The collection, processing, and use of personal information must be undertaken in accordance with the Company’s Principles for the Management of Personal Data, approved by the supervisor, and then sent to the Legal Department and the Information Technology Unit for review.