Privacy Policy

CCK FINANCIAL SOLUTIONS is committed to protecting personal data and ensuring compliance with applicable data protection laws and ISO/IEC 27001 requirements. All personal data processed by the organization must be handled lawfully, fairly, and transparently.

We only collect personal data necessary for legitimate business purposes and ensure it is accurate, relevant, and limited to what is required. Data must be kept up to date, stored securely, and retained only for as long as necessary or legally required. Personal data will not be disclosed to unauthorized parties and will only be shared with approved third parties under appropriate agreements that ensure confidentiality and compliance with data protection standards.

All employees, contractors, and third parties with access to personal data are required to maintain confidentiality and protect data from unauthorized access, alteration, loss, or destruction. Technical and organizational controls, including encryption, access management, audit trails, and secure disposal methods, must always be applied.

Individuals have the right to access their personal data, request correction or deletion, restrict or object to processing, and, where applicable, request data portability. Requests must be submitted to the Data Protection Officer (DPO) and handled promptly in line with legal and regulatory requirements.

Any suspected or actual data breach must be reported immediately and will be managed in accordance with the Incident Response Procedure, including regulatory notifications where required.

This policy is mandatory for all staff and third parties handling personal data on behalf of CCK FINANCIAL SOLUTIONS. Non-compliance may result in disciplinary or legal action. The policy will be reviewed regularly to ensure ongoing compliance with ISO/IEC 27001 and evolving legal requirements.