Storage Limitation: Personal data is kept in a form that permits identification for no longer than is necessary for the intended purpose.

Integrity and Confidentiality: LSSE processes personal data securely, maintaining its confidentiality, integrity, and availability. Appropriate measures are in place to protect data from unauthorized access, disclosure, alteration, or destruction.

Data Protection Officer (DPO):
LSSE appoints a Data Protection Officer who is responsible for overseeing data protection activities, ensuring compliance with data protection laws, and serving as a point of contact for data subjects and supervisory authorities.

Data Collection and Consent:
LSSE collects personal data only when necessary for specified purposes and with the data subject’s informed and unambiguous consent. Data subjects are informed about the purposes of data collection and their rights.

Data Security:
LSSE implements technical and organizational measures to protect personal data from security breaches and unauthorized access. Data is securely stored, and access is restricted to authorized personnel.

Data Subject Rights:
LSSE recognizes and respects data subject rights, including the right to access, rectification, erasure, and restriction of data processing. Data subjects have the right to object to processing and the right to data portability.

Data Transfers:
LSSE ensures that international data transfers comply with applicable data protection laws. Adequate safeguards are in place when transferring data outside the European Economic Area (EEA).

Data Breach Response:
In the event of a data breach, LSSE follows a structured response procedure. The Information Commissioner’s Office (ICO) and affected data subjects are notified when required by law.

Data Privacy Impact Assessments (DPIAs):
LSSE conducts DPIAs for high-risk data processing activities to assess and mitigate potential data protection risks.

Training and Awareness:
LSSE provides data protection training and awareness programs to personnel to ensure a comprehensive understanding of data protection principles and compliance requirements.

Policy Review and Updates:
This Data Protection Policy is reviewed and updated regularly to ensure compliance with evolving data protection regulations and best practices.