The sponsors and all participating entities of Sri Lanka’s Healthiest Workplace by AIA Vitality are particularly concerned with data protection. They are fully committed to compliance with all relevant legal and regulatory requirements concerning data protection, as applicable to them in addition to their internal data protection standards and protect any information collected from organisations or employees. They follow a number of procedures that enable them to meet their obligations and responsibilities under such applicable and regulatory requirements concerning data protection. As the principal contractor running and analysing the Sri Lanka’s Healthiest Workplace by AIA Vitality surveys, RAND Europe CIC has a data protection policy in place, and requires its staff to sign a statement that they have read and understood this, as well as requiring them to complete annual information security awareness training and sign non-disclosure agreements.
Organisations’ employee information, Organisational Health Assessment, and Employee Health Assessment responses will be held by RAND Europe CIC and its data collection partner, Survey Sampling UK Limited (SSI). SSI operates within the Market Research Society code of conduct. Any personal details will not be shared with any other party than RAND Europe CIC and SSI. All data will be held strictly in accordance with all applicable legal and regulatory requirements concerning data protection.
All information submitted through the assessments will be used only for research purposes. Responses will be kept confidential and will not in any way be used to identify individuals. Any electronic transmission of individually identifiable data will be encrypted.
The provision of your personal data is voluntary. You may choose not to provide us with the requested data, but failure to do so may inhibit our ability to provide survey report to you and aggregated report to employers.
The Organisational Health Report will display employee responses in a consolidated format so that individual responses cannot be matched to personal identifiers such as names, residential addresses, email addresses or dates of birth.
AIA, sponsors and employers will only receive the survey results in an anonymous and consolidated format and will not have access to any personal employee data.
By entering Sri Lanka’s Healthiest Workplace by AIA Vitality, organisations and their employees agree and give consent to RAND Europe CIC and SSI holding and analysing sensitive personal and health information.
All communication from Sri Lanka’s Healthiest Workplace by AIA Vitality to employees will deal only with the research initiative.
Findings derived from aggregating all responses will be made publicly available via reports and research articles.
AIA reserves the right to use data from repeat participants to compare aggregated data across years. This will only be done for participants who agree to this in the relevant section of the Employee Health Assessment.
Where permitted by law, your personal data may be provided to any of the above-mentioned parties who may be located in Sri Lanka or outside of Sri Lanka. Your information may be transferred to, stored, and processed in Sri Lanka or any other jurisdictions where the aforementioned parties are located, or jurisdictions where a third-party contractor is located or from which the third party contractor provides us services. By providing us with your personal information or using our services or our website or applications, you consent to the transfer of such information outside Sri Lanka to our facilities or to those third parties with whom we share it as described above.
Access Rights to Personal Data
You have the right to:
verify whether RAND Europe CIC and SSI holds any personal data about you and to access any such data;
require RAND Europe CIC and SSI to correct any personal data relating to you which is inaccurate; and requests for access, correction or other queries relating to your personal data should be addressed to The Data Protection Officer.
RAND Europe CIC and SSI have the right to charge costs which are directly related to and necessary for the processing of any personal data access request.