Last updated: February 2019
This privacy notice discloses the privacy practices for the Site. This privacy notice applies solely to information collected by the Site, which together with our terms and conditions govern REDD Management, Strategy, and Financial (RMSF) Corporation and its subsidiaries, as applicable (collectively, “RMSF” ”Corporation” “we” or “us”) relationship with you in relation to the Site.
Information Collection, Use, and Sharing
We are the sole owners of the information collected on the Site. We only have access to/collect information that you voluntarily give us via email or other direct contact from you. We will not sell or rent this information to anyone.
We will use your information to respond to you, regarding the reason you contacted us. We will not share your information with any third party outside of our organization, other than as necessary to fulfill your request.
Your Access to and Control Over Information
You may opt out of any future contacts from us at any time. You can do the following at any time by contacting us via the email address or phone number given on the Site:
See what data we have about you, if any.
Change/correct any data we have about you.
Have us delete any data we have about you.
Express any concern you have about our use of your data.
We take precautions to protect your information. When you submit sensitive information via the Site, your information is protected both online and offline.
Wherever we collect sensitive information (such as personal data), that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a lock icon in the address bar and looking for “https” at the beginning of the address of the Site.
While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, human resources) are granted access to personally identifiable information. The computers/servers in which we store personally identifiable information are kept in a secure environment.
We use “cookies” on the Site. A cookie is a piece of data stored on a site visitor’s hard drive to help us improve your access to the Site and identify repeat visitors to the Site. Cookies can also enable us to track and target the interests of our users to enhance the experience on the Site. Usage of a cookie is in no way linked to any personally identifiable information on the Site.
The Site contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave the Site and to read the privacy statements of any other site that collects personally identifiable information.
Email Alerts, Surveys & Contests
From time-to-time the Site requests information via email alerts, surveys or contests. Participation in these email alerts, surveys or contests is completely voluntary and you may choose whether or not to participate and therefore disclose this information. Information requested may include contact information (such as name, address, phone number, email address). Contact information will be used to for notifications purposes. Survey information will be used for purposes of monitoring or improving the use and satisfaction of the Site.
In connection with the recruitment process, the Corporation or relevant associated entities collects and processes as data controller certain personal data about the applicants and potential employees.
Information and Purpose
We collect and process the following types of personal information about you:
Name, address, e-mail address and phone number
Identity information, such as social security number or similar
Date of employment, place of employment and job title
Salaries and pensions, wage subsidies, information relevant to payroll.
Personnel administrative information, such as education and qualifications, courses, competence profile, job wishes, employment, trusts.
Criminal records, child certificates and safety approval information.
We collect and process personal data for the following purposes:
To ensure necessary and relevant information in relation to the recruitment process, including evaluation of the candidate.
To comply with any law, rule, regulation, lawful an binding determination, decision or in co-operation with any governmental authority of any country, including:
Compliance with basic principles for processing of personal data and legal basis for processing.
Implementation and maintenance of technical and organizational security measures, including but not limited to prevent unauthorized access to systems and information, prevent receipt or distribution of malicious code, termination of denial-of-service-attacks and damage to computer systems and electronic communication systems.
Investigation of a suspected or known security breaches and reporting of such breach to individuals and authorities.
To process and respond to requests and complaints from data subjects and others.
Handling of inspections and requests from authorities.
Management of disputes with data subjects and third parties.
Automated, Individual decision making
Personal data is not used for automated, individual decision making or profiling.
The Legal Basis for Processing the Personal Information
The legal basis for processing of general and sensitive personal data as outlined above is the potential employment contract.
When we collect personal information directly from you for the recruitment, it is necessary in order for us to enter into a contract with you. You are not obligated to provide the personal information to us. If you do not provide us with the personal information described above, you will not be able to be employed with RMSF Corporation.
if the processing is based on a consent you have a right to withdraw such content, which means that the information can no longer be processed by RMSF Corporation, unless the processing can be based on another legal basis. The withdrawal of the contest, will not affect the processing already incurred prior to withdrawal of the consent.
Disclosure of Personal Information
Personal information will be disclosed to and shared with the following recipients:
The RMSF Corporation and its subsidiary companies
Tax authorities relating to taxable benefits
Banks and insurance companies
Transfer of Personal Information to Data Processors
We transfer your personal data to certain suppliers who process the information on behalf of the Corporation.
