Personal Data Protection Policy
1. Introduction
At One Gasmaster (“OGM” or “The Group”) we are committed to protecting the privacy and security of personal data provided by our suppliers, vendors, contractors, and customer/partners. This Data Protection Policy outlines the principles and practices we follow to ensure that all personal data we collect, store, or process is handled responsibly, in compliance with applicable data protection laws and regulations, including the General Data Protection Regulation (GDPR) and other relevant data protection laws.
2. Purpose
The purpose of this policy is to inform our partners about the ways we collect, store, process, and protect their personal data, and the responsibilities that they must undertake to ensure that data protection standards are maintained when working with us.
3. Data Collection and Use
We collect and process the following types of personal data:
• Personal Identifiable Information (PII): Full name, address, contact details, business information, tax identification, and other similar information.
• Transaction Data: Order details, invoices, payments, purchase history, and related communication.
• Other Relevant Information: Any information relevant to the services or products being provided to us or by us.
We collect this data for the purposes of:
• Contract management and service delivery
• Communication and correspondence
• Legal and financial obligations
• Providing customer service and support
• Compliance with regulatory requirements
4. Data Protection Principles
We commit to the following principles when handling personal data:
• Lawfulness, fairness, and transparency: We will process personal data lawfully, fairly, and transparently.
• Purpose limitation: We will collect data only for specified, legitimate purposes and will not process it in a manner that is incompatible with those purposes.
• Data minimization: We will ensure that only the minimum necessary data is collected and processed.
• Accuracy: We will take steps to ensure that personal data is accurate, complete, and up to date.
• Storage limitation: We will store personal data only for as long as necessary for the purposes it was collected.
• Integrity and confidentiality: We will ensure appropriate security measures are in place to protect personal data from unauthorized access, loss, or misuse.
• Accountability: We will hold ourselves and our partners accountable for complying with these principles.
5. Responsibilities of Partners
To maintain high standards of data protection, our partners (suppliers, vendors, contractors, and customers) must:
• Ensure Accuracy: Provide accurate, complete, and up-to-date information when requested.
• Respect Data Security: Implement appropriate security measures to protect personal data from unauthorized access or disclosure.
• Limit Data Sharing: Do not share personal data with unauthorized third parties without prior consent unless required by law.
• Notify Us of Data Breaches: Immediately inform us of any data breaches or potential vulnerabilities involving personal data.
• Compliance with Laws: Ensure that any personal data shared with us complies with applicable data protection laws and regulations.
6. Data Sharing and Third Parties
We may share personal data among any other company within the Group and with third parties (such as service providers, regulators, or business partners) when required for the delivery of services or legal obligations. Any third parties with access to personal data will be required to comply with the same data protection standards, including:
• Data processors: External service providers who process personal data on our behalf.
• Data controllers: Partners or authorities who independently determine the purpose and means of processing personal data.
Any data sharing will be governed by strict contractual agreements to ensure compliance with applicable data protection laws.
7. Data Subject Rights
Under applicable data protection laws, data subjects (individuals whose personal data is processed) have the following rights:
• Right of Access: The right to request a copy of the personal data we hold.
• Right to Rectification: The right to request corrections to inaccurate or incomplete personal data.
• Right to Erasure: The right to request the deletion of personal data, subject to certain conditions.
• Right to Restriction of Processing: The right to request that the processing of personal data be restricted in specific circumstances.
• Right to Object: The right to object to the processing of personal data in certain situations.
• Right to Data Portability: The right to request personal data in a structured, commonly used format for transfer to another organization.
8. Data Security
We are committed to safeguarding personal data through:
• Physical, technical, and organizational security measures to prevent unauthorized access, use, disclosure, alteration, or destruction of data.
• Encryption: Where appropriate, encryption techniques will be used to protect sensitive data during transmission.
• Employee Training: All employees and partners who handle personal data will receive regular data protection training.
9. Data Retention
Personal data will be retained only for as long as necessary for the purposes for which it was collected. Data may be retained for longer periods if required for legal or regulatory reasons, after which it will be securely deleted.
10. Data Transfers
In certain cases, personal data may be transferred to other countries. If this occurs, we will ensure that appropriate safeguards, such as Standard Contractual Clauses or Binding Corporate Rules, are in place to protect the data.
11. Amendments to the Policy
We reserve the right to update or amend this Data Protection Policy at any time to reflect changes in laws, regulations, or business practices. We will notify partners of any material changes to this policy.
12. Contact Information
If you have any questions or concerns about this policy or our data protection practices, please contact us at:
Data Protection Department : Human Resources Department
Email: ogm.whistleblowing@onegasmaster.com
Click here for Whistleblower Reporting Form