*BURNS AUTO GROUP, INC.

Privacy Policy

*Burns Auto Group, Inc. for the purpose of this policy will be known as **BAG

**BAG for the purpose of this handbook is inclusive of the following companies:

Burns Auto Group, Inc.

Paul Burns Auto Center, Inc.

Burns Collision Center LLC

Burns Service Center LLC

1. Introduction 

This Policy Document encompasses all aspects of privacy surrounding personal information obtained for potential hires within the company. All company employees having access to candidate information must read this document in its entirety and understand this policy fully. This document will be reviewed and updated by Management on an annual basis or when relevant to include newly developed privacy standards into the policy.

2. Privacy Policy

Burns Auto Group, Inc handles employment applications regularly. Sensitive Information must have adequate safeguards in place to protect them, to protect candidate privacy, to ensure compliance with various regulations and to guard the future of the organization.

Burns Auto Group, Inc. commits to respecting the privacy of all its applicants and to protecting any data about them from outside parties. To this end management is committed to maintaining a secure environment in which to process applicant information so that we can meet these promises.

Burns Auto Group, Inc. does not sell applicant personal information to third parties.

Information is to be collected solely for evaluating qualifications, conducting background checks, and contacting the applicant. The information collected is directly related to the hiring process, such as contact details, education and work history.

Employees handling personal applicant/employee data should ensure:

l Handle Company and applicant/employee information in a manner that fits with their sensitivity.

l Do not disclose personnel information unless authorized.

l Keep passwords and accounts secure.

l Request approval from management prior to establishing any new software or hardware, third party connections, etc. 

l Do not install unauthorized software or hardware, including modems and wireless access unless you have explicit management approval.

l Always leave desks clear of sensitive applicant data and lock computer screens when unattended.

l Information security incidents must be reported, without delay, to the individual responsible for incident response locally – Please find out who this is.

3. Protect Stored Data 

· All candidate data stored and handled by Burns Auto Group, Inc. and its employees must be securely protected against unauthorized use at all times. 

· Any sensitive data that is no longer required by Burns Auto Group, Inc. for business reasons must be discarded in a secure and irrecoverable manner. Information obtained from potential candidates may be stored for up to six months for candidates who have not successfully completed the review, interview or hiring process.

We each have a responsibility for ensuring our company’s systems and data are protected from unauthorized access and improper use. If you are unclear about any of the policies detailed herein you should seek advice and guidance from your line manager.