We retain your personal data as long as necessary in order to fulfill the above stated purpose. Personal data relaed to a recruitment process will be deleted after 6 months, unless you consent to prolong the retention period. If you are employed, a different retention period will apply, however, personal data will not be retained longer than 5 years after resignation unless there are other requirements.
You have among other things right to access in personal data, right to rectify incorrect information, right to deletion of information, right to limit information, right to data portability and right to object to the processing of personal data, including automated, individual decisions.
Security and Access to Employee Information
The Corporation, as a data controller, has a duty to protect the personal data we process about our employees. You read more about the framework for processing personal data in RMSF’s Personal Data Protection Policy and Information Security Policy.
The Corporation recognizes the confidential nature of the Personal Information in its care and is accountable for the compliance of itself and its directors, officers, management, employees, representatives, and agents including consultants and independent contractors (the “Staff”) in protecting this Personal Information.
Personal Information includes but is not limited to name, home address, home phone number, home email address, identity verification information, Social Security Number, physical description, age, gender, salary, education, professional designation, personal hobbies and activities, medical history, employment history, credit history, contents of resume, references, interview notes, performance review notes and emergency contact information.
Personal Information will not include the Individual’s business title, and business address and contact information when used or disclosed for the purposes of reasonable business communication.
The Corporation and the Staff will at all times respect the confidentiality of the Personal Information placed in its care. The Corporation will endeavor to ensure that the policies affecting the collection, storage and disclosure of Personal Information reflect the confidential nature of the information.
The Corporation will comply with all applicable privacy legislation and regulations in force now and in the future related to protecting the confidentiality of Personal Information.
Purposes for which Personal Information is Collected
Personal Information will be collected, used and disclosed for purposes pertaining to the Individual’s employment relationship with the Corporation, including but not limited to the administration of employee hiring, performance reviews, the administration of employee payroll, processing of employee benefit claims, and for the purpose of complying with all applicable labor and employment legislation.
The purposes for collecting Personal Information will be documented by the Corporation. Personal Information will only be used for the stated purpose or purposes for which it was originally collected. The purposes for which Personal Information is being collected will be identified orally or in writing to the Individual before it is collected. The person collecting the information will be able to explain the purpose at the time that the information is collected.
The Corporation may use Personal Information for a purpose other than the originally stated purpose where the new purpose is required by law or where the Corporation has obtained consent in writing from the affected Individual for each new purpose.
Knowledge and Consent
Consent will not be obtained through deception or misrepresentation.
Any use or disclosure of Personal Information will be within the reasonable expectations of the Individual.
Subject to legal and contractual obligations, an Individual may withdraw their consent on reasonable notice.
Legislation and Regulation
Where the Corporation has Individuals living and working in different jurisdictions the specific rights and obligations of Individuals may vary between jurisdictions.
Scope and Application
Collection of Personal Information
The type and amount of Personal Information collected by the Corporation will be limited to the minimum necessary to accomplish reasonable business purposes. Personal Information will not be collected maliciously, indiscriminately or without a reasonable business purpose.
Personal Information will be collected using fair and lawful means.
Access by Authorized Representatives
All Personal Information will be released internally only on a need-to-know basis. In the course of normal and reasonable business practices it is the policy of the Corporation to grant designated Corporation representatives access to Personal Information files. This access will not exceed that necessary to accomplish the specific business function of the Corporation representative nor the purpose for which the information was originally collected.
Rights of Access and Correction
The Corporation will make reasonable efforts to ensure that Personal Information is at all times complete and accurate for its stated purpose.
The Corporation will also provide a specific summary of how the Personal Information has been used and to whom it has been disclosed. Where a detailed account of disclosure is not available, the Corporation will provide a list of organizations to which the Personal Information may have been disclosed.
The Personal Information disclosed to an Individual must be in a form that is reasonable and understandable. Where the meaning of information is not clear then translations and explanations will be provided without additional cost.
Where an Individual suspects that an error exists in their Personal Information, the Individual may submit a request in writing for correction. This request should include any relevant information substantiating the error and should describe the correction to be made. The Corporation will make all reasonable efforts to address any request for correction.
Where the Individual successfully demonstrates an error in their Personal Information the Corporation will make appropriate corrections. Any modifications, additions or deletions to the Individual’s Personal Information will be made only by an authorized personnel officer.
