which may be contained either on paper, electronic or otherwise) and for this reason we recognize the need to treat them in an appropriate and legal manner, all of this, in a in accordance with the General Data Protection Regulation ( GDPR). The purpose of this Communication to Employees on Appropriate Data Processing (the Communication) is to inform you of how we treat your personal data.

This Communication is not part of any employment contract and is subject to change at any time, the approval of the employee not being necessary for this purpose. However, we will keep employees informed of any material changes that may occur.

This Communication is an integral part of the WPP Internal Policy Book, and is referenced in the WPP Data Code of Conduct. WPP employees acknowledge that their personal data is processed by WPP in accordance with this Communication and each new employee must sign a copy of it prior to the start of their employment.

We are committed to complying with the seven data protection principles included in the GDPR, namely:

Legality, proper treatment and transparency

limited use

Minimization

Correction

Limited storage

Integrity and confidentiality

Responsibility

'Personal data' means information that we hold about you that can identify you. This may include contact details, any other personal information, photographs, expressions of opinion about you or our intentions about you. 'Processing' means doing something with the data, such as accessing, disclosing, destroying or using the data in any way.

To the extent there is an employment contract between you and WPP, we process your personal data for the purposes of performing the contract itself. In addition, data processing may be necessary for the purpose of protecting your vital interests, protecting our interests or the legitimate interests of third parties. A complete list of conditions or circumstances is included in article 6 of the RGPD.

We only process 'special categories' of personal data, such as ethnic origin, political, religious or similar beliefs, trade union membership, health, sex life, criminal proceedings or convictions, to the extent strictly necessary. We process these 'special categories' on the basis of Article 9 (2)(b) as your employer.

We process personal data of employees for legal, human resources, administrative and managerial reasons, as well as to enable us to fulfill our obligations as an employer, for example, to pay you salary, monitor your performance and to confer benefits related to your employment. .

We process sensitive employee personal data such as:

We will only process your personal data for specific purposes, for purposes that have been notified to you or for other purposes specifically permitted by the Data Processing Addendum.

 

Your personal data will only be processed to the extent necessary for the specific purposes that have been notified to you.

 

We will keep the personal data we store about you accurate and up to date. Please notify us when your personal data changes or when you become aware of any inaccuracies in the personal data we hold about you.

 

We will not keep your personal data for longer than necessary, depending on the purpose pursued. This means that data will be destroyed or deleted from our systems when it is no longer required to maintain it.

You have the right to:

Request access to the personal data we hold about you.

Request that incorrect data be corrected

Prevent data processing that could cause substantial unjustified harm or distress to you or third parties.

Object to decisions that may significantly affect you and that are made by means of only a computer or other automatic process.  

 

We will ensure that appropriate measures are taken against unauthorized or illegal processing of personal data, as well as accidental loss or damage of personal data.

We have procedures and technology in place to keep all personal data secure, from the moment it is obtained to the moment it is destroyed. We will only transfer personal data to third parties if the third party agrees to comply with those policies and procedures, or if the third party implements appropriate measures themselves.

Maintaining security around personal data means ensuring its confidentiality, integrity and availability (for authorized purposes).

Provision of information to third parties 

We will not disclose your personal data to third parties without your consent, unless we are satisfied that such third parties have the right to obtain such data. When we have to disclose your personal data to third parties, we will do so taking into account the seven principles of data protection.

 

In the event that you wish to know what personal data we have about you, you must make a request in writing. Such written requests should be forwarded to your Human Resources Manager.

 

If you consider that the principles of data protection have not been observed in relation to your personal data or that of others, you should bring it to the attention of your line manager. Any breach of the GDPR will be taken seriously and may result in disciplinary action.

I acknowledge and agree to WPP processing my personal data as my employer in accordance with this Notice to Employees on Appropriate Data Processing.