Data Protection Notification for data subject category "GDPR students"
Notification drafted on May 24, 2018
Click to see the data categories covered by all our processes
Our 9 processes engage 15 data categories: ip address; nation; browser name; time; session cookies; name;
photograph; identifier; biometrics; health; email address; password; session cookie; identifier local; and
address.
We process your data in 9 different ways
Process: web site analytics and all other processing common to all web site users
| Dataset |
Process |
Legal Basis |
Purposes |
Consents |
Transfer Consents |
| gdpr360 weblogs |
web site analytics and all other processing common to all web site users |
legitimate interests |
web server security; visitor compliance with intellectual property and criminal law; and web
site monitoring. |
|
|
More information specific to this process "web site analytics and all other processing common to
all web site users"?
Click to see the data categories used in this process
Our process engages 4 data categories: ip address; nation; browser name; and time.
Storage
We store your data in Germany (DE), and United Kingdom (UK).
Data Retention Criteria
We retain your data for 365 days.
Legitimate Interests
Our legitimate interests justifications are: webserver security; visitor compliance; and web site
monitoring.
Sources from which we receive your data
Our data source is yourself.
Categories of Recipients of your data
law enforcement
Process: General cookie management processing
| Dataset |
Process |
Legal Basis |
Purposes |
Consents |
Transfer Consents |
| All users |
General cookie management processing |
legitimate interests |
managing web site accounts. |
|
|
More information specific to this process "General cookie management processing"?
Click to see the data categories used in this process
Our process engages 1 data categories: session cookies.
Storage
We store your data in Germany (DE), and United Kingdom (UK).
Data Retention Criteria
We retain session cookies until the end of your browser session
Legitimate Interests
Our legitimate interests justification is managing website accounts.
Sources from which we receive your data
Our data source is yourself.
Categories of Recipients of your data
[none]
Process: identify and register students on physical courses
| Dataset |
Process |
Legal Basis |
Purposes |
Consents |
Transfer Consents |
| students |
identify and register students on physical courses |
legitimate interests |
identify the persons whom we are teaching, examining, certifying, and accrediting. |
|
|
More information specific to this process "identify and register students on physical courses"?
Click to see the data categories used in this process
Our process engages 5 data categories: name; photograph; identifier; biometrics; and health.
Storage
We store your data in Germany (DE), and United Kingdom (UK).
Data Retention Criteria
We will keep the data until after your exam results and after that if you have consented to our
certification/accreditation processing
Legitimate Interests
Our legitimate interests justification is managing website accounts.
Sources from which we receive your data
Our data source is yourself.
Categories of Recipients of your data
[none]
Process: exams and support including resits
| Dataset |
Process |
Legal Basis |
Purposes |
Consents |
Transfer Consents |
| students |
exams and support including resits |
consent |
provide individual internet access to examinations and any course-associated support services.
|
SIGN to give consent to process |
|
More information specific to this process "exams and support including resits"?
Click to see the data categories used in this process
Our process engages 4 data categories: name; email address; password; and session cookie.
Consents
If present, entries in the Consent, Transfer Consents, and/or Safeguards columns above may be marked
"consent". If you are viewing this electronically on the web or as a PDF, please click on the link
if you wish to give your consent or to withdraw your consent to processing. Otherwise if there is no
link, or the entry is an asterisk ("*") or if you are viewing this as a printed document, please
write the date and your initials if you wish to give consent.
Consequences of Withdrawing Consent
If you do not give consent, we will avoid processing within the scope of that non-consent. Consent
may be withdrawn at any time, without affecting pre-withdrawal processing.
Storage
We store your data in Germany (DE), and United Kingdom (UK).
Data Retention Criteria
We will keep the data until after your exam and after that if you have consented to our
certification/accreditation processing
Legal Bases for Processing
Our processing legal basis is
consent
Sources from which we receive your data
Our data source is yourself.
Categories of Recipients of your data
[none]
Process: exam token processing
| Dataset |
Process |
Legal Basis |
Purposes |
Consents |
Transfer Consents |
| students |
exam token processing |
consent |
provide individual internet access to examinations and any course-associated support services.
|
SIGN to give consent to process |
|
More information specific to this process "exam token processing"?
Click to see the data categories used in this process
Our process engages 1 data categories: identifier local.
Consents
If present, entries in the Consent, Transfer Consents, and/or Safeguards columns above may be marked
"consent". If you are viewing this electronically on the web or as a PDF, please click on the link
if you wish to give your consent or to withdraw your consent to processing. Otherwise if there is no
link, or the entry is an asterisk ("*") or if you are viewing this as a printed document, please
write the date and your initials if you wish to give consent.
Consequences of Withdrawing Consent
If you do not give consent, we will avoid processing within the scope of that non-consent. Consent
may be withdrawn at any time, without affecting pre-withdrawal processing.
Storage
We store your data in Germany (DE), and United Kingdom (UK).
Data Retention Criteria
We will keep the data until after your exam results and after that if you have consented to our
certification/accreditation processing
Legal Bases for Processing
Our processing legal basis is
consent
Sources from which we receive your data
Our data source is yourself.