Where a request for correction is not successful, the details and substantiating evidence of the request will be recorded and retained by the Corporation.
The Corporation will endeavor to respond promptly to any reasonable request for disclosure and correction made by an Individual to ensure the continued accuracy of Personal Information.
In some instances the Corporation may be required to limit access to Personal Information because of statutory or regulatory requirements. In all instances however the Corporation will make all reasonable efforts to comply with the Individual’s request for access and correction to the extent of what is allowed by statute or regulation.
The Corporation may refuse access to portions of the Personal Information of an Individual where it is found to contain Personal Information pertaining to another Individual.
Use and Disclosure of Personal Information
The Corporation and the Staff will keep confidential all Personal Information in its control excep
t where one or more of the following conditions apply:
where the Individual who is the subject of disclosure has provided written consent;
where the disclosure is in accord with the purposes for which the Personal Information was originally collected;
where the disclosure is for the purpose of providing employment references to prospective employers and where the Personal Information disclosed is limited to information considered reasonably necessary for the purpose of providing employment references;
where the Corporation is permitted or required to do so by applicable legislation or regulation;
where the disclosure is directed to health benefit providers and where the purpose of the disclosure is in accord with the purposes for which the Personal Information was originally collected;
where the disclosure is required by authorized government representatives who are acting to enforce any federal or state law or carrying out an investigation relating to the enforcement of any federal or state law or gathering information for the purposes of enforcing any federal or state law;
where the Corporation is required to comply with valid court orders, warrants or subpoenas or other valid legal processes and
in an emergency to protect the physical safety of any person or group of persons.
The Corporation will take reasonable care to maintain a disclosure transaction log that accurately records all use, corrections, additions, deletions and disclosures including the names of all parties enabling the transaction. Where the Personal Information of the Individual is disclosed to any person or organization, the name of the person or organization to which the Personal Information is disclosed will be recorded along with a reasonably thorough description of the purpose of the disclosure.
Confidentiality of Drug and Alcohol Results
Any documentation collected by the Corporation related to drug or alcohol impairment test results will remain strictly confidential and will be stored and secured in a separate location from Personal Information and will be safeguarded with a greater level of protection.
Any documentation collected by the Corporation related to drug or alcohol impairment test results may not be disclosed except:
to the Individual or any other person designated in writing by the Individual;
to the Corporation employee designated to evaluate these test results and
as ordered by any government agency authorized by law or any court having jurisdiction.
Ownership of Personal Information
Retention and Disposal of Personal Information
Any Personal Information collected by the Corporation will be retained by the Corporation during the period of active employment of the Individual as well as during the post-employment period only as long as the Personal Information is require to serve its original purposes or as directed by applicable legislation or regulation.
Personal Information that is no longer needed for its stated purpose will be destroyed, erased or made anonymous.
The Corporation will ensure that all practices and procedures relating to the disposal of Personal Information will respect the fundamental policy of confidentiality. All Personal Information disposal procedures, including the disposal of computerized data storage devices, will ensure the complete destruction of Personal Information so that there will be no risk of subsequent unauthorized disclosure of Personal Information.
The rights and protections of the Corporation’s Privacy Policies will extend to deceased Individuals.
The Corporation will take and enforce all reasonable security measures appropriate for the sensitivity of the information to ensure that all Personal Information for every Individual is protected against any form of unauthorized use including but not limited to accidental or malicious disclosure, unauthorized access, unauthorized modification, unauthorized duplication or theft.
Methods of security will include but not be limited to the following:
physical security including locked filing cabinets and secure-access offices;
organizational security including security clearances and access limited on a “need-to-know” basis and
technological security including passwords and encryption.
Knowledge of Unauthorized Disclosure
Responsibility for the security of Personal Information is a responsibility that the Corporation holds in very serious regard. Any Staff having knowledge of an impending unauthorized disclosure, whether intentional or unintentional, and who fail to act to prevent the unauthorized breach will be subject to sanction as described in the Enforcement section of this document including the immediate dismissal of the offending Staff.
Mediation and Arbitration
If the dispute is not resolved within a reasonable period then any or all outstanding issues may be submitted to final and binding arbitration in accordance with the laws of the State of Missouri. The arbitrator’s award will be final, and judgment may be entered upon it by any court having jurisdiction within the State of Missouri.