Categories of Recipients of your data
[none]
Process: feedback processing
| Dataset |
Process |
Legal Basis |
Purposes |
Consents |
Transfer Consents |
| students |
feedback processing |
legitimate interests |
collect your feedback as to the course itself and satisfy potential future certification
obligations. |
|
|
More information specific to this process "feedback processing"?
Click to see the data categories used in this process
Our process engages 1 data categories: name.
Storage
We store your data in Germany (DE), and United Kingdom (UK).
Data Retention Criteria
We will retain this data until you withdraw consent
Legitimate Interests
Our legitimate interests justification is feedback processing.
Sources from which we receive your data
Our data source is yourself.
Categories of Recipients of your data
[none]
Process: certification/accreditation processing
| Dataset |
Process |
Legal Basis |
Purposes |
Consents |
Transfer Consents |
| students |
certification/accreditation processing |
consent |
provide you with post-examination certifications and/or accreditations. |
SIGN to give consent to process |
SIGN to give consent to transfer |
More information specific to this process "certification/accreditation processing"?
Click to see the data categories used in this process
Our process engages 5 data categories: name; address; email address; photograph; and identifier.
Consents
If present, entries in the Consent, Transfer Consents, and/or Safeguards columns above may be marked
"consent". If you are viewing this electronically on the web or as a PDF, please click on the link
if you wish to give your consent or to withdraw your consent to processing. Otherwise if there is no
link, or the entry is an asterisk ("*") or if you are viewing this as a printed document, please
write the date and your initials if you wish to give consent.
Consequences of Withdrawing Consent
If you do not give consent, we will avoid processing within the scope of that non-consent. Consent
may be withdrawn at any time, without affecting pre-withdrawal processing.
Storage
We store your data in Germany (DE), and United Kingdom (UK).
Data Retention Criteria
We will keep this data indefinitely as evidence supporting your certification and/or accreditation
until you withdraw consent
Legal Bases for Processing
Our processing legal basis is
consent
Sources from which we receive your data
Our data source is yourself.
Categories of Recipients of your data
accreditation authorities
Process: alumni communications
| Dataset |
Process |
Legal Basis |
Purposes |
Consents |
Transfer Consents |
| students |
alumni communications |
consent |
provide you with non-marketing post-course communications such as clarifications/updates. |
SIGN to give consent to process |
|
More information specific to this process "alumni communications"?
Click to see the data categories used in this process
Our process engages 3 data categories: name; address; and email address.
Consents
If present, entries in the Consent, Transfer Consents, and/or Safeguards columns above may be marked
"consent". If you are viewing this electronically on the web or as a PDF, please click on the link
if you wish to give your consent or to withdraw your consent to processing. Otherwise if there is no
link, or the entry is an asterisk ("*") or if you are viewing this as a printed document, please
write the date and your initials if you wish to give consent.
Consequences of Withdrawing Consent
If you do not give consent, we will avoid processing within the scope of that non-consent. Consent
may be withdrawn at any time, without affecting pre-withdrawal processing.
Storage
We store your data in Germany (DE), and United Kingdom (UK).
Data Retention Criteria
We will retain this data until you withdraw consent
Legal Bases for Processing
Our processing legal basis is
consent
Sources from which we receive your data
Our data source is yourself.
Categories of Recipients of your data
[none]
Process: obligations
| Dataset |
Process |
Legal Basis |
Purposes |
Consents |
Transfer Consents |
| students |
obligations |
legal obligation |
comply with generic statutory obligations (accounting, tax, money-laundering etc).. |
|
|
More information specific to this process "obligations"?
Click to see the data categories used in this process
Our process engages 3 data categories: name; address; and email address.
Storage
We store your data in Germany (DE), and United Kingdom (UK).
Data Retention Criteria
We will retain this data for seven years after your last communication to us
Sources from which we receive your data
Our data source is yourself.
Categories of Recipients of your data
government
Consents
If present, entries in the Consent, Transfer Consents, and/or Safeguards columns above may be marked
"consent". If you are viewing this electronically on the web or as a PDF, please click on the link if you
wish to give your consent or to withdraw your consent to processing. Otherwise if there is no link, or the
entry is an asterisk ("*") or if you are viewing this as a printed document, please write the date and
your initials if you wish to give consent.
Consequences of Withdrawing Consent
If you do not give consent, any consequences are explained within each relevant process. Consent may be
withdrawn at any time, without affecting pre-withdrawal processing.
Storage
We store your data in Germany (DE), and United Kingdom (UK).
Data Retention Criteria
We retain your data for periods varying from 0.0 to 365 days (click on the table's individual processes
for details).
Legitimate Interests
Our legitimate interests justifications are: webserver security; visitor compliance; web site monitoring;
managing website accounts; and feedback processing.
Sources from which we receive your data
Our data source is yourself.
Categories of Recipients of your data
law enforcement
government
accreditation authorities
Your Rights
You have qualified rights to
access,
rectify, and
erase
your personal data; and to
restrict or
object to processing; and to make your data
portable. Clicking on one of these links will open a new
tab.
Supervisory Authority
You have the right to
complain to a
Supervisory
Authority, and in the UK that is the
ICO. Clicking
on one of these links will open a new tab..
Contact details
Our name/contact details are GDPR360 Limited of GW House, 41 Mayfield Way, Cambourne, CB23 5JA, UK,
info@gdpr360.com
